last executing test programs: 2m53.319424654s ago: executing program 4 (id=1307): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a0021030100000000000000021400000000ff000000000018ef15801400010000000000000f0f0000000000000000005b0edb63c2586712957d2de570cecff91c738bc43d1020bfe3459cf0eed0651d25"], 0x34}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001", @ANYRESOCT=r8], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x18}}], 0x1, 0x8000) 2m52.334010315s ago: executing program 4 (id=1308): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000022c0)=""/4107, &(0x7f00000000c0)=0x100b) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x47, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x6, 0x6}]}, 0x10) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db1c", 0x2}], 0x1}, 0x40004854) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500030a0000000007000000000000030006003c00000002000000ac1414bb000000000000000002000100000000000000030d000000000300291d0000000002004e23ffffffff000000000000"], 0x50}, 0x1, 0x7}, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = socket(0x1, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r10], 0x1c}}, 0x4000000) 2m48.858290286s ago: executing program 4 (id=1320): syz_usb_connect(0x0, 0x3e, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x0, 0xb5}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) 2m43.152800933s ago: executing program 4 (id=1336): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffff, 0xb}, &(0x7f0000000240)=0x8) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x58, 0xfffffff6, 0x3, 0x2]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0xffffffff, 0x5, 0x2]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8001, 0x6, 0x7fff, 0xfff, 0x0]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x404c004) 2m42.976898419s ago: executing program 4 (id=1338): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 2m42.721183366s ago: executing program 4 (id=1342): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000180)="04f8c6372af9e2ad2e7a0155fd9194c38b5b1052", 0x14}], 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f00000017c0)) 2m27.459625773s ago: executing program 32 (id=1342): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r3, &(0x7f00000014c0)=[{&(0x7f0000000180)="04f8c6372af9e2ad2e7a0155fd9194c38b5b1052", 0x14}], 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f00000017c0)) 10.392243869s ago: executing program 1 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}}, 0x20}}, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xfe, 0x3}, 0x20) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @loopback, r11}, 0xc) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYRES16=r7], 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES8=r12, @ANYRESDEC=r12, @ANYRESDEC], 0x1c}}, 0x0) (async) recvmmsg$unix(r12, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8.881507688s ago: executing program 5 (id=1842): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1) fcntl$setstatus(r1, 0x4, 0x7c00) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0xa9, &(0x7f0000000240)={@broadcast, @remote, @void, {@generic={0x88e7, "af900f40bda0356a8a81b3db35b3b6ad5c2b9ade431ceff287eabf50329c5e92f80cef8f0489890357bb6817076bbabb8659fde0ef069344fc718379f4224b28d9c177e8b16d1fc84833c2aba92c073332b6436517241011a03f192c84c48512f8553862091382c3a998cc3efa719bb1a85b32e6822a2e451545e9fd89e6012ccf91e9a71cbfbeeb78c3582cba1a6ad9b30d665cee88639f310df3"}}}, 0x0) dup3(r2, r1, 0x0) unshare(0x22020400) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) inotify_add_watch(r4, 0x0, 0x800000d0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) 8.779270698s ago: executing program 1 (id=1843): shutdown(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x7000000, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x3b, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f8521", 0x1, 0x0, 0x13}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r4, 0x0) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) 8.596004609s ago: executing program 3 (id=1845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x5a1340, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) (async) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.487104073s ago: executing program 5 (id=1846): r0 = syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x6, 0x80, 0xca, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0xe6, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x7, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0xa, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x2, 0xd0, 0x1, {0x22, 0xcb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x81, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x40, 0x6}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x0, 0x4, 0xfa, 0xff, 0x6}, 0x24, &(0x7f0000000100)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xc, 0x20, 0x1, 0x5, 0x7c}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "52b9f5d608086081e1dfba4fb22896ab"}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3018}}, {0x87, &(0x7f0000000180)=@string={0x87, 0x3, "2fee560cf94666de0965bfcae29d9880c3d23bdc297fc9a7c95f035bfbdcb111d3961e2f767bd783d7cace9b898049ffec2755817d1aa47ee3e6f4b69f363d05ca74a66d83d11f22fe3398332b46ae530496eb01df1cae900c2899e435375adae0565629fa26ff94d463ad13c51bff46817c7379e5eb4e25ffc320f1bc6729dcc93c3177e3"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}, {0xb0, &(0x7f00000002c0)=@string={0xb0, 0x3, "22a18df5397685c5bce3c952617150d03ee558d919099e8f1b223111f90761b1014f249362a7e22564911a183b1a2e185b0cfbdc01558cbb6a15468173fb55fab14c17843851d5f1e207e875569bc6128cc9c8cf2f676c56e107fa91b895b5339d6de0ff8b7da7488c95fe578d3961805a509eb5916940d897e82ea591dc5e51aa9df953035b04b20eec323f0a9128e816d7caef88ec7ced3504ec09a002a782e5d32e55f0e928ce355a265ed941"}}, {0x9e, &(0x7f0000000440)=@string={0x9e, 0x3, "a19a6df8def1595e1ac79f1657e1ea46ecc5bcbc7d1d5bedeb98327f9a9512a0ffdece2b821d300779f98294972ee0a9a7c372ce9cb54b06cb24ac926c4b198d4ff1ef2df9e6b1308177f25f3b521d0efd826299d1a3e8192caa05da25d9f06dc40033bde9eeba7dcd09e526a968fb7aefce2eff3a0b6374dd84b5f0d603cee00fc5c032f9651992fdfb3d9fe9b1ee9ab8f17037c1bb8c597eeda6c3"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x810}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_ep_write(r0, 0x54, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 8.131170037s ago: executing program 3 (id=1847): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a0021030100000000000000021400000000ff000000000018ef15801400010000000000000f0f0000000000000000005b0edb63c2586712957d2de570cecff91c738bc43d1020bfe3459cf0eed0651d25"], 0x34}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000000000008001", @ANYRESOCT=r8], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x18}}], 0x1, 0x8000) 6.858406478s ago: executing program 3 (id=1849): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8000000200000001, 0x20002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x14, 0x0, 0xdac7a804b810efff}, 0x14}}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2000) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e22, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 5.87539304s ago: executing program 5 (id=1850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000240), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, 0x0, 0x515401, 0x408) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.786837708s ago: executing program 3 (id=1851): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102541db885498b0dbdfdcf1c69407c2c9101276e0102030109021267276a6ea0040901d20400ffffffc5475be05d11a2cca5fca506d77b7149ce9e3139b67fad58cf777db108eb19f72b5a7b2e532452fca64981ccf08b46749a594443b27429948fb53b822820256c294af5d27c573a395d620657755c448d1dc3c835eac2451aae0d"], &(0x7f0000000cc0)={0x0, 0x0, 0x5e, &(0x7f0000000080)=ANY=[]}) unshare(0x28000600) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x1, 0x4, 0xc2, 0x53, 0x3d, 0x2, 0x80, 0x41, 0x6b, 0x45, 0x8, 0x2, 0x1}, {0xb, 0xa7f3, 0x8, 0x8, 0x33, 0xff, 0x4, 0x3, 0xe, 0x7, 0x7, 0x6, 0x1}, {0x0, 0x7, 0xd, 0x10, 0x21, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x6, 0x8, 0x10, 0x2, 0x3, 0x0, 0x3], 0x3000, 0x1011c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x4, @local, 0xf}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001}], 0x38) sendmmsg$inet6(r4, &(0x7f0000000400)=[{{&(0x7f0000000bc0)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x8}, 0x6}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000c00)='g', 0x1}], 0x1}}], 0x1, 0x840) 4.849917654s ago: executing program 5 (id=1853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000c0000000000008bc60025000081"], 0x19) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) (rerun: 32) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) timer_delete(r6) (rerun: 32) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000200)=0x7) (async) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYBLOB], 0xd0}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0xfffffffffffffe56, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r1, 0x1}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x88, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 4.541037092s ago: executing program 0 (id=1854): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 4.539331715s ago: executing program 1 (id=1855): socket$inet6(0xa, 0x800, 0xa01) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x208, 0x2100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0x58) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.415003692s ago: executing program 2 (id=1856): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000640)=0xe000, 0x1fff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x40, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./bus\x00', 0x1000) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) r5 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2696, 0x1000, 0x3, 0x40000333}, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x40, 0x9, 0x0, 0x8, @mcast1, @mcast1, 0x20, 0x8000, 0x0, 0x200}}) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4.414488833s ago: executing program 5 (id=1857): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r3, &(0x7f0000000040)=""/61, 0x3d) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x20, 0x30, 0x2, "e9de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.546706043s ago: executing program 1 (id=1858): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a0021030100000000000000021400000000ff000000000018ef15801400010000000000000f0f0000000000000000005b0edb63c2586712957d2de5"], 0x34}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000000000008001", @ANYRESOCT=r4], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.518256058s ago: executing program 2 (id=1859): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a0021030100000000000000021400000000ff000000000018ef15801400010000000000000f0f0000000000000000005b0edb63c2586712957d2de570cecff91c738bc43d1020bfe3459cf0eed0651d25"], 0x34}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000000000008001", @ANYRESOCT=r8], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x18}}], 0x1, 0x8000) 2.683397985s ago: executing program 0 (id=1860): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x40, 0x1}) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) (async) io_uring_enter(r2, 0x3282, 0x20005f7d, 0x0, 0x0, 0x0) 2.669503812s ago: executing program 0 (id=1861): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x8000000200000001, 0x20002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x14, 0x0, 0xdac7a804b810efff}, 0x14}}, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2000) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e22, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 2.566585765s ago: executing program 1 (id=1862): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) sendmmsg$inet(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='9', 0x1}], 0x1}}], 0x2, 0x4008440) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) 2.446133274s ago: executing program 2 (id=1863): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r1, &(0x7f0000000080), &(0x7f0000000180)=0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r2}) ioperm(0x2, 0x1, 0x9) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0xf) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) 1.719432078s ago: executing program 3 (id=1864): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x6, 0x20000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.669219697s ago: executing program 0 (id=1865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = signalfd4(r0, &(0x7f0000000040)={[0x1]}, 0x8, 0x80800) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) (async) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) 1.472308887s ago: executing program 2 (id=1866): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000380)=[{0x8, 0x0, [0x100, 0x345cfee9, 0x200, 0x6, 0x1000, 0x5, 0x0, 0x400, 0x6, 0x3, 0x3, 0x2, 0x6, 0x7, 0x8, 0x1]}, {0xc, 0x0, [0x5d, 0x65a8, 0x7f, 0xd0, 0x4, 0x8, 0x200, 0x591, 0x0, 0x8001, 0xb8a0, 0xe3, 0x0, 0x10, 0x6, 0x80000001]}, {0x29, 0x0, [0x7fffffff, 0xc55, 0xa, 0x3000000, 0x5e4, 0xe2c, 0x8, 0x1, 0x4, 0x6, 0x1, 0x5, 0xffffffff, 0x4, 0x1, 0xafc4]}, {0x2, 0x0, [0xb, 0x1, 0x2, 0x72ed, 0x80000004, 0x9, 0x7, 0x8, 0x5, 0x5, 0xc21, 0x81a7, 0x5eda, 0x5, 0x2, 0x6]}, {0x2, 0x0, [0x2, 0xfffffff4, 0x7dd5, 0x4, 0x5, 0xff, 0x9, 0xfc000000, 0x300, 0x1, 0x66d, 0x5, 0xffff0000, 0x8001, 0x1ff, 0xfff]}, {0x9, 0x0, [0x4, 0x6, 0x5, 0x3, 0x8, 0x8, 0x0, 0xaa, 0x0, 0x2, 0x80000000, 0x8, 0x7, 0xffffffa4, 0x6, 0x800]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f00003ca000/0x2000)=nil, 0x2000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1001}, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000140)={0xff, 0x2, 0x201, 0xfffffffc, 0x2, 0x3, 0x2, 0x1, r6}, 0x20) 1.351326614s ago: executing program 3 (id=1867): shutdown(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x7000000, 0x0, 0x4c, &(0x7f0000001cc0), &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x3b, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f8521", 0x1, 0x0, 0x13}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r4, 0x0) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) 1.327404324s ago: executing program 5 (id=1868): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) (async) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) (async) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x40187013, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x3b, 0xfffbfffe, 0x20, 0x3, 0x4, 0x4}}) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYBLOB="32d3232075c4e59e", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="edf7ed3daac066bf7998e722c8d67c253be6f2c52f84cd7486ba64b28af015ecbe3ec50dc2a226233701ab6b90a088e55fba0fc4ee13f26c0863b3871aa37a7d521db59b55a42b28315150e5172795b4f54c2dc5dfcb2bba385ca97c0d5804072a212e7f0806339e866c64e11ca09019e8af02a53e14cec10f5592d0cf2c33df9b335cac719bd2427fcea6a85f12b235e25bfb3a875d09bd33c2ffad2be78f", @ANYRES64=r0], 0x0) 187.628091ms ago: executing program 0 (id=1869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200), 0x204000, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000240)={0x10001}) sendmsg$nl_xfrm(r2, 0x0, 0x20040000) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c598700", @ANYRES16=0x0, @ANYBLOB="01000000000000000000120000000800080000000000180001801400020076657468305f6d6163767461700000000800070001"], 0x3c}}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x2b, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0xb8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x10, 0x1418, 0x1, 0x0, 0x3}, 0x10}, 0x1, 0xf00, 0x0, 0x41}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) prlimit64(r1, 0x0, &(0x7f0000000080)={0xe, 0xb}, 0x0) 111.551434ms ago: executing program 2 (id=1870): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 108.35714ms ago: executing program 1 (id=1871): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 27.235857ms ago: executing program 0 (id=1872): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a0021030100000000000000021400000000ff000000000018ef15801400010000000000000f0f0000000000000000005b0edb63c2586712957d2de5"], 0x34}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c0001400000000000008001", @ANYRESOCT=r4], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000240), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r4, 0x0, 0x515401, 0x408) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): bles: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 489.153315][ T5918] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 489.340129][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 489.429492][ T5918] usb 2-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 489.469336][ T5918] usb 2-1: config 1 interface 0 has no altsetting 0 [ 489.495876][ T5918] usb 2-1: string descriptor 0 read error: -22 [ 489.502388][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 489.512174][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.542616][ T9881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 489.563291][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19 [ 489.865397][ T5918] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 489.902682][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 489.966701][ C0] bcm5974 2-1:1.0: trackpad urb failed: -1 [ 490.025866][ T5918] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 490.035142][ T890] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 490.043737][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.056513][ T5918] usb 5-1: config 0 descriptor?? [ 490.065746][ T5918] gspca_main: spca508-2.14.0 probing 8086:0110 [ 490.164152][ T5190] bcm5974 2-1:1.0: could not read from device [ 490.164963][ T48] usb 2-1: USB disconnect, device number 50 [ 490.208294][ T890] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 490.222589][ T890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.242818][ T890] usb 4-1: config 0 descriptor?? [ 490.258984][ T890] usb 4-1: selecting invalid altsetting 3 [ 490.268105][ T5918] gspca_spca508: reg_read err -32 [ 490.275829][ T890] comedi comedi5: could not set alternate setting 3 in high speed [ 490.284277][ T890] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 490.296579][ T890] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 490.495380][ T5918] gspca_spca508: reg_read err -71 [ 490.500872][ T5918] gspca_spca508: reg_read err -71 [ 490.507563][ T5918] gspca_spca508: reg_read err -71 [ 490.514680][ T5918] gspca_spca508: reg write: error -71 [ 490.520202][ T5918] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 490.530982][ T5918] usb 5-1: USB disconnect, device number 44 [ 491.655073][ T5918] usb 4-1: USB disconnect, device number 33 [ 491.952143][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 493.230994][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 493.292109][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 493.347366][ T9947] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1055'. [ 494.467677][ T9963] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1058'. [ 494.827849][ T9969] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 495.915228][ T9982] @: renamed from vlan0 (while UP) [ 495.940719][ T5918] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 495.971941][ T5918] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 496.511625][ T9993] syzkaller0: left promiscuous mode [ 496.545530][ T9993] syzkaller0: left allmulticast mode [ 496.853921][ T5918] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 496.872286][T10002] 9p: Unknown access argument 18446744073709551615: -34 [ 496.993237][ T48] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 497.014924][ T5918] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 497.031834][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.055142][ T5918] usb 2-1: config 0 descriptor?? [ 497.100789][ T5918] usb 2-1: selecting invalid altsetting 3 [ 497.325485][ T5918] comedi comedi5: could not set alternate setting 3 in high speed [ 497.339250][ T48] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.369512][ T5918] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 497.400890][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 497.482082][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 497.505516][ T5918] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 497.569762][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.635573][ T48] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.668294][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.748630][ T48] usb 5-1: config 0 descriptor?? [ 497.768174][T10000] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 498.231111][ T48] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 498.248453][ T48] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 498.273735][ T48] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 498.308986][ T48] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 498.322352][T10015] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 498.417367][ T48] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 498.736972][T10018] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20002 [ 498.794965][ T48] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 498.915876][ T5897] usb 5-1: USB disconnect, device number 45 [ 499.094796][ T48] usb 2-1: USB disconnect, device number 51 [ 499.184728][T10027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1076'. [ 499.354190][T10040] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 499.369918][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.378101][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.385606][ T5918] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 499.553059][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 499.563015][ T5837] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 499.570667][ T5897] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 499.580495][ T5918] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 499.612250][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.633371][ T5918] usb 1-1: config 0 descriptor?? [ 499.655031][ T5918] as10x_usb: device has been detected [ 499.672144][ T5918] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 499.692891][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1083'. [ 499.745768][ T5918] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 499.805670][ T5918] as10x_usb: error during firmware upload part1 [ 499.869165][ T5918] Registered device nBox DVB-T Dongle [ 499.899281][ T5837] usb 2-1: device descriptor read/64, error -71 [ 499.911265][ T5897] usb 4-1: device descriptor read/64, error -71 [ 500.545009][T10056] netlink: 'syz.4.1085': attribute type 11 has an invalid length. [ 500.595827][ T927] usb 1-1: USB disconnect, device number 43 [ 500.633603][ T927] Unregistered device nBox DVB-T Dongle [ 500.641644][ T927] as10x_usb: device has been disconnected [ 500.663921][ T5897] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 500.671648][ T5837] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 500.813093][ T5897] usb 4-1: device descriptor read/64, error -71 [ 500.820465][ T5837] usb 2-1: device descriptor read/64, error -71 [ 500.933288][ T5897] usb usb4-port1: attempt power cycle [ 500.941082][ T5837] usb usb2-port1: attempt power cycle [ 501.366336][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.373016][ T5837] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 501.382998][ T5897] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 501.434248][T10065] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 501.518747][ T5837] usb 2-1: device descriptor read/8, error -71 [ 501.610173][ T5897] usb 4-1: device descriptor read/8, error -71 [ 501.903227][ T5837] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 501.943653][ T5837] usb 2-1: device descriptor read/8, error -71 [ 502.023044][ T5897] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 502.044201][ T5897] usb 4-1: device descriptor read/8, error -71 [ 502.055094][ T5837] usb usb2-port1: unable to enumerate USB device [ 502.072498][T10072] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 502.173501][ T5897] usb usb4-port1: unable to enumerate USB device [ 502.227265][ T5897] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 502.246008][ T5897] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.383043][ T5837] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 502.524374][T10083] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 502.669416][ T5918] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 502.817904][ T5837] usb 1-1: config 6 has no interfaces? [ 502.828381][ T5837] usb 1-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=4a.ab [ 502.863007][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.892980][ T5837] usb 1-1: Product: syz [ 502.901552][ T5837] usb 1-1: Manufacturer: syz [ 502.916900][ T5837] usb 1-1: SerialNumber: syz [ 502.923681][T10085] netlink: 'syz.2.1093': attribute type 9 has an invalid length. [ 502.931469][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 502.944647][T10085] hsr0: entered promiscuous mode [ 502.949701][T10085] macvlan4: entered promiscuous mode [ 502.955169][T10085] macvlan4: entered allmulticast mode [ 502.960536][T10085] hsr0: entered allmulticast mode [ 502.966007][T10085] hsr_slave_0: entered allmulticast mode [ 502.971639][T10085] hsr_slave_1: entered allmulticast mode [ 503.033005][ T5918] usb 4-1: device descriptor read/64, error -71 [ 503.507750][ T5837] usb 1-1: USB disconnect, device number 44 [ 503.846764][ T5918] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 504.133066][ T5918] usb 4-1: device descriptor read/64, error -71 [ 504.139481][ T890] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 504.237327][T10114] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.254323][ T5918] usb usb4-port1: attempt power cycle [ 504.703095][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 504.705776][ T890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.722376][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 504.737003][ T890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.751436][ T890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 504.765485][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.775906][ T890] usb 2-1: SerialNumber: syz [ 504.899455][ T890] usb 2-1: 0:2 : does not exist [ 504.933993][ T890] usb 2-1: unit 192 not found! [ 505.063090][ T5918] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 505.096125][ T5837] usb 2-1: USB disconnect, device number 56 [ 505.119581][ T5918] usb 4-1: device descriptor read/8, error -71 [ 505.378785][T10132] 9pnet_fd: Insufficient options for proto=fd [ 505.673285][ T5897] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 505.955517][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 505.993388][ T5837] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 506.010726][ T5897] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 506.036942][ T10] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 506.047725][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.075938][ T10] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.090574][ T5897] usb 2-1: config 0 has no interface number 0 [ 506.106802][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 506.122372][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.133068][ T5897] usb 2-1: Product: syz [ 506.137347][ T5897] usb 2-1: Manufacturer: syz [ 506.142224][ T5897] usb 2-1: SerialNumber: syz [ 506.149796][ T5897] usb 2-1: config 0 descriptor?? [ 506.159323][ T5897] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 506.171697][ T5897] usb 2-1: No valid video chain found. [ 506.179478][ T5837] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 506.188008][ T5837] usb 5-1: config 5 has no interface number 0 [ 506.211575][ T5837] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has an invalid bInterval 255, changing to 4 [ 506.225241][ T5837] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 65535, setting to 1023 [ 506.277420][ T5837] usb 5-1: config 5 interface 123 has no altsetting 0 [ 506.288261][ T5837] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 506.297712][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.310201][ T5837] usb 5-1: Product: syz [ 506.315613][ T5837] usb 5-1: Manufacturer: syz [ 506.320737][ T5837] usb 5-1: SerialNumber: syz [ 506.364762][T10129] bond0: Caught tx_queue_len zero misconfig [ 506.390466][ T5897] usb 2-1: USB disconnect, device number 57 [ 506.546185][ T5837] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 506.565109][ T5837] usb 5-1: USB disconnect, device number 46 [ 507.023678][ T5918] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 507.470792][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 507.558315][ T5918] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 507.568530][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.582048][ T5918] usb 4-1: config 0 descriptor?? [ 507.596391][ T5918] usb 4-1: selecting invalid altsetting 3 [ 507.602278][ T5918] comedi comedi5: could not set alternate setting 3 in high speed [ 507.610238][ T5918] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 507.640192][ T5918] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 507.720926][T10170] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1114'. [ 507.732388][T10170] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1114'. [ 507.741863][T10170] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1114'. [ 509.030718][ T10] usb 4-1: USB disconnect, device number 42 [ 509.353612][ T5837] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 510.212017][ T5837] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 510.230961][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.263083][ T5837] usb 1-1: Product: syz [ 510.267359][ T5837] usb 1-1: Manufacturer: syz [ 510.272063][ T5837] usb 1-1: SerialNumber: syz [ 510.300115][ T5837] usb 1-1: config 0 descriptor?? [ 510.774457][T10182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.783711][ T5918] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 510.943193][ T5918] usb 2-1: device descriptor read/64, error -71 [ 511.410772][ T5837] usb 1-1: USB disconnect, device number 45 [ 511.540092][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 511.732661][ T5918] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 512.794114][ T5918] usb 2-1: device descriptor read/64, error -71 [ 512.903646][ T5918] usb usb2-port1: attempt power cycle [ 513.073161][T10235] veth1_to_bond: entered allmulticast mode [ 513.095201][T10235] veth1_to_bond: entered promiscuous mode [ 513.203965][T10232] veth1_to_bond: left promiscuous mode [ 513.209788][T10232] veth1_to_bond: left allmulticast mode [ 513.273251][ T5918] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 513.313635][ T5918] usb 2-1: device descriptor read/8, error -71 [ 513.611023][ T5918] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 513.689017][ T5918] usb 2-1: device descriptor read/8, error -71 [ 513.804483][ T5918] usb usb2-port1: unable to enumerate USB device [ 513.896884][T10248] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 514.081008][T10252] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 514.207197][ T5952] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 514.387775][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.425601][ T5952] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 514.434964][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.452254][ T5952] usb 5-1: Product: syz [ 514.457545][ T5952] usb 5-1: Manufacturer: syz [ 514.462184][ T5952] usb 5-1: SerialNumber: syz [ 514.477677][ T5952] usb 5-1: config 0 descriptor?? [ 514.494199][ T5952] hub 5-1:0.0: bad descriptor, ignoring hub [ 514.500149][ T5952] hub 5-1:0.0: probe with driver hub failed with error -5 [ 514.514592][ T5952] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.538496][ T5952] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 515.501177][T10286] netlink: 'syz.0.1149': attribute type 1 has an invalid length. [ 515.569471][T10286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.590895][ T5952] usb 5-1: USB disconnect, device number 47 [ 515.630326][T10286] macvlan2: entered promiscuous mode [ 515.661446][T10286] macvlan2: entered allmulticast mode [ 515.669003][T10286] bond1: entered promiscuous mode [ 515.679766][T10286] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 515.692770][T10286] bond1: left promiscuous mode [ 515.746168][ T5897] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 515.763097][ T5897] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 515.913141][ T5897] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 515.943028][ T5952] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 516.076964][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 516.083065][ T5952] usb 5-1: device descriptor read/64, error -71 [ 516.100232][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 516.112168][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 516.125200][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 516.145387][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.162814][ T5897] usb 2-1: config 0 descriptor?? [ 516.175717][ T5897] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 516.344834][ T5952] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 516.374399][ T5897] usb 2-1: USB disconnect, device number 62 [ 516.423207][ T10] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 516.485512][ T5952] usb 5-1: device descriptor read/64, error -71 [ 516.573007][ T48] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 516.592579][T10314] overlayfs: failed to clone upperpath [ 516.616159][ T5952] usb usb5-port1: attempt power cycle [ 516.624718][ T10] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 516.637251][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.652261][ T10] usb 4-1: config 0 descriptor?? [ 516.667146][ T10] usb 4-1: selecting invalid altsetting 3 [ 516.679142][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 516.687228][ T10] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 516.703147][ T10] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 516.726546][ T48] usb 1-1: config 0 has an invalid interface number: 197 but max is 0 [ 516.739024][ T48] usb 1-1: config 0 has no interface number 0 [ 516.745474][ T48] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 516.783148][ T48] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 516.802748][ T48] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 516.816124][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.825557][ T48] usb 1-1: Product: syz [ 516.829741][ T48] usb 1-1: Manufacturer: syz [ 516.835706][ T48] usb 1-1: SerialNumber: syz [ 516.846581][ T48] usb 1-1: config 0 descriptor?? [ 516.855243][T10305] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 516.963001][ T5952] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 517.004274][ T5952] usb 5-1: device descriptor read/8, error -71 [ 517.143134][T10329] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1163'. [ 517.205177][T10329] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1163'. [ 517.242318][T10332] loop2: detected capacity change from 0 to 7 [ 517.248733][ T5952] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 517.283708][ T5952] usb 5-1: device descriptor read/8, error -71 [ 517.333886][T10332] Dev loop2: unable to read RDB block 7 [ 517.447061][ T5952] usb usb5-port1: unable to enumerate USB device [ 517.609992][T10332] loop2: unable to read partition table [ 517.880491][T10332] loop2: partition table beyond EOD, truncated [ 518.048414][T10332] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 518.689150][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'. [ 518.698227][T10347] netlink: 'syz.2.1165': attribute type 3 has an invalid length. [ 518.706338][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'. [ 518.732966][T10347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1165'. [ 518.753902][ T5897] usb 4-1: USB disconnect, device number 43 [ 519.273530][ T5897] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 519.352880][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a984800: rx timeout, send abort [ 519.453114][ T5952] usb 1-1: USB disconnect, device number 46 [ 519.456585][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short [ 519.501007][ T5897] usb 4-1: config 4 has an invalid interface number: 92 but max is 0 [ 519.522962][ T5897] usb 4-1: config 4 has no interface number 0 [ 519.529191][ T5897] usb 4-1: config 4 interface 92 has no altsetting 0 [ 519.569886][ T5897] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 519.593218][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.601358][ T5897] usb 4-1: Product: syz [ 519.622979][ T5897] usb 4-1: Manufacturer: syz [ 519.627707][ T5897] usb 4-1: SerialNumber: syz [ 519.861813][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a984800: abort rx timeout. Force session deactivation [ 519.921295][ T5897] radioshark 4-1:4.92: Invalid radioSHARK device [ 519.940895][ T5897] radioshark 4-1:4.92: probe with driver radioshark failed with error -22 [ 519.969861][ T5897] usbhid 4-1:4.92: couldn't find an input interrupt endpoint [ 520.170272][ T5897] usb 4-1: USB disconnect, device number 44 [ 521.112146][T10375] netlink: 'syz.1.1173': attribute type 1 has an invalid length. [ 521.120268][T10375] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 522.424069][ T5952] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 525.023906][ T5952] usb 5-1: device descriptor read/all, error -71 [ 525.064696][T10392] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 525.136490][T10392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 525.179320][T10393] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 525.198138][T10392] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 525.629027][T10414] bridge0: port 3(team0) entered blocking state [ 525.636222][T10414] bridge0: port 3(team0) entered disabled state [ 525.643534][T10414] team0: entered allmulticast mode [ 525.648743][T10414] C: entered allmulticast mode [ 525.653763][T10414] team_slave_1: entered allmulticast mode [ 525.675882][T10414] team0: entered promiscuous mode [ 525.681028][T10414] C: entered promiscuous mode [ 525.687708][T10414] team_slave_1: entered promiscuous mode [ 526.723151][ T5952] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 527.023045][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 527.131209][ T5952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 527.253263][ T5952] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 527.365756][ T5952] usb 4-1: config 1 has no interface number 1 [ 527.466185][ T5952] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 527.550797][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.582724][ T5952] usb 4-1: Product: syz [ 527.606538][ T5952] usb 4-1: Manufacturer: syz [ 527.617670][ T5952] usb 4-1: SerialNumber: syz [ 527.698010][ T30] audit: type=1326 audit(1755430291.643:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 527.800255][ T30] audit: type=1326 audit(1755430291.663:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 527.837151][ T30] audit: type=1326 audit(1755430291.663:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 527.923642][ T30] audit: type=1326 audit(1755430291.663:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 527.958710][ T5952] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 527.973211][ T5952] usb 4-1: 2:1 : sample bitwidth 220 in over sample bytes 2 [ 527.982017][ T5952] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 528.145057][T10454] overlayfs: overlapping lowerdir path [ 528.241466][T10455] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 528.495423][ T30] audit: type=1326 audit(1755430291.663:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 528.498050][ T5952] usb 4-1: USB disconnect, device number 45 [ 528.525907][ T30] audit: type=1326 audit(1755430291.663:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 528.735871][ T30] audit: type=1326 audit(1755430291.673:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 528.769729][ T30] audit: type=1326 audit(1755430291.673:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 528.821556][ T30] audit: type=1326 audit(1755430291.673:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 528.870024][ T30] audit: type=1326 audit(1755430291.673:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.1.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 531.169857][T10467] random: crng reseeded on system resumption [ 533.166235][ T10] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 533.227065][ T10] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 533.886790][T10505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 533.896133][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 534.653104][ T48] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 534.814069][ T48] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 534.832505][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.867569][ T48] usb 2-1: config 0 descriptor?? [ 534.904462][ T48] usb 2-1: selecting invalid altsetting 3 [ 534.952402][ T48] comedi comedi5: could not set alternate setting 3 in high speed [ 535.040436][ T48] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 535.250247][ T48] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 535.915854][T10521] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 536.579307][ T48] usb 2-1: USB disconnect, device number 63 [ 536.893875][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 536.947160][T10532] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1207'. [ 537.092547][ T10] usb 5-1: config 0 has an invalid interface descriptor of length 3, skipping [ 537.101918][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.117380][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 537.126781][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 537.136277][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.148115][ T10] usb 5-1: config 0 descriptor?? [ 537.243134][ T927] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 537.292096][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 537.292111][ T30] audit: type=1326 audit(1755430301.233:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10527 comm="syz.2.1211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f705318ebe9 code=0x0 [ 537.322423][ T5952] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 537.390027][ T10] usb 5-1: USB disconnect, device number 54 [ 537.402964][ T927] usb 4-1: Using ep0 maxpacket: 32 [ 537.419328][ T927] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 537.435705][ T927] usb 4-1: config 0 has no interface number 0 [ 537.449720][ T927] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.461513][ T927] usb 4-1: config 0 interface 85 has no altsetting 0 [ 537.473100][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 537.477022][ T927] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 537.482432][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 537.499348][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.499373][ T927] usb 4-1: Product: syz [ 537.499389][ T927] usb 4-1: Manufacturer: syz [ 537.499405][ T927] usb 4-1: SerialNumber: syz [ 537.523218][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 537.532102][ T927] usb 4-1: config 0 descriptor?? [ 537.537448][ T5952] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 537.549198][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.564047][ T5952] usb 2-1: Product: syz [ 537.573087][ T5952] usb 2-1: Manufacturer: syz [ 537.578019][ T5952] usb 2-1: SerialNumber: syz [ 537.589600][ T5952] usb 2-1: config 0 descriptor?? [ 537.605147][ T5952] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 537.620928][ T5952] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 537.759304][ T927] appletouch 4-1:0.85: Failed to read mode from device. [ 537.766789][ T927] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 538.064272][ T5952] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 538.109523][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.120444][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.139800][ T5952] em28xx 2-1:0.0: Config register raw data: 0x41 [ 538.321106][ T890] usb 2-1: USB disconnect, device number 64 [ 538.344412][T10565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1221'. [ 538.345744][ T890] em28xx 2-1:0.0: Disconnecting em28xx [ 538.365016][ T890] em28xx 2-1:0.0: Freeing device [ 538.413021][ T5952] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 538.713089][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 538.721070][ T5952] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 538.733743][ T5952] usb 1-1: config 0 has no interface number 0 [ 538.797471][T10572] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 539.263972][ T5952] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 539.273290][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.282880][ T5952] usb 1-1: Product: syz [ 539.289067][ T5952] usb 1-1: Manufacturer: syz [ 539.293788][ T5952] usb 1-1: SerialNumber: syz [ 539.300982][ T5952] usb 1-1: config 0 descriptor?? [ 539.308708][ T5952] smsc95xx v2.0.0 [ 539.753895][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 540.402622][ T927] usb 4-1: USB disconnect, device number 46 [ 540.599603][ T5952] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 540.649002][ T5952] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 541.984969][ T5952] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 542.011819][ T5952] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 542.059182][ T5952] usb 1-1: USB disconnect, device number 47 [ 542.698170][T10615] overlay: ./file0 is not a directory [ 542.969545][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 543.130063][T10618] Process accounting resumed [ 543.159355][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'. [ 543.944473][T10620] JFS: charset not found [ 544.403016][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 544.713233][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 544.761412][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 544.773188][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 544.831738][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 544.845146][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.855829][ T10] usb 5-1: Product: syz [ 544.860147][ T10] usb 5-1: Manufacturer: syz [ 544.866047][ T10] usb 5-1: SerialNumber: syz [ 544.910634][ T10] usb 5-1: config 0 descriptor?? [ 544.936087][ T10] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 545.982120][ T5952] usb 5-1: USB disconnect, device number 55 [ 546.246504][T10670] MTD: Couldn't look up '/dev/nullb0': -15 [ 546.775627][ T5952] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 546.943198][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 547.535963][ T5952] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 547.548127][ T5952] usb 5-1: config 1 has no interface number 0 [ 548.413828][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 548.427314][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 192 [ 548.438345][ T5952] usb 5-1: config 1 interface 105 has no altsetting 0 [ 548.452437][ T5952] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 548.923228][ T5952] usb 5-1: config 1 has no interface number 0 [ 548.929386][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 549.211451][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 192 [ 549.221953][ T5952] usb 5-1: config 1 interface 105 has no altsetting 0 [ 549.230343][ T5952] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 549.259199][ T5952] usb 5-1: config 1 has no interface number 0 [ 549.266307][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 549.277386][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 192 [ 549.291135][ T5952] usb 5-1: config 1 interface 105 has no altsetting 0 [ 549.304058][ T5952] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 549.342941][ T5952] usb 5-1: config 1 has no interface number 0 [ 549.355458][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 549.369631][ T5952] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 192 [ 549.379847][ T5952] usb 5-1: config 1 interface 105 has no altsetting 0 [ 550.047176][ T5952] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 550.058688][ T5952] usb 5-1: can't read configurations, error -71 [ 551.133048][ T927] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 551.336687][ T927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.421592][ T927] usb 2-1: config 4 has an invalid interface number: 92 but max is 0 [ 551.787476][ T927] usb 2-1: config 4 has no interface number 0 [ 551.813001][ T927] usb 2-1: config 4 interface 92 has no altsetting 0 [ 551.851236][ T927] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 552.011731][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.120001][T10764] tmpfs: Unknown parameter 'mpo' [ 552.377583][T10765] netlink: 'syz.2.1269': attribute type 10 has an invalid length. [ 552.513402][T10765] syz_tun: entered promiscuous mode [ 552.526138][ T927] usb 2-1: Product: syz [ 552.545766][T10765] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 552.555260][ T927] usb 2-1: Manufacturer: syz [ 552.559916][ T927] usb 2-1: SerialNumber: syz [ 552.735045][T10761] JFS: charset not found [ 552.897484][ T927] radioshark 2-1:4.92: Invalid radioSHARK device [ 552.918399][ T927] radioshark 2-1:4.92: probe with driver radioshark failed with error -22 [ 552.929553][ T927] usbhid 2-1:4.92: couldn't find an input interrupt endpoint [ 552.972998][ T927] usb 2-1: USB disconnect, device number 65 [ 554.220891][T10791] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1278'. [ 554.525672][ T5952] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 554.567617][T10804] program syz.0.1281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.251959][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 555.281207][ T5952] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 555.313367][ T5952] usb 4-1: config 0 has no interface number 0 [ 555.319551][ T5952] usb 4-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 555.333713][ C1] sd 0:0:1:0: [sda] tag#6871 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 555.344189][ C1] sd 0:0:1:0: [sda] tag#6871 CDB: Write(6) 0a 00 00 00 00 00 [ 555.368665][ T5952] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 555.382953][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.390969][ T5952] usb 4-1: Product: syz [ 555.409009][ T5952] usb 4-1: Manufacturer: syz [ 555.417833][ T5952] usb 4-1: SerialNumber: syz [ 555.440196][ T5952] usb 4-1: config 0 descriptor?? [ 555.455195][T10779] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 555.509586][T10803] uprobe: syz.0.1281:10803 failed to unregister, leaking uprobe [ 556.612118][ T927] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 556.913341][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 556.937187][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 556.959848][ T927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.976512][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 557.002641][ T927] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.035948][ T5952] asix 4-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 557.046329][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 557.047447][ T927] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.058557][ T5952] asix 4-1:0.191: probe with driver asix failed with error -71 [ 557.078297][T10826] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 557.091433][ T927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 557.139075][ T927] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 557.162122][ T5952] usb 4-1: USB disconnect, device number 47 [ 557.189136][ T927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.232396][ T927] usb 2-1: config 0 descriptor?? [ 557.472626][ T927] hid (null): bogus close delimiter [ 557.478739][ T927] hid (null): unknown global tag 0xc [ 557.499129][ T927] hid (null): report_id 0 is invalid [ 558.072991][ T890] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 558.124375][ T927] usb 2-1: USB disconnect, device number 66 [ 558.453057][ T890] usb 5-1: Using ep0 maxpacket: 8 [ 558.461734][ T890] usb 5-1: unable to get BOS descriptor or descriptor too short [ 558.479930][ T890] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 558.505838][ T890] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=29.43 [ 559.020563][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.031541][ T890] usb 5-1: Product: syz [ 559.037547][ T890] usb 5-1: Manufacturer: syz [ 559.042311][ T890] usb 5-1: SerialNumber: syz [ 559.377895][ T890] usb 5-1: USB disconnect, device number 58 [ 559.977817][ T5952] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 559.993586][ T890] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 560.186953][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 560.319778][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.356878][ T890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 560.367955][ T5952] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 560.391449][ T890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 560.410236][ T890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 560.496346][ T5952] usb 1-1: New USB device found, idVendor=0733, idProduct=0402, bcdDevice=ef.67 [ 560.514185][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.544273][ T5952] usb 1-1: Product: syz [ 560.548919][ T5952] usb 1-1: Manufacturer: syz [ 560.567199][ T5952] usb 1-1: SerialNumber: syz [ 560.729789][ T890] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 560.957640][ T5952] usb 1-1: config 0 descriptor?? [ 560.978058][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.040709][ T5952] gspca_main: spca501-2.14.0 probing 0733:0402 [ 561.053046][ T890] usb 4-1: Product: syz [ 561.057254][ T890] usb 4-1: Manufacturer: syz [ 561.061868][ T890] usb 4-1: SerialNumber: syz [ 561.086237][ T890] usb 4-1: config 0 descriptor?? [ 561.103963][T10878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 561.111557][T10878] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 561.125409][ T890] usb 4-1: ucan: probing device on interface #0 [ 561.484709][T10885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.503824][T10885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.213250][ T890] usb 4-1: ucan: could not read protocol version, ret=-110 [ 562.220542][ T890] usb 4-1: ucan: probe failed; try to update the device firmware [ 562.233321][ T5952] gspca_spca501: reg write: error -110 [ 562.239580][ T5952] spca501 1-1:0.0: Reg write failed for 0x00,0x02,0x03 [ 562.257231][ T5952] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 562.300153][ T927] usb 4-1: USB disconnect, device number 48 [ 562.713125][ T927] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 562.809626][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.398342][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.427772][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.448126][ T927] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 563.467510][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.514329][ T927] usb 4-1: config 0 descriptor?? [ 564.033200][ T5897] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 564.230959][ T5952] usb 1-1: USB disconnect, device number 48 [ 564.394520][ T5897] usb 5-1: Using ep0 maxpacket: 8 [ 564.404792][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.449356][ T927] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 564.462256][ T5897] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 564.493914][ T927] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 564.505434][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.516961][ T5897] usb 5-1: Product: syz [ 564.521158][ T5897] usb 5-1: Manufacturer: syz [ 564.539945][ T5897] usb 5-1: SerialNumber: syz [ 564.549588][ T5897] usb 5-1: config 0 descriptor?? [ 564.568634][ T5897] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 564.591861][ T5897] usb 5-1: selecting invalid altsetting 1 [ 564.639609][ T927] cp2112 0003:10C4:EA90.0022: Part Number: 0x00 Device Version: 0x4D [ 564.774442][ T5897] gspca_stk014: init reg: 0x00 [ 564.779324][ T5897] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 565.273625][ T927] cp2112 0003:10C4:EA90.0022: error reading lock byte: -32 [ 565.922770][T10945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1315'. [ 566.109193][T10948] sg_write: data in/out 268435420/98 bytes for SCSI command 0x0-- guessing data in; [ 566.109193][T10948] program syz.1.1316 not setting count and/or reply_len properly [ 566.428982][ T5897] usb 4-1: USB disconnect, device number 49 [ 566.915634][ T10] usb 5-1: USB disconnect, device number 59 [ 567.003950][T10955] lo: Caught tx_queue_len zero misconfig [ 568.615768][T10973] netlink: 'syz.1.1323': attribute type 3 has an invalid length. [ 569.908505][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 569.987994][ T9] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 570.581429][T10998] 9pnet_fd: Insufficient options for proto=fd [ 570.641588][T10994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.455118][T10994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.784821][T10994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.978096][ T48] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 572.294949][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 572.364720][ T48] usb 2-1: config 0 interface 0 has no altsetting 0 [ 572.379385][ T48] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 572.394513][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.418223][ T48] usb 2-1: Product: syz [ 572.422423][ T48] usb 2-1: Manufacturer: syz [ 572.428936][ T48] usb 2-1: SerialNumber: syz [ 572.464396][ T48] usb 2-1: config 0 descriptor?? [ 572.535623][T10994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.689795][ T48] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 572.713060][ T48] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 572.762323][T10994] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.832349][T10994] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.892775][T10994] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.926740][T10994] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.182778][T11048] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 573.469208][T11054] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1341'. [ 575.051363][ T9] usb 2-1: USB disconnect, device number 67 [ 575.126872][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 575.618703][T11072] random: crng reseeded on system resumption [ 575.755692][T11064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 576.044645][T11064] vlan2: entered promiscuous mode [ 576.059088][ T9] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 576.076217][T11064] bridge0: entered promiscuous mode [ 576.112051][ T9] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.503549][T11079] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1351'. [ 577.893111][ T48] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 577.919449][ T30] audit: type=1326 audit(1755430341.863:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 577.943495][T11102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1357'. [ 577.955293][T11102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.956375][ T30] audit: type=1326 audit(1755430341.863:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 577.997043][ T30] audit: type=1326 audit(1755430341.883:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.022360][ T30] audit: type=1326 audit(1755430341.883:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.046306][ T30] audit: type=1326 audit(1755430341.883:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.068858][ T30] audit: type=1326 audit(1755430341.883:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.095143][ T30] audit: type=1326 audit(1755430341.883:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.116935][ T48] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 578.126289][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.237880][T11107] netlink: 'syz.2.1359': attribute type 12 has an invalid length. [ 578.248797][ T48] usb 1-1: config 0 descriptor?? [ 578.254109][ T30] audit: type=1326 audit(1755430341.883:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.283906][ T48] usb 1-1: selecting invalid altsetting 3 [ 578.289773][ T48] comedi comedi5: could not set alternate setting 3 in high speed [ 578.300061][ T30] audit: type=1326 audit(1755430341.883:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.323595][ T48] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 578.344828][ T48] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 578.364948][ T30] audit: type=1326 audit(1755430341.883:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11101 comm="syz.1.1357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb35d18ebe9 code=0x7ffc0000 [ 578.613011][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 578.779680][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 578.792320][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 578.805651][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 578.821270][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 578.833196][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 578.849502][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 578.859427][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 578.871315][ T9] usb 4-1: Product: syz [ 578.876592][ T9] usb 4-1: Manufacturer: syz [ 578.891549][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 578.897106][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 578.906014][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 578.912575][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 579.301406][ T927] usb 4-1: USB disconnect, device number 50 [ 579.540553][ T890] usb 1-1: USB disconnect, device number 49 [ 580.071317][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 580.612478][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 580.617685][ T927] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 580.648399][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 580.667336][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.685546][ T9] usb 2-1: Product: syz [ 580.695992][ T9] usb 2-1: Manufacturer: syz [ 580.711104][ T9] usb 2-1: SerialNumber: syz [ 580.719686][ T9] usb 2-1: config 0 descriptor?? [ 580.812327][ T927] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.831851][ T927] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 580.871805][ T927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.887155][ T927] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 580.917596][ T927] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.927854][ T927] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.942811][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 580.958908][ T927] usb 4-1: Product: syz [ 580.974637][ T927] usb 4-1: Manufacturer: syz [ 581.038242][T11141] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1368'. [ 581.058062][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 581.074939][ T927] cdc_wdm 4-1:1.0: skipping garbage [ 581.080211][ T927] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 581.093156][ T9] usb 2-1: USB disconnect, device number 68 [ 581.151860][T11146] loop2: detected capacity change from 0 to 7 [ 581.162822][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.172703][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.181577][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.190764][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.202747][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.211917][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.234781][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.244012][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.388214][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.397396][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.481487][ T927] usb 4-1: USB disconnect, device number 51 [ 581.482165][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.496610][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.506778][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.515969][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.525411][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.534616][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.542800][T11146] ldm_validate_partition_table(): Disk read failed. [ 581.551196][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.560394][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.569596][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 581.579086][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 581.587920][T11146] Dev loop2: unable to read RDB block 0 [ 581.594125][T11146] loop2: unable to read partition table [ 581.600008][T11146] loop2: partition table beyond EOD, truncated [ 581.606671][T11146] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 584.662940][T11201] bridge0: entered allmulticast mode [ 585.357465][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.365635][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.373543][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.381347][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.389226][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.397064][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.404913][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.412714][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.420565][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 585.428401][T11218] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 586.761563][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 586.794627][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1390'. [ 587.566949][T11239] vlan3: entered promiscuous mode [ 587.572012][T11239] macvtap0: entered promiscuous mode [ 587.815887][ T5952] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 587.837409][ T5952] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 588.011027][T11257] tipc: Enabling of bearer rejected, failed to enable media [ 588.136756][ T5897] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 588.295581][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.307174][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.318450][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.331949][ T5897] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.341746][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.355646][ T5897] usb 2-1: config 0 descriptor?? [ 588.485546][ T6740] tipc: Resetting bearer [ 588.539902][ T6740] tipc: Disabling bearer [ 588.995108][ T890] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 589.004263][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.016094][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.024765][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.035217][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.067206][T11277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.150293][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.161519][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.184622][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.197945][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.207342][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.289621][ T890] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 589.382702][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.489073][ T890] usb 1-1: config 0 descriptor?? [ 589.590205][T11251] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1395'. [ 589.611772][ T890] usb 1-1: selecting invalid altsetting 3 [ 589.636212][ T890] comedi comedi5: could not set alternate setting 3 in high speed [ 589.673151][ T890] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 589.710537][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 589.716572][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 589.728182][ T5897] usb 2-1: USB disconnect, device number 69 [ 589.775837][ T890] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 590.010673][T11284] !: renamed from macvlan1 (while UP) [ 590.017396][T11285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.321321][T11273] chnl_net:caif_netlink_parms(): no params data found [ 590.519083][T11300] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 590.871063][ T890] usb 1-1: USB disconnect, device number 50 [ 590.879041][T11273] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.888316][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.896161][T11273] bridge_slave_0: entered allmulticast mode [ 590.906421][T11273] bridge_slave_0: entered promiscuous mode [ 590.925483][T11273] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.942276][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.953408][T11273] bridge_slave_1: entered allmulticast mode [ 590.987519][T11273] bridge_slave_1: entered promiscuous mode [ 591.060784][T11273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.093923][T11273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.283049][ T5849] Bluetooth: hci5: command tx timeout [ 591.291388][T11317] netlink: 'syz.2.1411': attribute type 83 has an invalid length. [ 591.310030][T11273] team0: Port device team_slave_0 added [ 591.325402][T11273] team0: Port device team_slave_1 added [ 591.416182][T11273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.441826][T11273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.485657][T11273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.502228][T11273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.510809][T11273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.543002][ T927] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 591.557373][T11273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.613182][T11273] hsr_slave_0: entered promiscuous mode [ 591.619544][T11273] hsr_slave_1: entered promiscuous mode [ 591.627129][T11273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.252119][T11273] Cannot create hsr debugfs directory [ 592.272953][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 592.294068][ T927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.317727][ T927] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 592.361431][ T927] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 592.421548][ T927] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.458219][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.496539][ T927] usb 2-1: Product: syz [ 592.512845][ T927] usb 2-1: Manufacturer: syz [ 592.527761][ T927] usb 2-1: SerialNumber: syz [ 592.534579][T11330] netlink: 'syz.3.1417': attribute type 1 has an invalid length. [ 592.605546][ T927] usb 2-1: bad CDC descriptors [ 592.869287][T11311] net_ratelimit: 44 callbacks suppressed [ 592.888090][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.364792][ T5849] Bluetooth: hci5: command tx timeout [ 593.447626][T11273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 593.531480][T11273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 593.554752][T11273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 593.589762][T11273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 593.684479][T11349] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 593.757380][ T927] usb 2-1: USB disconnect, device number 70 [ 593.765199][T11358] fuse: Bad value for 'fd' [ 593.836697][T11273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.864781][T11273] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.885641][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.892993][ T7684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.916788][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.924104][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.153167][ T5952] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 594.394687][ T5952] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 594.410029][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.421750][ T5952] usb 1-1: config 0 descriptor?? [ 594.425030][T11373] 9pnet_fd: Insufficient options for proto=fd [ 594.596431][T11273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.648226][ T5952] usb 1-1: Cannot read MAC address [ 594.663512][ T5952] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 594.681837][ T5952] usb 1-1: USB disconnect, device number 51 [ 594.733015][ T5918] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 594.863371][ T5918] usb 4-1: device descriptor read/64, error -71 [ 594.954683][T11273] veth0_vlan: entered promiscuous mode [ 594.967014][T11273] veth1_vlan: entered promiscuous mode [ 594.997841][T11273] veth0_macvtap: entered promiscuous mode [ 595.008928][T11273] veth1_macvtap: entered promiscuous mode [ 595.027811][T11273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.041580][T11273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.054916][T11273] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.064241][T11273] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.073107][T11273] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.086320][T11273] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.103141][ T5918] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 595.195034][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.212022][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.235465][ T5918] usb 4-1: device descriptor read/64, error -71 [ 595.269832][ T7684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.280400][ T7684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.293730][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 595.293746][ T30] audit: type=1400 audit(1755430359.223:190): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=11391 comm="syz.0.1430" name="274" dev="tmpfs" ino=1455 [ 595.459259][ T5849] Bluetooth: hci5: command tx timeout [ 595.478812][ T5918] usb usb4-port1: attempt power cycle [ 595.812802][T11403] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1429'. [ 595.897423][ T5918] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 595.962806][T11400] tipc: Enabled bearer , priority 10 [ 595.972015][T11402] lo speed is unknown, defaulting to 1000 [ 595.978540][T11402] lo speed is unknown, defaulting to 1000 [ 595.992572][T11402] lo speed is unknown, defaulting to 1000 [ 596.029499][T11402] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 596.094647][T11402] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 596.150566][T11402] lo speed is unknown, defaulting to 1000 [ 596.159483][T11402] lo speed is unknown, defaulting to 1000 [ 596.167805][T11402] lo speed is unknown, defaulting to 1000 [ 596.187324][T11402] lo speed is unknown, defaulting to 1000 [ 596.196200][T11402] lo speed is unknown, defaulting to 1000 [ 596.408457][ T5918] usb 4-1: device descriptor read/8, error -71 [ 596.422410][T11402] lo speed is unknown, defaulting to 1000 [ 596.430098][T11402] lo speed is unknown, defaulting to 1000 [ 596.731386][T11414] overlayfs: failed to clone upperpath [ 596.873334][ T48] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 596.883197][ T5918] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 597.305973][T11417] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1399'. [ 597.372261][T11415] tipc: Node number set to 2133240572 [ 597.405905][ T5918] usb 4-1: device descriptor read/8, error -71 [ 597.443780][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 597.462100][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.474973][ T48] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 597.573477][ T5849] Bluetooth: hci5: command tx timeout [ 597.612786][ T5918] usb usb4-port1: unable to enumerate USB device [ 597.652109][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.777158][ T48] usb 1-1: config 0 descriptor?? [ 598.529488][ T9] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 598.560466][ T48] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 598.584495][ T9] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 598.822971][ T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 598.927861][ T5918] usb 1-1: USB disconnect, device number 52 [ 598.993089][ T48] usb 6-1: device descriptor read/64, error -71 [ 599.620535][T11442] lo speed is unknown, defaulting to 1000 [ 599.740759][ T5918] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 599.918465][ T5918] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 599.943107][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.955699][ T5918] usb 4-1: config 0 descriptor?? [ 599.976472][ T5918] usb 4-1: selecting invalid altsetting 3 [ 599.991762][ T5918] comedi comedi5: could not set alternate setting 3 in high speed [ 600.010061][ T5918] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 600.033122][ T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 600.043097][ T5918] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 600.241250][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 600.250430][ T48] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 600.265708][ T48] usb 6-1: can't read configurations, error -71 [ 600.281583][ T48] usb usb6-port1: attempt power cycle [ 601.667108][ T48] usb 4-1: USB disconnect, device number 56 [ 601.937660][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1449'. [ 601.948258][T11474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1449'. [ 602.249950][T11478] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1451'. [ 603.951156][T11515] netlink: 'syz.0.1459': attribute type 12 has an invalid length. [ 603.959170][T11515] netlink: 'syz.0.1459': attribute type 29 has an invalid length. [ 603.967126][T11515] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1459'. [ 603.976411][T11515] netlink: 'syz.0.1459': attribute type 2 has an invalid length. [ 603.984261][T11515] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1459'. [ 604.150617][ T5849] block nbd0: Receive control failed (result -107) [ 604.265950][T11510] nbd0: detected capacity change from 0 to 63 [ 604.294334][T11518] overlayfs: failed to clone upperpath [ 604.306819][T11505] 9pnet: Could not find request transport: fd0x0000000000000005 [ 604.340692][T11518] overlayfs: missing 'lowerdir' [ 604.553016][ T890] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 604.636720][T11528] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1464'. [ 604.761579][T11524] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1452'. [ 605.294735][ T890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.682058][ T890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.751070][ T890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 605.977169][ T890] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.098164][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.851628][ T890] usb 1-1: config 0 descriptor?? [ 607.919316][ T890] usb 1-1: can't set config #0, error -71 [ 607.935492][ T890] usb 1-1: USB disconnect, device number 53 [ 608.022731][ T5911] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 608.046782][ T5911] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 608.115977][T11549] netlink: 'syz.0.1469': attribute type 12 has an invalid length. [ 608.145842][T11549] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1469'. [ 608.292147][T11553] overlayfs: failed to clone upperpath [ 609.131687][T11558] lo speed is unknown, defaulting to 1000 [ 613.953035][ T890] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 613.990350][T11594] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1482'. [ 614.200459][ T890] usb 6-1: config 0 has an invalid interface number: 198 but max is 0 [ 614.208863][ T890] usb 6-1: config 0 has no interface number 0 [ 614.215037][ T890] usb 6-1: config 0 interface 198 has no altsetting 0 [ 614.223861][ T890] usb 6-1: New USB device found, idVendor=1fb9, idProduct=0601, bcdDevice=b4.0f [ 614.233096][ T890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.241681][ T890] usb 6-1: Product: syz [ 614.263022][ T890] usb 6-1: Manufacturer: syz [ 614.273123][ T890] usb 6-1: SerialNumber: syz [ 614.298408][ T890] usb 6-1: config 0 descriptor?? [ 614.873662][T11580] bridge0: entered promiscuous mode [ 614.992939][T11580] macvtap1: entered allmulticast mode [ 615.065000][T11580] bridge0: entered allmulticast mode [ 615.095826][T11580] bridge0: port 3(macvtap1) entered blocking state [ 615.107807][T11580] bridge0: port 3(macvtap1) entered disabled state [ 615.156329][T11580] bridge0: left allmulticast mode [ 615.161966][T11580] bridge0: left promiscuous mode [ 615.170989][ T30] audit: type=1326 audit(1755430379.113:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11616 comm="syz.0.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6238ebe9 code=0x7fc00000 [ 615.369804][ T890] cp210x 6-1:0.198: cp210x converter detected [ 615.396267][ T890] cp210x 6-1:0.198: failed to get vendor val 0x370b size 1: -71 [ 615.418077][ T890] cp210x 6-1:0.198: querying part number failed [ 615.462754][ T890] usb 6-1: cp210x converter now attached to ttyUSB0 [ 615.501366][ T890] usb 6-1: USB disconnect, device number 5 [ 615.551298][ T890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.578748][ T890] cp210x 6-1:0.198: device disconnected [ 616.067613][T11644] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 616.100620][T11644] bond3: entered promiscuous mode [ 616.110557][T11644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 616.159093][T11644] bond3: (slave dummy0): making interface the new active one [ 616.173186][T11644] dummy0: entered promiscuous mode [ 616.179424][T11644] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 616.362184][T11646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1494'. [ 616.397314][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.439764][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.561319][T11665] MTD: Couldn't look up './file1': -15 [ 618.791418][T11666] tty tty30: ldisc open failed (-12), clearing slot 29 [ 618.803096][ T927] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 618.810746][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 619.057157][ T9] usb 2-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 619.067697][ T927] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 619.088914][ T927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.103156][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 619.120288][ T927] usb 4-1: config 0 has no interface number 0 [ 619.130445][ T9] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 619.143128][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.156832][ T927] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 619.168445][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.180184][ T9] usb 2-1: config 0 descriptor?? [ 619.187477][ T927] usb 4-1: Product: syz [ 619.202402][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 619.211671][ T927] usb 4-1: Manufacturer: syz [ 619.223997][ T927] usb 4-1: SerialNumber: syz [ 619.243101][ T927] usb 4-1: config 0 descriptor?? [ 619.257588][ T927] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 619.481778][T11669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 619.728796][ T5911] usb 4-1: USB disconnect, device number 57 [ 619.743239][ T927] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 620.584858][ T927] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.602933][ T927] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 620.626364][ T927] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.636998][ T927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.653088][ T927] usb 6-1: Product: syz [ 620.661801][ T927] usb 6-1: Manufacturer: syz [ 620.672537][ T927] usb 6-1: SerialNumber: syz [ 620.690637][ T927] cdc_mbim 6-1:1.0: skipping garbage [ 620.742049][T11699] loop2: detected capacity change from 0 to 7 [ 620.763596][T11699] loop2: [ 620.772300][T11699] loop2: partition table partially beyond EOD, truncated [ 620.892736][T11692] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 622.154528][ T5911] usb 2-1: USB disconnect, device number 71 [ 622.360033][T11692] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 622.490829][ T927] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 622.503768][ T927] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 622.569287][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 622.693843][ T9] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 622.708787][ T927] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 623.135760][ T927] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 623.149022][ T927] wwan wwan0: port wwan0mbim0 attached [ 623.272644][ T927] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 96:7e:e3:f4:ec:3e [ 623.289683][ T927] usb 6-1: USB disconnect, device number 6 [ 623.297299][ T927] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 623.395075][ T927] wwan wwan0: port wwan0mbim0 disconnected [ 623.404564][T11723] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1516'. [ 623.447216][T11724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1516'. [ 624.035961][T11737] delete_channel: no stack [ 624.062943][ T927] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 624.192959][ T5911] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 624.248721][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.520900][ T927] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 624.531912][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.567814][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.570355][ T927] usb 1-1: config 0 descriptor?? [ 624.661943][ T5911] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 624.764471][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 624.769709][ T927] usb 1-1: selecting invalid altsetting 3 [ 624.794255][ T927] comedi comedi5: could not set alternate setting 3 in high speed [ 624.906500][ T5911] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 624.915664][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.938851][ T927] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 624.950118][ T5911] usb 6-1: Product: syz [ 624.964866][ T927] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 624.996042][ T5911] usb 6-1: Manufacturer: syz [ 625.000793][ T5911] usb 6-1: SerialNumber: syz [ 625.035502][ T5911] usb 6-1: config 0 descriptor?? [ 625.282246][T11747] overlayfs: missing 'workdir' [ 625.508246][ T5911] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 625.532212][T11744] tipc: Enabled bearer , priority 0 [ 625.539674][ T5911] usb 6-1: No valid video chain found. [ 625.550547][T11744] syzkaller0: entered promiscuous mode [ 625.559165][ T5911] usb 6-1: USB disconnect, device number 7 [ 625.570853][T11744] syzkaller0: entered allmulticast mode [ 625.671718][T11744] tipc: Resetting bearer [ 625.907448][T11743] tipc: Resetting bearer [ 625.924426][T11744] ./file0: Can't open blockdev [ 626.048203][T11743] tipc: Disabling bearer [ 626.138127][ T5897] usb 1-1: USB disconnect, device number 54 [ 626.936637][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 627.683620][ T927] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 627.853324][ T927] usb 6-1: Using ep0 maxpacket: 32 [ 627.861461][ T927] usb 6-1: config 0 interface 0 has no altsetting 0 [ 627.870977][ T927] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 627.880336][ T927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.888978][ T927] usb 6-1: Product: syz [ 627.896482][ T927] usb 6-1: Manufacturer: syz [ 627.901565][ T927] usb 6-1: SerialNumber: syz [ 627.914293][ T927] usb 6-1: config 0 descriptor?? [ 628.544782][ T927] gs_usb 6-1:0.0: Configuring for 16 interfaces [ 628.551521][ T927] gs_usb 6-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 628.613458][ T927] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 628.964496][T11277] Bluetooth: hci6: command 0x1003 tx timeout [ 628.972457][ T5849] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 629.138390][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.173706][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.198049][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.232094][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.244268][ T5911] usb 6-1: USB disconnect, device number 8 [ 629.312013][T11798] xt_hashlimit: size too large, truncated to 1048576 [ 629.429514][ T927] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 629.457230][ T927] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 629.645198][T11804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'. [ 630.843912][ T890] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 631.514942][ T890] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.576914][ T890] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.629253][ T890] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.673335][ T890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.716773][ T890] usb 1-1: SerialNumber: syz [ 631.950486][ T890] usb 1-1: 0:2 : does not exist [ 632.018321][ T890] usb 1-1: USB disconnect, device number 55 [ 632.030300][T11829] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.1546'. [ 632.040174][T11829] openvswitch: netlink: Message has 5 unknown bytes. [ 633.293022][ T5837] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 633.867866][T11849] lo speed is unknown, defaulting to 1000 [ 634.014767][ T5837] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 634.029508][ T5837] usb 4-1: config 0 has no interface number 0 [ 634.048165][ T5837] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 634.073989][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.082131][ T5837] usb 4-1: Product: syz [ 634.086792][ T5837] usb 4-1: Manufacturer: syz [ 634.091489][ T5837] usb 4-1: SerialNumber: syz [ 634.099818][ T5837] usb 4-1: config 0 descriptor?? [ 634.312546][T11854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.339513][T11854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.663584][ T5837] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 634.690626][ T5837] usb 4-1: Firmware version (0.0) predates our first public release. [ 634.717694][ T5837] usb 4-1: Please update to version 0.2 or newer [ 635.534740][ T5837] usb 4-1: USB disconnect, device number 58 [ 635.710470][T11866] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1554'. [ 637.065329][ T927] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 637.095200][ T927] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 637.566325][ T927] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 637.777685][ T927] usb 6-1: device descriptor read/64, error -71 [ 637.780360][T11893] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1561'. [ 638.093822][ T5837] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 638.273068][ T5918] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 638.376064][T11902] 9p: Unknown access argument `: -22 [ 638.403760][ T5918] usb 2-1: device descriptor read/64, error -71 [ 638.412251][ T927] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 638.444792][ T5837] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 638.457906][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.469064][ T5837] usb 4-1: config 0 descriptor?? [ 638.480595][ T5837] usb 4-1: selecting invalid altsetting 3 [ 638.487380][ T5837] comedi comedi5: could not set alternate setting 3 in high speed [ 638.496237][ T5837] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 638.507339][ T5837] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 638.543434][ T927] usb 6-1: device descriptor read/64, error -71 [ 638.653759][ T927] usb usb6-port1: attempt power cycle [ 638.663001][ T5918] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 638.802986][ T5918] usb 2-1: device descriptor read/64, error -71 [ 638.923367][ T5918] usb usb2-port1: attempt power cycle [ 638.993012][ T927] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 639.028496][ T927] usb 6-1: device descriptor read/8, error -71 [ 639.262950][ T5918] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 639.650930][ T5918] usb 2-1: device descriptor read/8, error -71 [ 639.764489][ T927] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 639.794436][ T927] usb 6-1: device descriptor read/8, error -71 [ 639.923138][ T5918] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 639.938687][ T927] usb usb6-port1: unable to enumerate USB device [ 640.071992][ T5918] usb 2-1: device descriptor read/8, error -71 [ 640.318935][ T5918] usb usb2-port1: unable to enumerate USB device [ 640.333886][ T927] usb 4-1: USB disconnect, device number 59 [ 641.185144][T11922] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1568'. [ 641.539440][T11933] overlayfs: conflicting lowerdir path [ 641.636080][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 642.717926][ T890] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 643.485671][ T890] usb 2-1: device descriptor read/64, error -71 [ 643.723277][T11979] netlink: 'syz.0.1585': attribute type 12 has an invalid length. [ 643.742937][ T890] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 643.765138][T11979] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1585'. [ 643.882996][ T890] usb 2-1: device descriptor read/64, error -71 [ 644.041860][ T890] usb usb2-port1: attempt power cycle [ 644.123235][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 644.293175][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 644.305048][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 644.497784][ T9] usb 6-1: config 3 has an invalid interface number: 182 but max is 0 [ 644.527543][ T9] usb 6-1: config 3 has no interface number 0 [ 644.545423][ T9] usb 6-1: config 3 interface 182 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 645.093021][ T890] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 645.261629][ T890] usb 2-1: device descriptor read/8, error -71 [ 645.283804][ T9] usb 6-1: config 3 interface 182 altsetting 8 endpoint 0xA has an invalid bInterval 129, changing to 11 [ 645.322926][ T9] usb 6-1: config 3 interface 182 altsetting 8 endpoint 0x3 has an invalid bInterval 92, changing to 10 [ 645.360436][ T9] usb 6-1: config 3 interface 182 has no altsetting 0 [ 645.381925][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 645.401754][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.425025][ T9] usb 6-1: Product: syz [ 645.429683][ T9] usb 6-1: Manufacturer: syz [ 645.442310][ T9] usb 6-1: SerialNumber: syz [ 645.624282][ T5918] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 645.672231][ T59] Bluetooth: hci6: Frame reassembly failed (-84) [ 645.692617][ T9] usbtest 6-1:3.182: couldn't get endpoints, -71 [ 645.699961][ T9] usbtest 6-1:3.182: probe with driver usbtest failed with error -71 [ 645.711405][T11277] Bluetooth: hci6: unexpected event 0x09 length: 0 < 3 [ 645.741486][ T9] usb 6-1: USB disconnect, device number 13 [ 645.816712][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.842941][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.852706][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 645.913054][ T5918] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 645.922361][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.945157][ T5918] usb 4-1: config 0 descriptor?? [ 646.835330][T11994] C: renamed from team_slave_0 [ 646.854807][T11994] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1589'. [ 646.879596][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 646.887910][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 647.620899][ T5918] usb 4-1: USB disconnect, device number 60 [ 647.711386][ T5849] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 647.718080][T11277] Bluetooth: hci6: command 0x1003 tx timeout [ 647.908537][T12018] netlink: 'syz.5.1594': attribute type 3 has an invalid length. [ 647.928445][T12014] lo speed is unknown, defaulting to 1000 [ 648.202985][ T5918] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 649.085489][ T5918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.136525][ T5918] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 649.156251][ T5918] usb 2-1: can't read configurations, error -71 [ 650.754854][T12054] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.763022][T12054] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 650.771867][T12054] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 650.779687][T12054] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 651.015976][ T5837] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 651.895152][T12064] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 652.014825][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.052815][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.079900][ T5837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.113096][ T5837] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.139599][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.170903][ T5837] usb 4-1: config 0 descriptor?? [ 652.543220][ T890] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 652.705420][ T890] usb 2-1: Using ep0 maxpacket: 8 [ 652.722774][ T890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 652.741727][ T890] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 652.768265][ T890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 652.789859][T12049] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1606'. [ 652.790143][ T890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 652.813130][ T5837] usbhid 4-1:0.0: can't add hid device: -71 [ 652.830939][ T5837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 652.832895][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.860071][ T890] usb 2-1: Product: syz [ 652.862761][T12080] lo speed is unknown, defaulting to 1000 [ 652.873024][ T890] usb 2-1: Manufacturer: syz [ 652.874368][ T5837] usb 4-1: USB disconnect, device number 61 [ 652.887868][ T890] usb 2-1: SerialNumber: syz [ 653.327478][T12090] netlink: 272 bytes leftover after parsing attributes in process `syz.5.1616'. [ 654.332561][T12098] libceph: resolve '. [ 654.332561][T12098] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 654.332561][T12098] ' (ret=-3): failed [ 654.672735][T12110] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 654.694504][T12105] IPVS: stopping backup sync thread 12110 ... [ 654.933032][ T890] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 655.263402][ T890] usb 1-1: device descriptor read/64, error -71 [ 655.331360][ T5918] usb 2-1: USB disconnect, device number 82 [ 655.514184][ T890] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 655.659917][T12125] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1624'. [ 655.732931][ T890] usb 1-1: device descriptor read/64, error -71 [ 655.843398][ T890] usb usb1-port1: attempt power cycle [ 656.213252][ T890] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 656.278575][ T890] usb 1-1: device descriptor read/8, error -71 [ 656.428687][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1629'. [ 656.447404][T12147] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.456610][T12147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.465461][T12147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.474246][T12147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.483375][ T5849] Bluetooth: hci6: command 0xfc11 tx timeout [ 656.489859][T11277] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 656.553242][ T890] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 656.589595][ T890] usb 1-1: device descriptor read/8, error -71 [ 656.696107][ T5918] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 656.714531][ T890] usb usb1-port1: unable to enumerate USB device [ 656.715787][T12150] lo speed is unknown, defaulting to 1000 [ 656.823096][ T48] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 656.859376][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.880527][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.918116][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 656.941956][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.962457][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.977032][ T5918] usb 2-1: config 0 descriptor?? [ 657.150143][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 657.190084][ T48] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 657.200799][ T48] usb 6-1: can't read configurations, error -71 [ 657.597599][T12145] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1628'. [ 657.813047][ T5918] usbhid 2-1:0.0: can't add hid device: -71 [ 657.859197][ T5918] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 657.944810][ T5918] usb 2-1: USB disconnect, device number 83 [ 658.255101][T12168] tipc: Enabling of bearer rejected, failed to enable media [ 658.562486][ T48] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 658.736132][ T48] usb 6-1: Using ep0 maxpacket: 16 [ 658.768584][ T48] usb 6-1: config index 0 descriptor too short (expected 63250, got 18) [ 658.864197][ T48] usb 6-1: config 146 has an invalid descriptor of length 32, skipping remainder of the config [ 658.885821][ T5837] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 659.161752][ T48] usb 6-1: config 146 has no interfaces? [ 659.200469][ T48] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 659.263123][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 659.333222][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.340618][ T5837] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 659.341235][ T48] usb 6-1: Product: syz [ 659.374633][ T48] usb 6-1: Manufacturer: syz [ 659.379304][ T48] usb 6-1: SerialNumber: syz [ 659.462844][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.547647][ T5837] usb 1-1: Product: syz [ 659.551898][ T5837] usb 1-1: Manufacturer: syz [ 659.629695][ T5837] usb 1-1: SerialNumber: syz [ 659.660504][T12187] overlayfs: missing 'lowerdir' [ 659.686307][ T5837] usb 1-1: config 0 descriptor?? [ 659.710614][ T5837] gspca_main: sq905-2.14.0 probing 2770:9120 [ 660.146548][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.195233][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.870344][ T5837] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 660.878648][ T5837] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 660.992627][ T5837] usb 1-1: USB disconnect, device number 60 [ 664.683001][ T30] audit: type=1326 audit(1755430428.613:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12225 comm="syz.2.1650" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f705318ebe9 code=0x0 [ 665.009900][T12235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1652'. [ 665.080573][T12241] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1653'. [ 665.222994][ T5837] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 665.317982][ T890] usb 6-1: USB disconnect, device number 16 [ 665.395482][ T5837] usb 4-1: device descriptor read/64, error -71 [ 665.714562][ T5837] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 666.571729][T12258] lo speed is unknown, defaulting to 1000 [ 666.575073][T12262] netlink: 'syz.5.1660': attribute type 35 has an invalid length. [ 666.612964][ T5837] usb 4-1: device descriptor read/64, error -71 [ 666.866422][ T5837] usb usb4-port1: attempt power cycle [ 667.286343][T12268] ip6gre1: entered allmulticast mode [ 667.353100][ T5837] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 667.558534][ T5837] usb 4-1: device descriptor read/8, error -71 [ 668.273022][ T48] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 668.464492][ T5837] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 668.513779][ T48] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.552963][ T48] usb 6-1: config 0 has no interfaces? [ 668.601275][ T48] usb 6-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 668.672085][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.699144][ T48] usb 6-1: Product: syz [ 668.711207][ T48] usb 6-1: Manufacturer: syz [ 668.943812][ T5837] usb 4-1: device not accepting address 65, error -71 [ 668.950978][ T5837] usb usb4-port1: unable to enumerate USB device [ 668.960844][ T48] usb 6-1: SerialNumber: syz [ 669.010398][ T48] usb 6-1: config 0 descriptor?? [ 669.161002][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 669.365436][ T48] usb 6-1: USB disconnect, device number 17 [ 669.427737][T12285] netlink: 'syz.2.1665': attribute type 13 has an invalid length. [ 669.435767][T12285] netlink: 'syz.2.1665': attribute type 17 has an invalid length. [ 669.460493][T12285] syz_tun: left promiscuous mode [ 669.474979][T12285] bridge0: port 3(team0) entered blocking state [ 669.481340][T12285] bridge0: port 3(team0) entered forwarding state [ 669.488032][T12285] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.495158][T12285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.502512][T12285] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.509638][T12285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.518140][T12285] bridge0: left allmulticast mode [ 669.536979][T12285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.664009][ T5837] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 670.471499][ T5837] usb 4-1: device descriptor read/64, error -71 [ 672.691945][ T5837] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 673.783917][T12335] bridge0: port 3(hsr_slave_1) entered blocking state [ 673.803026][T12335] bridge0: port 3(hsr_slave_1) entered disabled state [ 673.810056][T12335] hsr_slave_1: entered allmulticast mode [ 673.821238][T12335] hsr_slave_1: left allmulticast mode [ 673.932621][T12338] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1680'. [ 673.942195][T12338] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 674.010880][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 675.042938][ T5837] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 675.210877][T12363] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 675.217620][ T5837] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 675.235917][ T5837] usb 6-1: config 0 has no interface number 0 [ 675.245435][ T5837] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 675.254775][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.263963][ T5837] usb 6-1: Product: syz [ 675.268369][ T5837] usb 6-1: Manufacturer: syz [ 675.273682][ T5837] usb 6-1: SerialNumber: syz [ 675.296614][ T5837] usb 6-1: config 0 descriptor?? [ 675.315904][ T5837] yurex 6-1:0.50: Could not find endpoints [ 675.532965][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 676.649639][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 676.671856][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 676.745151][T12381] netlink: 'syz.3.1691': attribute type 22 has an invalid length. [ 676.753256][T12381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 676.770835][T12381] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.779156][T12381] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.787395][T12381] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.795704][T12381] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.837079][T12379] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1691'. [ 676.851317][ T9] usb 1-1: config 220 has no interface number 2 [ 676.862723][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 676.878956][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 676.911025][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 677.476481][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 677.522230][ T48] usb 6-1: USB disconnect, device number 18 [ 677.654964][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 677.664437][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.672459][ T9] usb 1-1: Product: syz [ 677.704759][ T9] usb 1-1: Manufacturer: syz [ 677.715680][ T9] usb 1-1: SerialNumber: syz [ 678.589694][ T9] usb 1-1: selecting invalid altsetting 0 [ 678.596121][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 678.602586][ T9] usb 1-1: No valid video chain found. [ 678.613223][ T9] usb 1-1: selecting invalid altsetting 0 [ 678.619025][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 678.629329][ T9] usb 1-1: USB disconnect, device number 61 [ 679.884928][T12407] lo speed is unknown, defaulting to 1000 [ 680.809886][T12411] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1698'. [ 681.132983][ T927] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 682.040216][ T927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.068055][ T927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 682.098726][ T927] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 682.691111][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.743997][ T927] usb 1-1: config 0 descriptor?? [ 682.900549][ T927] usb 1-1: can't set config #0, error -71 [ 682.945147][ T927] usb 1-1: USB disconnect, device number 62 [ 683.508903][T12443] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 684.911303][T12458] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1714'. [ 685.879025][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.881538][T12498] overlayfs: failed to clone upperpath [ 689.823013][ T927] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 689.830732][ T9] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 689.968636][T12522] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 690.013253][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 690.030913][ T927] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 690.051461][ T927] usb 2-1: config 0 has no interface number 0 [ 690.080536][ T927] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 690.101903][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.122953][ T927] usb 2-1: Product: syz [ 690.137559][ T927] usb 2-1: Manufacturer: syz [ 690.154647][ T927] usb 2-1: SerialNumber: syz [ 690.172914][ T9] usb 4-1: new low-speed USB device number 69 using dummy_hcd [ 690.188179][ T927] usb 2-1: config 0 descriptor?? [ 690.342951][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 690.348740][ T9] usb usb4-port1: attempt power cycle [ 690.450303][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'. [ 690.604948][ T927] usb 2-1: USB disconnect, device number 84 [ 690.704560][ T9] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 690.754824][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 690.904219][ T9] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 691.006259][ T9] usb 4-1: Invalid ep0 maxpacket: 16 [ 691.060134][ T9] usb usb4-port1: unable to enumerate USB device [ 692.272908][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 692.446839][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 692.473239][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.549931][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 692.620333][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.999545][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.569654][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 693.578825][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.848479][T12571] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1743'. [ 693.923072][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 693.931603][ T9] usbtmc 2-1:16.0: can't read capabilities [ 694.519024][T12584] overlay: Unknown parameter 'rootcontext' [ 694.872740][T12593] comedi comedi2: aio_iiro_16: I/O port conflict (0x3,8) [ 695.264033][T12602] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 695.413985][T12599] 9pnet: Could not find request transport: Wd [ 695.473067][ T5918] usb 2-1: USB disconnect, device number 85 [ 696.273029][ T48] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 696.733696][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 697.491746][ T48] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 697.501317][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.509612][ T48] usb 1-1: Product: syz [ 697.513997][ T48] usb 1-1: Manufacturer: syz [ 697.518598][ T48] usb 1-1: SerialNumber: syz [ 697.525970][ T48] usb 1-1: config 0 descriptor?? [ 697.533359][ T48] gspca_main: sq930x-2.14.0 probing 2770:930c [ 699.428478][ T48] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 699.500164][ T48] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 699.818707][ T48] usb 1-1: USB disconnect, device number 63 [ 700.088784][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 702.382959][T12681] syz.1.1774 (12681) used obsolete PPPIOCDETACH ioctl [ 702.735176][T12694] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 702.744717][T12694] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 705.472117][T12719] delete_channel: no stack [ 705.706593][T12726] Invalid ELF section header size [ 707.014882][T12737] 9pnet_fd: Insufficient options for proto=fd [ 709.121898][T12785] netlink: 'syz.3.1790': attribute type 22 has an invalid length. [ 709.150266][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 709.184288][T12785] netlink: 'syz.3.1790': attribute type 22 has an invalid length. [ 709.217425][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 709.533004][T11415] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 710.043942][T11415] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.055246][T11415] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.066519][T11415] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.077899][T11415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.087212][T11415] usb 1-1: SerialNumber: syz [ 710.345534][T11415] usb 1-1: 0:2 : does not exist [ 710.383176][T11415] usb 1-1: unit 48 not found! [ 710.437707][T11415] usb 1-1: USB disconnect, device number 64 [ 711.393158][T12806] overlayfs: failed to clone upperpath [ 712.533445][T12819] delete_channel: no stack [ 714.900859][T12854] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1810'. [ 716.082078][T12867] delete_channel: no stack [ 716.311903][T12868] syz_tun: entered allmulticast mode [ 716.522425][T12866] syz_tun: left allmulticast mode [ 718.963011][ T927] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 719.133909][ T927] usb 4-1: Using ep0 maxpacket: 8 [ 719.159476][ T927] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 719.178541][ T927] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 719.193068][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.208610][T12892] overlayfs: failed to clone lowerpath [ 719.227334][ T927] usb 4-1: Product: syz [ 719.241712][ T927] usb 4-1: Manufacturer: syz [ 719.258073][ T927] usb 4-1: SerialNumber: syz [ 719.285267][ T927] usb 4-1: config 0 descriptor?? [ 719.301897][ T927] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 719.320506][ T927] usb 4-1: setting power ON [ 719.340150][ T927] dvb-usb: bulk message failed: -22 (2/0) [ 719.373580][ T927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 719.396278][ T927] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 719.423317][ T927] usb 4-1: media controller created [ 719.553523][ T927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.585554][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 719.665803][ T927] usb 4-1: selecting invalid altsetting 6 [ 719.672186][ T927] usb 4-1: digital interface selection failed (-22) [ 719.679734][ T927] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 719.698958][ T927] usb 4-1: setting power OFF [ 719.704614][ T927] dvb-usb: bulk message failed: -22 (2/0) [ 719.719294][ T927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 719.743144][ T927] (NULL device *): no alternate interface [ 719.855165][ T927] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 719.912607][ T927] usb 4-1: USB disconnect, device number 72 [ 720.308039][T12905] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 720.698596][T12911] delete_channel: no stack [ 722.755409][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1831'. [ 723.182039][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 724.359308][T12953] delete_channel: no stack [ 724.443032][ T5837] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 724.623042][ T5837] usb 4-1: device descriptor read/64, error -71 [ 724.942978][ T5837] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 725.152935][ T5837] usb 4-1: device descriptor read/64, error -71 [ 725.282539][ T5837] usb usb4-port1: attempt power cycle [ 725.938866][ T5837] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 726.565670][ T5837] usb 4-1: device descriptor read/8, error -71 [ 726.837478][ T5837] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 726.897149][ T5837] usb 4-1: device descriptor read/8, error -71 [ 727.093493][T11415] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 727.116353][ T5837] usb usb4-port1: unable to enumerate USB device [ 727.285186][T11415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.303447][T11415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.323180][T11415] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 727.354190][T11415] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 727.367170][T11415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.397622][T11415] usb 1-1: config 0 descriptor?? [ 727.483204][ T48] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 727.656098][ T48] usb 6-1: unable to get BOS descriptor or descriptor too short [ 727.673597][ T48] usb 6-1: not running at top speed; connect to a high speed hub [ 727.715994][ T48] usb 6-1: config 1 interface 0 altsetting 16 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 727.753617][ T48] usb 6-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 727.819906][ T48] usb 6-1: config 1 interface 0 has no altsetting 0 [ 727.861922][ T48] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.877970][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.892219][ T48] usb 6-1: Product: syz [ 727.952609][T12996] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1847'. [ 727.985944][ T48] usb 6-1: Manufacturer: syz [ 728.006122][ T48] usb 6-1: SerialNumber: syz [ 728.040938][T12970] C: renamed from team_slave_0 (while UP) [ 728.069281][T12991] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 728.228096][T12970] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1841'. [ 728.495407][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.524854][T11415] usbhid 1-1:0.0: can't add hid device: -71 [ 728.530939][T11415] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 728.568341][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.605334][T11415] usb 1-1: USB disconnect, device number 65 [ 728.625016][ T48] usb 6-1: bad CDC descriptors [ 728.676164][ T48] usb 6-1: USB disconnect, device number 19 [ 730.907491][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1852'. [ 730.954766][T13012] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.056466][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1853'. [ 731.163149][T11415] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 731.382441][T13023] overlayfs: failed to clone upperpath [ 731.397784][T11415] usb 4-1: device descriptor read/64, error -71 [ 732.797662][T13039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1858'. [ 732.872933][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 732.882932][T11415] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 733.012928][T11415] usb 4-1: device descriptor read/64, error -71 [ 733.133776][T11415] usb usb4-port1: attempt power cycle [ 733.182145][ T9] usb 6-1: device descriptor read/64, error -71 [ 733.433198][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 733.606201][ T9] usb 6-1: device descriptor read/64, error -71 [ 733.755585][ T9] usb usb6-port1: attempt power cycle [ 734.173480][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 734.182888][ T48] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 734.206841][ T9] usb 6-1: device descriptor read/8, error -71 [ 734.333256][ T5837] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 734.529259][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 734.548452][ T48] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 734.566147][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 734.575573][ T48] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 734.589496][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.593536][ T5837] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 734.607121][ T48] usb 2-1: Product: syz [ 734.611422][ T48] usb 2-1: Manufacturer: syz [ 734.616673][ T48] usb 2-1: SerialNumber: syz [ 734.624493][ T48] usb 2-1: config 0 descriptor?? [ 734.625176][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.669228][ T5837] usb 1-1: Product: syz [ 734.674081][T13051] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 734.685363][ T48] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 734.700775][ T5837] usb 1-1: Manufacturer: syz [ 734.710655][ T5837] usb 1-1: SerialNumber: syz [ 734.732720][ T5837] usb 1-1: config 0 descriptor?? [ 734.752403][ T5837] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 734.780650][ T5837] usb 1-1: Detected FT-X [ 734.948918][ T927] usb 2-1: USB disconnect, device number 86 [ 734.949070][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 734.960385][ T5837] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 735.018450][ T5837] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 735.047881][ T5837] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 735.055317][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 735.087376][ T9] usb 6-1: device descriptor read/8, error -71 [ 735.099291][ T5837] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 735.151539][ T5837] usb 1-1: USB disconnect, device number 66 [ 735.162093][ T5837] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 735.196294][ T5837] ftdi_sio 1-1:0.0: device disconnected [ 735.223191][ T9] usb usb6-port1: unable to enumerate USB device [ 736.025953][T13088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1872'. [ 736.293821][ T31] INFO: task syz.4.1342:11040 blocked for more than 143 seconds. [ 736.381333][ T31] Not tainted 6.16.0-syzkaller #0 [ 736.518250][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 736.572921][ T31] task:syz.4.1342 state:D stack:25096 pid:11040 tgid:11040 ppid:5840 task_flags:0x400040 flags:0x00004006 [ 736.588830][ T31] Call Trace: [ 736.592155][ T31] [ 736.595298][ T31] __schedule+0x16aa/0x4c90 [ 736.599865][ T31] ? schedule+0x165/0x360 [ 736.613046][ T31] ? __pfx___schedule+0x10/0x10 [ 736.617956][ T31] ? schedule+0x91/0x360 [ 736.622225][ T31] schedule+0x165/0x360 [ 736.643232][ T31] __fuse_simple_request+0xf15/0x18d0 [ 736.648720][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 736.662925][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 736.674983][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 736.691432][ T31] fuse_flush+0x5d4/0x800 [ 736.696095][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 736.701693][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 736.711097][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 736.723065][ T31] filp_flush+0xba/0x190 [ 736.727421][ T31] filp_close+0x1d/0x40 [ 736.731797][ T31] __se_sys_close_range+0x359/0x650 [ 736.747822][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 736.762859][ T31] ? rcu_is_watching+0x15/0xb0 [ 736.767701][ T31] ? do_syscall_64+0xbe/0x3b0 [ 736.772411][ T31] do_syscall_64+0xfa/0x3b0 [ 736.782917][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.794125][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 736.807321][ T31] ? clear_bhb_loop+0x60/0xb0 [ 736.823085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.830218][ T31] RIP: 0033:0x7fa72218ebe9 [ 736.840358][ T31] RSP: 002b:00007fff8d4124d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 736.857345][ T31] RAX: ffffffffffffffda RBX: 00007fa7223b7da0 RCX: 00007fa72218ebe9 [ 736.874039][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 736.903792][ T31] RBP: 00007fa7223b7da0 R08: 00000000000000d0 R09: 0000000c8d4127cf [ 736.920042][ T31] R10: 00007fa7223b7cb0 R11: 0000000000000246 R12: 000000000008c19b [ 736.938385][ T31] R13: 00007fa7223b6090 R14: ffffffffffffffff R15: 00007fff8d4125f0 [ 736.946619][ T31] [ 737.063425][ T31] [ 737.063425][ T31] Showing all locks held in the system: [ 737.071223][ T31] 1 lock held by khungtaskd/31: [ 737.076189][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 737.086155][ T31] 2 locks held by getty/5597: [ 737.090856][ T31] #0: ffff88814c9d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 737.100742][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 737.110980][ T31] 5 locks held by kworker/u8:20/12778: [ 737.116517][ T31] 1 lock held by syz.2.1873/13084: [ 737.121806][ T31] #0: ffff88807fafb3e0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1bd/0x4c0 [ 737.142930][ T31] 1 lock held by syz.2.1873/13085: [ 737.148078][ T31] 1 lock held by syz.2.1873/13091: [ 737.162877][ T31] [ 737.165329][ T31] ============================================= [ 737.165329][ T31] [ 737.183469][ T31] NMI backtrace for cpu 0 [ 737.183487][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 737.183527][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.183540][ T31] Call Trace: [ 737.183549][ T31] [ 737.183558][ T31] dump_stack_lvl+0x189/0x250 [ 737.183585][ T31] ? __wake_up_klogd+0xd9/0x110 [ 737.183618][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.183643][ T31] ? __pfx__printk+0x10/0x10 [ 737.183686][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 737.183723][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 737.183752][ T31] ? _printk+0xcf/0x120 [ 737.183784][ T31] ? __pfx__printk+0x10/0x10 [ 737.183815][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 737.183852][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 737.183887][ T31] watchdog+0xfee/0x1030 [ 737.183922][ T31] ? watchdog+0x1de/0x1030 [ 737.183963][ T31] kthread+0x70e/0x8a0 [ 737.183996][ T31] ? __pfx_watchdog+0x10/0x10 [ 737.184026][ T31] ? __pfx_kthread+0x10/0x10 [ 737.184056][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.184077][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.184096][ T31] ? __pfx_kthread+0x10/0x10 [ 737.184132][ T31] ret_from_fork+0x3fc/0x770 [ 737.184157][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 737.184184][ T31] ? __switch_to_asm+0x39/0x70 [ 737.184210][ T31] ? __switch_to_asm+0x33/0x70 [ 737.184235][ T31] ? __pfx_kthread+0x10/0x10 [ 737.184265][ T31] ret_from_fork_asm+0x1a/0x30 [ 737.184310][ T31] [ 737.184318][ T31] Sending NMI from CPU 0 to CPUs 1: [ 737.340211][ C1] NMI backtrace for cpu 1 [ 737.340226][ C1] CPU: 1 UID: 0 PID: 13085 Comm: syz.2.1873 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 737.340244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.340255][ C1] RIP: 0010:__lock_acquire+0x85b/0xd20 [ 737.340274][ C1] Code: 89 f0 c1 c0 08 29 f1 31 c8 01 d6 29 c2 89 c1 c1 c1 10 31 d1 01 f0 41 89 cf 41 c1 c7 13 29 ce 41 31 f7 01 c1 44 29 f8 44 01 f9 <41> c1 c7 04 41 31 c7 49 c1 e7 20 49 09 cf 83 3d 84 9f 02 0e 00 0f [ 737.340289][ C1] RSP: 0018:ffffc9001b9d7418 EFLAGS: 00000096 [ 737.340303][ C1] RAX: 00000000f0af209b RBX: 0000000000000005 RCX: 00000000fef07a87 [ 737.340314][ C1] RDX: 00000000d59ecd1d RSI: 00000000576e5d05 RDI: ffff888020b53c00 [ 737.340325][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81f5fcdc [ 737.340335][ C1] R10: 0000000000000406 R11: 0000000000000002 R12: 0000000072168d09 [ 737.340345][ C1] R13: ffff888020b546f0 R14: ffff888020b547b8 R15: 00000000ad1bfd4f [ 737.340357][ C1] FS: 00007f7053f926c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 737.340370][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.340381][ C1] CR2: 00007fdf62584198 CR3: 000000007a71c000 CR4: 00000000003526f0 [ 737.340395][ C1] Call Trace: [ 737.340401][ C1] [ 737.340411][ C1] ? folio_try_get+0x1c/0x340 [ 737.340434][ C1] lock_acquire+0x120/0x360 [ 737.340447][ C1] ? folio_try_get+0x1c/0x340 [ 737.340474][ C1] ? folio_try_get+0x1c/0x340 [ 737.340497][ C1] folio_try_get+0x38/0x340 [ 737.340519][ C1] ? folio_try_get+0x1c/0x340 [ 737.340541][ C1] next_uptodate_folio+0xcb/0x5d0 [ 737.340560][ C1] filemap_map_pages+0x1025/0x1740 [ 737.340585][ C1] ? filemap_map_pages+0x14b/0x1740 [ 737.340602][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 737.340622][ C1] ? __handle_mm_fault+0x296f/0x5620 [ 737.340645][ C1] ? __handle_mm_fault+0x296f/0x5620 [ 737.340670][ C1] __handle_mm_fault+0x368a/0x5620 [ 737.340701][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 737.340731][ C1] ? follow_page_pte+0x8d6/0x14b0 [ 737.340749][ C1] handle_mm_fault+0x2d5/0x7f0 [ 737.340777][ C1] __get_user_pages+0x1af4/0x30b0 [ 737.340804][ C1] ? mt_find+0x15c/0x5f0 [ 737.340828][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 737.340860][ C1] populate_vma_page_range+0x26b/0x340 [ 737.340883][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 737.340905][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 737.340931][ C1] ? down_read+0x1ad/0x2e0 [ 737.340951][ C1] __mm_populate+0x24c/0x380 [ 737.340973][ C1] ? __pfx___mm_populate+0x10/0x10 [ 737.340996][ C1] ? up_write+0x1c4/0x420 [ 737.341015][ C1] vm_mmap_pgoff+0x3f0/0x4c0 [ 737.341039][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 737.341061][ C1] ? rcu_is_watching+0x15/0xb0 [ 737.341078][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 737.341092][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 737.341110][ C1] do_syscall_64+0xfa/0x3b0 [ 737.341127][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.341143][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.341158][ C1] ? clear_bhb_loop+0x60/0xb0 [ 737.341175][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.341190][ C1] RIP: 0033:0x7f705318ebe9 [ 737.341203][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.341217][ C1] RSP: 002b:00007f7053f92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 737.341231][ C1] RAX: ffffffffffffffda RBX: 00007f70533b5fa0 RCX: 00007f705318ebe9 [ 737.341243][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 737.341254][ C1] RBP: 00007f7053211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 737.341265][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 737.341275][ C1] R13: 00007f70533b6038 R14: 00007f70533b5fa0 R15: 00007ffeee8a55d8 [ 737.341292][ C1] [ 737.342643][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 737.729783][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 737.739506][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.749560][ T31] Call Trace: [ 737.752842][ T31] [ 737.755778][ T31] dump_stack_lvl+0x99/0x250 [ 737.760375][ T31] ? __asan_memcpy+0x40/0x70 [ 737.764972][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.770173][ T31] ? __pfx__printk+0x10/0x10 [ 737.774791][ T31] panic+0x2db/0x790 [ 737.778696][ T31] ? __pfx_panic+0x10/0x10 [ 737.783113][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 737.788925][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 737.794310][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 737.800488][ T31] watchdog+0x102d/0x1030 [ 737.804825][ T31] ? watchdog+0x1de/0x1030 [ 737.809260][ T31] kthread+0x70e/0x8a0 [ 737.813340][ T31] ? __pfx_watchdog+0x10/0x10 [ 737.818021][ T31] ? __pfx_kthread+0x10/0x10 [ 737.822625][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 737.827825][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.833029][ T31] ? __pfx_kthread+0x10/0x10 [ 737.837639][ T31] ret_from_fork+0x3fc/0x770 [ 737.842232][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 737.847347][ T31] ? __switch_to_asm+0x39/0x70 [ 737.852115][ T31] ? __switch_to_asm+0x33/0x70 [ 737.856882][ T31] ? __pfx_kthread+0x10/0x10 [ 737.861476][ T31] ret_from_fork_asm+0x1a/0x30 [ 737.866252][ T31] [ 737.869661][ T31] Kernel Offset: disabled [ 737.873995][ T31] Rebooting in 86400 seconds..