last executing test programs: 20.737601356s ago: executing program 3 (id=751): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x40, 0x0, 0x2}}, 0x14) mkdirat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) unlink(&(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1a8) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x451, 0x8001008, r4, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r6, 0x2) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) fanotify_mark(r5, 0x1, 0x800002b, r7, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x20) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) 20.532885604s ago: executing program 3 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x88080) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x50000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000002}, 0x0) 20.207089812s ago: executing program 3 (id=757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000800000010000000a6c000000060a0b04000000000000000002000000400004801800018009000000837366000c000280080001400000000424000180090001006d65746100000d0014000280080002400000000c08000340000000150900010073797a300000000073797a3200000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000800000010000000a6c000000060a0b04000000000000000002000000400004801800018009000000837366000c000280080001400000000424000180090001006d65746100000d0014000280080002400000000c08000340000000150900010073797a300000000073797a3200000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) (async) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) syz_clone3(0x0, 0x0) (async) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) 20.029221367s ago: executing program 3 (id=759): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000214010027bd7000fcdbdf250900020073797a320000000005005400000000000500004400", @ANYRES32, @ANYBLOB="0900020073797a30000000000800010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 19.956983436s ago: executing program 3 (id=760): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000001a80)={0x2020}, 0x2020) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="972fd1ebe125a60ab6d6b3fdf725be36", 0x10}], 0x1, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x200080d0) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb, 0x20}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19.897414905s ago: executing program 3 (id=761): r0 = socket(0x2, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095", @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=0x0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 6.687400839s ago: executing program 2 (id=835): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80086f53, &(0x7f0000000000)={0x9, &(0x7f0000000380)=[{0x43, '\x00', @buffer={"ea5856669f25cb27a9406c69ccfc30f07d56c06d50b9544c9b5effec576b4a87", 0x20}, 0xd7fa}, {0x3d, '\x00', @st={0x4, [{0x1, @svalue=0xfffffffffffffff9}, {0x1, @svalue=0x7}, {0x2}, {0x2, @svalue=0x8}]}, 0x285}, {0x36, '\x00', @st={0x4, [{0x0, @svalue=0x323}, {0x3, @svalue=0x9}, {0x3, @svalue=0x2}, {0x3, @svalue=0x9}]}, 0x6}, {0x1f, '\x00', @data=0x7, 0x5}, {0x13, '\x00', @data=0x5, 0x4}, {0x1f, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x0, @uvalue=0xfff}, {0x0, @svalue=0xffffffffffffffff}, {0x1}]}, 0x8}, {0x32, '\x00', @st={0x4, [{0x1, @svalue=0x9}, {0x1, @svalue=0xb15}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}]}, 0xa8a9}, {0x3c, '\x00', @buffer={"3bd6fce25810f2cf09b65d8af9d9a8c42f4a9a83d1bbdfbe2edbec54dc2d9340", 0x20}}, {0x39, '\x00', @data=0xb8e, 0x8005}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[@ANYBLOB="200000000f140001000000000000df1fea000100b5800097d127161900080045"], 0x20}}, 0x4c084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000240)=""/153, 0x41000}, 0x94) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008044) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, &(0x7f0000000240), 0xa100000e, &(0x7f00000002c0)) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.367357364s ago: executing program 2 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x582, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000080)='/dev/usbmon#\x00') madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x100000) write(r4, &(0x7f0000000300)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/bus/pci/rescan\x00', 0x801, 0x0) write(r7, &(0x7f0000000300)='1', 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$tun(r8, &(0x7f0000000140)=ANY=[@ANYRESDEC=r10], 0xc2) write$tun(r8, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x1e) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) 4.854255677s ago: executing program 32 (id=761): r0 = socket(0x2, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095", @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=0x0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 3.900721308s ago: executing program 2 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000401000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a01010000001c49ba9c00050000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240521deb0b48000000060a010400000000000000000500000008000b4000000000200004801c0001800a00010071756575650000000c00028006000101af0e00000900010073797a30"], 0xd0}}, 0x0) 3.806502886s ago: executing program 2 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f500008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/syzkaller0/use_tempaddr\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='2\n', 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) 3.53702558s ago: executing program 2 (id=856): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x2f00, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x26020480) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014000700100008001300080003000800"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92}, 0x94) 2.906498738s ago: executing program 0 (id=865): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r3, &(0x7f00000003c0)=@in={0x2, 0x4e21, @multicast1}, 0x80) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) unshare(0x40400) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000004f000100feffffffffffffff64010100000000ffffffffffffffff1ecb48000000000000000000000000000000000000000000ffff00000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000090) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYBLOB="72e928d704746400f8ab70e32ccebdd940d6bb74edc403ef19946655eda33bf02057bc2afc833e44e10c09d8101e2878a8761c993d77ad97cddc65532532cbd7048f3f0cbbf705b5c3630892468496355509520e9f56331e9907c3d66e139ef43013b2508aa51948c2efd588e8222e26660bdc1ccb32", @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c050) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="060000001800000004000000", @ANYRES32=r5, @ANYRES16=r1, @ANYRES64=r8], 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1800000078000106ff9cb6446f79de1329ce0000000700000001"], 0x18}], 0x1}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}, {0x0}, {0xfffffffffffffffe}], 0x3}}], 0x1, 0x4000000) 2.59105732s ago: executing program 0 (id=867): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000200a8e6cf9bb4b4eada5dd86592f6bc20ffdbdf252500f665a85b0fa6a136949442e0c316d638c555daaf0b2afd2bb23bef4ef6964855926ea2acd6d562a6cc90bb79e9c8ef46ffd8d1e4aa8ef1a60821b94fe93a3f5aa3e0e7d083b0ce660e707be692996b9b42f46e1451986550685c4550ef3098f1cf7dab21083c76ea5040032244b20e3b963a72c66084919706006cdb044e3b45c1f73255842045c5907cc6d72e7668de703efe7d95d10168657aa80c5fba17502d0e4492645091aec51d49c4f70732a2d49caa9058fa8960efe337e3f87e4046782596d039a908789f08f9d8b671654ec30e9cfa6d85bcacee22c5208367aa652b6d01035d23f4a832dc31e9df533710de4bb5ef5f066b895459aea1df984a8a87008a67c4fc118ec763e1ddb9fbda3601", @ANYRES32=0x0, @ANYBLOB="0c009900000001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_DO_IT(r0, 0xab03) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.335841826s ago: executing program 2 (id=871): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203dd46cfed0ffdfe9ffbe80176e84506563a6bef08ff30774b44424ccf8e6ac8863226e7b22614ef4382494bfe38c44f81d32daf98a9af07d84b9e5939886cf564a26d5e5df1398deb1cbb1bdb060121fa78bb308c37eac657b43462df43277ee3e6e1e736d659896790b8"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x1000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x9, 0x807f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r9, 0xfe0cef4d0db3b49, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 916.429619ms ago: executing program 0 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000100005041f00"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 817.100993ms ago: executing program 0 (id=874): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x27}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x5}, @exit, @jmp={0x5, 0x1, 0x1, 0xb, 0x3, 0x6, 0xfffffffffffffffc}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x2, 0x6, 0x1, 0x3884, 0x9}]}, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000005c0), 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r1}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, 0x0}, 0x20) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffff1fc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003802800008008000340000000021c0002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="55f407c8f0e2118ed86c072d1d750b86995ef30ab7b009f1cf98f87061179cad969461", 0x23, 0xfffffffffffffff8) r10 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="7308466f9af2d2a277f53d033f231cf8007bce31c46fec508ce492716c6e12d8e489db7d2ac47d3b3986bf9666697c06034983937e45b3bdada915eac1d05aa1839542e2bcdc795c9cbb5c5c87ee4d6494e7ae27828db2e1912c13db6ff7abc40c82bb0f785d58b7b788307259323d4f801451c99fbff903232c3286da903a88e6641572fea69c73271137efd77924871b4f9686b3205bce89d0f55009619071a20aa2", 0xa3, 0xfffffffffffffffa) keyctl$instantiate(0xc, r9, 0x0, 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000340)={r9, r10}, &(0x7f0000001a40)=""/4096, 0x1000, &(0x7f0000002b80)={&(0x7f0000002a40)={'michael_mic\x00'}, &(0x7f0000002b40)="9954564b9ee0f7e5999bced739a1a24b872d46ee0924acca9b7aa2dd1bc5c60d4ae15d66864d5a395c5346d51d", 0x2d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='tcpci 0x5', 0x9) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x81, 0x401, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000380)=@arm64={0xf8, 0xb6, 0x8c, '\x00', 0x7fff}) close_range(r0, 0xffffffffffffffff, 0x0) 755.972538ms ago: executing program 1 (id=877): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486315, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 697.298077ms ago: executing program 1 (id=878): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) 607.308264ms ago: executing program 1 (id=879): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x3000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 606.752369ms ago: executing program 0 (id=880): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x84000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0xf}, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$ndctl0(0xffffff9c, &(0x7f0000000040), 0x4a100, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001040)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x7f, 0x2f, 0x5}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 500.664743ms ago: executing program 1 (id=881): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240d9d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0208df8e61740b7cf2d4e499d586ed9fcf0fa0ce1f930c3079cffcfd0000000000db7291f100"}, 0xd8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1, 0x0, 0x0, 0x21}, 0x0) 256.372228ms ago: executing program 1 (id=882): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x1000007, 0x11, r2, 0x0) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r5 = mmap$KVM_VCPU(&(0x7f00004b3000/0x1000)=nil, r3, 0x3000000, 0x30, r4, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2578], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ptrace$ARCH_MAP_VDSO_32(0x1e, 0xffffffffffffffff, 0x1, 0x2002) r6 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r6, 0x1, 0x3d, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3400000010000108000049c60000000000000000", @ANYRES32=0x0, @ANYBLOB="8f400100080001000c0b7590db690c98832b800800010044b7f7b93435c43e95b0f1a3e1d2fa82ac83a1dd42eb6c46d8f4c5c975f66f8e249599fc6d9c0b38b2bc6d7f4a82c94857372b1875c3884d7c18318475c5daf189a138a2685593d8cb4104c468cdde2a1c915daaff065b05b3057221b8fd0811cba10ee157d028a68ad2e6f22af90e560e2b30a817fd6c7ae5178eae29e1a8f1948230d218a358858126e2444aca62cbe1e0ead98caa1b821a5b9021ec5c0dd9ae3a5e5dd113a18ce919e2564fc68092014479a30a11716edfd06f14f29be5da3a7c75e47fcf1960b0fa6b3e", @ANYRES32=r5, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 187.246117ms ago: executing program 4 (id=847): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x8, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r1 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x2, 0x6, 0x58}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000d40)={0xe0c, 0x0, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x4}, 0x5, 0x2, 0x8, 0x8, 0xa, 'syz0\x00', "7dabe2a5062e59d4e85002336213c7fb61ed8792f847a22d39f0ca53eb35dad9", "6637eaf6a0b3fff71dda56bef0328d40a5edb4eedb58c85445dfeec2fabadaf6", [{0x5, 0x2, {0x3, 0x36f4da2e}}, {0xfff9, 0x1, {0x0, 0x9}}, {0x1, 0x0, {0x3, 0xfffffffa}}, {0x0, 0x5, {0x0, 0x7}}, {0x2, 0x5, {0x3, 0xa1}}, {0xfcb3, 0x40, {0x3, 0xf2}}, {0x8, 0x9, {0x3, 0x8}}, {0x0, 0x3, {0x2, 0x1000}}, {0x7, 0xa, {0x2, 0xad26}}, {0x100, 0x8, {0x1, 0x85}}, {0x401, 0x2, {0x2, 0x1}}, {0x6, 0x40, {0x2, 0x3}}, {0x1000, 0x4, {0x1, 0xc3}}, {0x10, 0x100, {0x1}}, {0x5, 0x8001, {0x0, 0x3ff}}, {0xc, 0xffff, {0x1, 0x3}}, {0x7, 0x9, {0x3, 0xfffff176}}, {0x800, 0x6ff4, {0x2, 0x1}}, {0xb00, 0x2, {0x0, 0x6}}, {0x81, 0x1, {0x1, 0x1ff}}, {0x40, 0xf, {0x3, 0x7}}, {0x6, 0xf, {0x2, 0x6}}, {0xe00, 0x2, {0x2, 0xfffffffe}}, {0x8, 0xa, {0x2, 0x2f}}, {0x0, 0x9, {0x0, 0x7}}, {0x3, 0x8, {0x1, 0x3}}, {0x4, 0x13, {0x2, 0x9}}, {0x7, 0x6, {0x2, 0x5a}}, {0xec1a, 0x46, {0x1, 0x8a23}}, {0x6, 0x3, {0x2, 0xb}}, {0x6, 0x8, {0x1, 0x5}}, {0x6, 0x2, {0x0, 0xe34}}, {0x10, 0x7ff, {0x2, 0x4}}, {0x1000, 0x3, {0x3, 0x8}}, {0x8000, 0x3, {0x0, 0x7}}, {0x6, 0xffff, {0x1, 0x5}}, {0x8, 0x4, {0x2, 0x8000}}, {0x2, 0x8, {0x2, 0x7fff}}, {0x9, 0x5, {0x0, 0x7}}, {0xfffc, 0x8, {0x3, 0x53a}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x5, 0x21, 0x9, 0x1, 0x1d, 'syz0\x00', "8728e65cfdd43f3c6df1c55093f43a9daa391d08bf7c1de2efabe979fbef0a2d", "d60885090dfb938c17ba3900f063760423421036a4762cdc25cc834bc3050798", [{0x6b64, 0x3, {0x3, 0x1}}, {0xf57d, 0xd597, {0x0, 0x9}}, {0x6, 0x7a, {0x0, 0x1}}, {0x4858, 0x7, {0x8612314bf5a020ed, 0xfffffff9}}, {0x7, 0x9, {0x3, 0x6b}}, {0xffff, 0x6, {0x1, 0x2}}, {0x9, 0x8693, {0x3, 0x68c}}, {0x7, 0x7f, {0x2, 0x4}}, {0x8000, 0x1, {0x0, 0x1}}, {0x6bab, 0x8000, {0x1, 0x6}}, {0x7, 0x5, {0x3}}, {0x81, 0x5, {0x3, 0xe}}, {0x7f, 0x8, {0x3, 0x80}}, {0x7f, 0x4, {0x0, 0x100}}, {0x7, 0x3, {0x0, 0x80000000}}, {0xd49a, 0x8001, {0x2, 0x6}}, {0x8000, 0x8, {0x3, 0x8}}, {0xd3, 0x101, {0x0, 0x8}}, {0x6, 0x1, {0x1, 0x6}}, {0x3f, 0x40, {0x1, 0x8ea}}, {0xffff, 0x81, {0x0, 0x4f0}}, {0x401, 0x9, {0x0, 0x3}}, {0x60, 0x1, {0x0, 0x8}}, {0xfad6, 0x0, {0x2, 0x12}}, {0x6, 0x2000, {0x0, 0x1b}}, {0x1, 0x5, {0x1, 0xfffffff8}}, {0x6, 0x7, {0x0, 0x4}}, {0x8, 0x3}, {0x5, 0x9, {0x3, 0x4660}}, {0x16, 0x61, {0x1, 0x400}}, {0x4, 0xa, {0x1, 0x1000}}, {0x64c, 0x8, {0x2, 0x101}}, {0x1, 0x2, {0x3, 0x10000}}, {0x0, 0x5, {0x2, 0xfffffffa}}, {0x0, 0xff, {0x0, 0x1}}, {0x1, 0x3, {0x3, 0x3}}, {0xfff4, 0x74a5, {0x2, 0xde}}, {0x8, 0x9, {0x0, 0x5}}, {0xb9, 0xfbff, {0x1, 0x2}}, {0x5, 0x6, {0x0, 0x9521}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x0, 0x6, 0x2, 0xff5d, 0x28, 'syz0\x00', "a8776b2aaa3042557a0bae0bd4552c20d59c605280718132ccfaa5dd97344ba7", "6402dab87c44e43a3e9e61a61f4ec34051f12c8fdacf77637a00cc60514efc8b", [{0x4000, 0x0, {0x1, 0x2}}, {0x1, 0x62b1, {0x1, 0x7}}, {0xbc33, 0x8000, {0x2, 0x9}}, {0x3, 0x9, {0x1, 0x96a}}, {0xa, 0x1, {0x3, 0xd6a9}}, {0x2, 0x3ff, {0x1, 0x8}}, {0xf, 0x0, {0x0, 0x6}}, {0x0, 0x1, {0x2, 0x3}}, {0x4, 0xab, {0x3, 0x4}}, {0x7f, 0xe, {0x1, 0x6}}, {0x3, 0x234d, {0x2, 0xd9}}, {0x690, 0x81, {0x3, 0xcd8}}, {0x4, 0x2, {0x0, 0x4}}, {0x5, 0x3, {0x0, 0x2f58}}, {0x2fc, 0x2, {0x3}}, {0xfffb, 0x4, {0x3, 0xbb7}}, {0xaeb6, 0xb53, {0x3, 0x3bcb11ca}}, {0x1, 0x9, {0x1, 0x4438}}, {0x4, 0x8163, {0x1, 0x6}}, {0x0, 0xca, {0x0, 0xffffffff}}, {0x1, 0x101, {0x3, 0x80000001}}, {0x4, 0x1ff, {0x2, 0x3ff}}, {0x3f8, 0x3, {0x2, 0x7}}, {0xe, 0xbfa, {0x2, 0x100}}, {0xd7, 0xf, {0x1, 0x9}}, {0x0, 0x3, {0x1, 0x3ff}}, {0xfff, 0xfff9, {0x2, 0x7}}, {0x9, 0x2, {0x0, 0x5ed}}, {0x8a, 0x0, {0x3, 0x7fff}}, {0x5, 0x100, {0x1, 0x8}}, {0x401, 0xd, {0x3, 0x438c8ef1}}, {0xb00b, 0x5, {0x0, 0x9f9}}, {0x1, 0x9}, {0x5, 0x938, {0x3, 0x4}}, {0xa, 0x91f8, {0x0, 0x1}}, {0x3, 0x4, {0x3, 0x8}}, {0xd5, 0xffff, {0x1, 0x40}}, {0xffff, 0xfff9, {0x2, 0x9}}, {0xffff, 0x0, {0x1, 0x3}}, {0x2, 0xfff8, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{}, 0xf, 0x4, 0x6, 0x6, 0x21, 'syz1\x00', "cbb22507a73a4f76a09d27336f50cdc6386d402c9950dc9a6f63407dd9128973", "325d996a5d2100c056ed8404297a7ed7ac3163d5c6546cc7fb50ab16c3680f8c", [{0x800, 0xb, {0x2, 0xfffffff7}}, {0x7, 0xf, {0x1, 0x5}}, {0x1, 0xe90, {0x1, 0x9}}, {0x3ff, 0x2, {0x2, 0x4}}, {0x1, 0x101, {0x3}}, {0xb079, 0x2bb, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x8}}, {0x3ff, 0xfff, {0x2, 0x4}}, {0x5, 0x1ff, {0x0, 0x6e6c8778}}, {0x5, 0x96b, {0x1, 0x7}}, {0x5, 0x8, {0x2, 0x3}}, {0x3d, 0x0, {0x3, 0x7}}, {0x7, 0xae71, {0x3, 0xfd5}}, {0x8001, 0x1, {0x3, 0x5}}, {0x2, 0xd, {0x1, 0xfdbc}}, {0x1, 0xfffb, {0x3, 0x6}}, {0x7, 0xb, {0x0, 0x2}}, {0x8, 0x2, {0x1, 0x8}}, {0x6c4e, 0x6, {0x3, 0x6}}, {0xe, 0x7, {0x2, 0x81}}, {0x8dc2, 0x8, {0x0, 0x90}}, {0x4, 0x8, {0x2, 0x7}}, {0xe, 0x2, {0x2, 0x9}}, {0xe464, 0xd4, {0x0, 0x9}}, {0x36, 0x5, {0x2, 0x80000001}}, {0x1, 0x92, {0x2, 0x2}}, {0x1, 0x8001, {0x23a96e72afcb3377, 0x9}}, {0x5, 0x1, {0x2, 0x2}}, {0x3, 0x0, {0x0, 0x6}}, {0xe, 0x0, {0x0, 0x7}}, {0x1, 0x81, {0x0, 0x5}}, {0x7, 0xffff, {0x3, 0x400}}, {0x8, 0x0, {0x2}}, {0x8, 0xf118, {0x1, 0x5}}, {0xfff, 0x101, {0x0, 0x8bf}}, {0x401, 0x3, {0x1, 0x6}}, {0x5, 0x7fff, {0x1, 0x6}}, {0x3c, 0xfc9, {0x0, 0x5}}, {0x174f, 0x6a6, {0x2, 0x8001}}, {0x0, 0xc, {0x1, 0x80}}]}}}, {{0x254, 0x1, {{0x3, 0x80000000}, 0x5, 0x9, 0x6, 0x2, 0xf, 'syz1\x00', "5484022512a473f19695d4c2974c9164d6fe7427793708b49369c972b769f6dd", "fea7fb60c67dc0c0522f3d9ebaa2260fcf7c57fa0e593595d29cf45452b2462c", [{0x101, 0x8, {0x3, 0x10000}}, {0x0, 0x1, {0x1, 0x7}}, {0x8, 0x4, {0x3, 0x20000}}, {0x4, 0x1, {0x0, 0xffff32f2}}, {0xb583, 0x61, {0x3, 0x9}}, {0x602, 0xfc00, {0x2, 0x5}}, {0x81, 0x8, {0x2, 0x3}}, {0xff, 0x1, {0x0, 0x3}}, {0x2, 0x1, {0x1, 0x7fff}}, {0x7fff, 0x2, {0x3, 0x6}}, {0x1, 0x9971, {0x3, 0x3}}, {0x7, 0x5d, {0x3, 0x7}}, {0xff29, 0x7f, {0x2}}, {0x7, 0x6, {0x2, 0x7}}, {0x426, 0x4, {0x1, 0x80}}, {0x3, 0x5, {0x2, 0x79d}}, {0x8000, 0x8, {0x0, 0x1}}, {0x25, 0x3ff, {0x2, 0x8cb3}}, {0xad, 0x55, {0x3, 0xeec2}}, {0x3ff, 0x5, {0x1, 0x7f}}, {0xa, 0x5, {0x1, 0x5}}, {0x3, 0x400, {0x3, 0xb}}, {0x621, 0xfff, {0x2, 0x1}}, {0x4800, 0x3, {0x3, 0x8ca}}, {0x5, 0xd7f, {0x3, 0xa0e}}, {0x4, 0x5, {0x3, 0x9}}, {0x0, 0x8, {0x3, 0x3}}, {0x401, 0x80, {0x2, 0x3}}, {0x3, 0x954, {0x3, 0x1}}, {0x0, 0x3, {0x1, 0x7}}, {0xdcd5, 0x4, {0x1, 0x6}}, {0x3, 0x2, {0x0, 0x9}}, {0x4, 0xd, {0x1, 0x7}}, {0x7, 0xa6, {0x1, 0xff6}}, {0x8d5, 0xf, {0x0, 0x7ff}}, {0x9, 0x2, {0x2, 0x7}}, {0xfffa, 0x4, {0x1, 0x40}}, {0x1000, 0x401, {0x3, 0x1}}, {0x3ff, 0x3ff0, {0x1, 0x401}}, {0x2, 0x9, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x5, 0xa, 0x2, 0x2, 0x1f, 'syz0\x00', "9cf601bbb1382a9416b5202636db8a5f5e679012cae9403c15a34ce609d80c30", "f4516e7c8e40ff8abe84cf789161df258ea82204e3ff902041190d13d0b2ca7b", [{0xff, 0x5, {0x0, 0x7}}, {0x8, 0xd, {0x3, 0x2}}, {0x1, 0x8, {0x0, 0x6}}, {0x96, 0x1, {0x1, 0x1}}, {0x3, 0x800, {0x1, 0xfff}}, {0x7, 0x2, {0x3, 0xfe4b}}, {0xf, 0x7f, {0x3, 0x4}}, {0x8, 0x1, {0x3, 0xfffffffb}}, {0x101, 0xfff8, {0x2, 0xfffffff5}}, {0xb, 0x45f6, {0x1}}, {0xb, 0x2, {0x3, 0x2}}, {0x5dce, 0x5, {0x1, 0x2}}, {0xe, 0x1, {0x3, 0x200000}}, {0x9, 0x8, {0x1, 0x5}}, {0x683, 0x6, {0x0, 0x8}}, {0x1, 0x200, {0x0, 0x9}}, {0x2, 0x731d, {0x2, 0x9}}, {0x6, 0x4, {0x1, 0xb}}, {0x1ff, 0x0, {0x1, 0x1}}, {0x24, 0x6, {0x1, 0x9b7}}, {0xedd6, 0x3ff, {0x3, 0x67a}}, {0x764, 0xfff, {0x3}}, {0x72a, 0x3, {0x1, 0xffff3c92}}, {0x4, 0x4, {0x0, 0x9b9}}, {0x5, 0x9, {0x3, 0x5}}, {0x8001, 0x1, {0x3, 0x17f4}}, {0x0, 0x6, {0x0, 0x8}}, {0x0, 0x6, {0x3}}, {0x9, 0x7fff, {0x1, 0x40}}, {0x6, 0x7, {0x3}}, {0x81, 0x5, {0x2, 0xa19b}}, {0x310a, 0x4, {0x1, 0x80}}, {0x1000, 0x4, {0x0, 0x800}}, {0x5, 0x4, {0x3, 0x1}}, {0x2f, 0x561, {0x1, 0xfffffff9}}, {0xf, 0xb6, {0x3}}, {0x1, 0x9, {0x0, 0x355}}, {0x2, 0xb84, {0x0, 0x11a}}, {0x9, 0x3, {0x1, 0x8}}, {0x5, 0x0, {0x1, 0x8}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x2000c081}, 0x200400a0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount(0x0, &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1836000001000000000008230300000001000000a7030000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x101000, 0x42) rmdir(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00') syz_open_dev$vcsn(&(0x7f0000000240), 0x8, 0x101000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x3}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0x9057e4f0e50c55c5, 0x0, 0x4, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000280)={0x5, 0x4, 0x800, 0x0, 0x6}) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000040)=0x8000000) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f000033c000/0x800000)=nil, &(0x7f00008ae000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000700), 0x2) 46.459697ms ago: executing program 0 (id=883): syz_emit_ethernet(0x7a, &(0x7f0000000080)={@random="0500fe3d91b5", @random="0010000200", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aac4e0", 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x13a, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x1, 0x1, 0xa4, 0x50, 0x7, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x59e6, 0x5, 0x3, 0x6}, [@mdlm_detail={0xed, 0x24, 0x13, 0xf, "6a03441d05e0d10ddba685cdff71d226f3f6b2d8c27a65d1b38e4b46886351745c2465ed62b587534a4d26cb6b4ac21ffdbf88dccdbc9e4371a03144c5e93e701ad19931a48867cfb897a10f31db7a53d67d0b0e70bfa2a39e5a819969c5c8b0e2ef5613888d266a5a0cc60fd7ef5d9b48f83d4100ec14bf229942010e924238015707646537b27cb047d5cf40e31690ba117e2216e6252f40c713882e38b48ef482e05253ccaccc7ef14c41bc83a9941bced5ea2954fc229698556024b43ea5ef8795f6559c5dc6b1d2a2cc76292f07acad52dca02b695244f546585ccd0fddd28346807981b02f06"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x1, 0x8}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x3d, 0x2, 0x0, 0xff, 0x7}, 0x19b, &(0x7f0000000280)={0x5, 0xf, 0x19b, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xb, 0x9, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x3, 0xb, 0x6, 0x2}, @generic={0x100, 0x10, 0x2, "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"}, @generic={0x81, 0x10, 0x4, "0239e58b2529dd3e4774ea281704772bb42ce86f6aa23a08373d018d7f512b340024dd07ad243fae22dbb3021e4783bfea4c2dd9e563fd9cc4783c13ec42f1b361efcefce85b72187cb12f6bedf34b46213c2a0c658ef01351cb08331e70a62f6fbd94f0440ac7e66a28e8fa85897bdd7c3df14f28e291f53cbd27ea867d"}]}, 0x5, [{0xc1, &(0x7f0000000440)=@string={0xc1, 0x3, "733ecd0c2f9b18bd28837cc72c77248bc8d0f748bb749b4346fd6798400640f942be49544a688614de085e1c97012fd90c3b6a5490e8f27373771e8d020776f626bffa5cf68d72edd7199f7982d5cb0b0b2a88d3a648b950acedb77c15f4b40caf65b15987a46eee4178235ee3352d59c9945baf3164e2f5d773dad56ff613dbb4407d3271c8f5002b260503a8043c7ffdbef29d610b5c2351d88d99a9b3279f87bb7eba4ff9c56f940f0a9b29fa93fde214d35c80fd5acc7b061de972580b"}}, {0xf3, &(0x7f0000000540)=@string={0xf3, 0x3, "cfa77b8ccd1ea6e8264be3b3153d6576e8d22f033f903fa876fa06bd15924cda3d613f4bee93ce276e1ce91fc62e63f2b77df01bf5b84e5db0495c4574d5496ee9566c28da4dc929debb94b17ffa77453a4381a7a337f23c40f108e43cf90b3296dd14ead39047f4ec6837c292ef73e347c20dbd3cefd8cf8ff5ddd1ae7ece9261ac99854451d2e94e8525539e7faff1862b21ff1302e750ec3bfbcf8c2bb6f5c23c3cda1719c46b7818f019f836a13b0e183bf6d3dd5ff5870693a10beeaf2d1a44543e738ecb35a38b13898eb253cfed9e029057b73273a47869e522762ec084f0d28779807ae8c80259a7249e7d2b62"}}, {0x8, &(0x7f0000000640)=@string={0x8, 0x3, "1928dbd1834e"}}, {0xc3, &(0x7f0000000680)=@string={0xc3, 0x3, "affd3ed457a47aa37014f1280b04da11ff4b07b9550ca8220cd708dcf27badebd3fa4707b7bcf4d55f6971604f9a84173fefbf9d1ac8ce4b4b24964405dc85cd6a800e63787738aade2341a871710de72669596bcc002a18acb87c0df112f3f76aaf6e9aef7e14786afd6d732c0c5cfe9e10335a79c0b6b181597ccc5ad5de0b2fbc9347b7cd540d804506b440740a4f889620023e832ad7a4a199926b8bdf8c9fe84a838fc914c811c7c39f8474716a5e7f83d87fb10471b91232d7428aeca394"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44e}}]}) 0s ago: executing program 1 (id=884): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) umount2(0x0, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x40800) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x6a, 0x4, 0x1, 0x28, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7800, 0x3, 0x4c7a}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x8001) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000400)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de1b", 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298280000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff0300670600001f000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) kernel console output (not intermixed with test programs): er fired with no URBs pending? [ 103.659034][ T6786] syzkaller0: entered promiscuous mode [ 103.660865][ T6786] syzkaller0: entered allmulticast mode [ 103.692564][ T5750] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 104.402122][ T6797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.443278][ T56] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.467290][ T6802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.255'. [ 104.593218][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 104.600129][ T56] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.603473][ T56] usb 5-1: config 179 has no interface number 0 [ 104.605706][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.609897][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.614166][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.618313][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.622363][ T56] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.627700][ T56] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.631164][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.640301][ T6789] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 104.659569][ T42] audit: type=1400 audit(1785488930.444:155): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=6818 comm="syz.3.265" [ 104.698492][ T6819] syz.3.265: attempt to access beyond end of device [ 104.698492][ T6819] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 104.703253][ T5558] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.703297][ T5558] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.703430][ T5558] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.703461][ T5558] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.715497][ T6819] gfs2: error -5 reading superblock [ 104.908406][ T5847] usb 5-1: USB disconnect, device number 7 [ 104.908419][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.419246][ T6848] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 105.429294][ T6848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 105.955460][ C0] sr 2:0:0:0: [sr0] tag#18 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 105.958777][ C0] sr 2:0:0:0: [sr0] tag#18 CDB: Test Unit Ready [ 105.971359][ T6859] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 106.102771][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.277'. [ 107.341272][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 107.884741][ T6854] lo speed is unknown, defaulting to 1000 [ 108.240090][ T6894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.273126][ T1481] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 108.415920][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.289'. [ 108.434204][ T1481] usb 8-1: Using ep0 maxpacket: 8 [ 108.438122][ T1481] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.441624][ T1481] usb 8-1: config 179 has no interface number 0 [ 108.445279][ T1481] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 108.449886][ T1481] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 108.456088][ T1481] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.460514][ T1481] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 108.465128][ T1481] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.470762][ T1481] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 108.474601][ T1481] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.485164][ T6884] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 108.583330][ T6101] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.743745][ T6101] usb 7-1: Using ep0 maxpacket: 32 [ 108.749736][ T6101] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.759977][ T6101] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.763950][ T6101] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.768202][ T6101] usb 7-1: Product: syz [ 108.770334][ T6101] usb 7-1: Manufacturer: syz [ 108.774164][ T6101] usb 7-1: SerialNumber: syz [ 108.784330][ T6101] usb 7-1: config 0 descriptor?? [ 108.792864][ T6901] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.799073][ T6101] hub 7-1:0.0: bad descriptor, ignoring hub [ 108.802958][ T6101] hub 7-1:0.0: probe with driver hub failed with error -5 [ 108.855290][ T24] usb 8-1: USB disconnect, device number 6 [ 108.855297][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 108.855334][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 108.998793][ T6901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.006973][ T6901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.133373][ T41] usb 7-1: USB disconnect, device number 13 [ 109.362048][ T42] audit: type=1326 audit(1785488935.144:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.371241][ T42] audit: type=1326 audit(1785488935.144:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.384222][ T42] audit: type=1326 audit(1785488935.154:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.390808][ T42] audit: type=1326 audit(1785488935.154:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.401172][ T42] audit: type=1326 audit(1785488935.154:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.408175][ T42] audit: type=1326 audit(1785488935.154:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.415869][ T42] audit: type=1326 audit(1785488935.154:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.422477][ T42] audit: type=1326 audit(1785488935.154:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.429439][ T42] audit: type=1326 audit(1785488935.154:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.438248][ T42] audit: type=1326 audit(1785488935.154:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6934 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 109.555975][ T6945] comedi comedi3: pcl818: I/O base address or length out of range [ 109.655528][ T6947] ipt_REJECT: TCP_RESET invalid for non-tcp [ 110.934129][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 126.279041][ T6984] lo speed is unknown, defaulting to 1000 [ 126.437589][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 127.167717][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 127.170540][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 127.298350][ T6992] ceph: No mds server is up or the cluster is laggy [ 127.479083][ T7012] FAULT_INJECTION: forcing a failure. [ 127.479083][ T7012] name failslab, interval 1, probability 0, space 0, times 1 [ 127.485222][ T7012] CPU: 3 UID: 0 PID: 7012 Comm: syz.2.312 Not tainted syzkaller #0 PREEMPT(full) [ 127.485248][ T7012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 127.485271][ T7012] Call Trace: [ 127.485278][ T7012] [ 127.485286][ T7012] dump_stack_lvl+0x100/0x190 [ 127.485377][ T7012] should_fail_ex.cold+0x5/0xa [ 127.485399][ T7012] should_failslab+0xc2/0x120 [ 127.485425][ T7012] __kvmalloc_node_noprof+0x116/0x970 [ 127.485451][ T7012] ? file_tty_write.isra.0+0x64e/0x890 [ 127.485513][ T7012] file_tty_write.isra.0+0x64e/0x890 [ 127.485536][ T7012] ? security_file_permission+0x76/0x210 [ 127.485573][ T7012] ? rw_verify_area+0xce/0x6d0 [ 127.485601][ T7012] vfs_write+0x6ac/0x1050 [ 127.485619][ T7012] ? __pfx_tty_write+0x10/0x10 [ 127.485644][ T7012] ? __pfx_vfs_write+0x10/0x10 [ 127.485659][ T7012] ? find_held_lock+0x2b/0x80 [ 127.485704][ T7012] ksys_write+0x12a/0x250 [ 127.485722][ T7012] ? __pfx_ksys_write+0x10/0x10 [ 127.485737][ T7012] ? ksys_write+0x1ac/0x250 [ 127.485754][ T7012] ? __pfx_ksys_write+0x10/0x10 [ 127.485777][ T7012] __do_fast_syscall_32+0xe7/0x970 [ 127.485826][ T7012] ? lockdep_hardirqs_on+0x78/0x100 [ 127.485851][ T7012] do_fast_syscall_32+0x32/0x70 [ 127.485890][ T7012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.485913][ T7012] RIP: 0023:0xf706efec [ 127.485936][ T7012] Code: Unable to access opcode bytes at 0xf706efc2. [ 127.485953][ T7012] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 127.485972][ T7012] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000800014c0 [ 127.485998][ T7012] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.486009][ T7012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.486019][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.486029][ T7012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.486054][ T7012] [ 127.640884][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'. [ 127.935247][ T5833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 128.194896][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 128.232597][ T5833] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.236969][ T5833] usb 8-1: config 179 has no interface number 0 [ 128.243909][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 128.260323][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 128.277875][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.303469][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 128.315512][ T5833] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.333247][ T5844] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 128.336740][ T5833] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.352816][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.385220][ T7003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.494664][ T5844] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 128.500549][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.507011][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.510502][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 128.517755][ T5844] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 128.521498][ T5844] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 128.526549][ T5844] usb 6-1: Manufacturer: syz [ 128.532386][ T5844] usb 6-1: config 0 descriptor?? [ 128.741795][ T56] usb 8-1: USB disconnect, device number 7 [ 128.741831][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.746716][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 128.952255][ T5844] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 128.968849][ T5844] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 129.225032][ T7047] syzkaller0: entered promiscuous mode [ 129.226883][ T7047] syzkaller0: entered allmulticast mode [ 129.783156][ T5833] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 129.903085][ T5535] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 129.935502][ T5833] usb 5-1: not running at top speed; connect to a high speed hub [ 129.940061][ T5833] usb 5-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 129.945089][ T5833] usb 5-1: config 1 interface 0 has no altsetting 0 [ 129.950126][ T5833] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 129.954335][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.957808][ T5833] usb 5-1: Product: ᰊ [ 129.959605][ T5833] usb 5-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 129.974252][ T5833] usb 5-1: SerialNumber: М [ 129.986452][ T7066] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.094695][ T5535] usb 8-1: not running at top speed; connect to a high speed hub [ 130.610089][ T5535] usb 8-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 130.623057][ T5535] usb 8-1: config 1 interface 0 has no altsetting 0 [ 130.627913][ T5535] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 130.631480][ T5535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.643044][ T5535] usb 8-1: Product: ᰊ [ 130.644664][ T5535] usb 8-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 130.663066][ T5535] usb 8-1: SerialNumber: М [ 130.667388][ T7065] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 130.753372][ T7056] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 130.799733][ T5833] usblp0: Disabling reads from problematic bidirectional printer [ 130.805734][ T5833] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 130.816512][ T5833] usb 5-1: USB disconnect, device number 8 [ 130.824307][ T5833] usblp1: removed [ 130.933078][ T5535] usblp0: Disabling reads from problematic bidirectional printer [ 130.939891][ T5535] usblp 8-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 130.946164][ T5535] usb 8-1: USB disconnect, device number 8 [ 130.950720][ T5535] usblp1: removed [ 131.458864][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.325'. [ 131.475133][ T7096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 131.475166][ T7096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.475824][ T7096] vhci_hcd vhci_hcd.0: Device attached [ 131.492739][ T7097] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 131.493792][ T5824] vhci_hcd vhci_hcd.0: stop threads [ 131.493818][ T5824] vhci_hcd vhci_hcd.0: release socket [ 131.493835][ T5824] vhci_hcd vhci_hcd.0: disconnect device [ 131.500162][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 131.681493][ T7101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.326'. [ 131.744383][ T7102] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 131.747146][ T7102] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.752608][ T7102] vhci_hcd vhci_hcd.0: Device attached [ 131.775220][ T7103] usbip_core: unknown command [ 131.780049][ T7103] vhci_hcd: unknown pdu 10616832 [ 131.790541][ T7103] usbip_core: unknown command [ 131.801756][ T5824] vhci_hcd vhci_hcd.3: stop threads [ 131.806015][ T5824] vhci_hcd vhci_hcd.3: release socket [ 131.811884][ T5824] vhci_hcd vhci_hcd.3: disconnect device [ 132.224922][ T56] usb 6-1: USB disconnect, device number 18 [ 132.539909][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.542913][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.884248][ T5535] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 133.098299][ T7108] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 133.123184][ T5535] usb 7-1: Using ep0 maxpacket: 8 [ 133.126432][ T5535] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.129107][ T5535] usb 7-1: config 179 has no interface number 0 [ 133.131047][ T5535] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.134728][ T5535] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.138991][ T5535] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.142511][ T5535] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.146058][ T5535] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.150458][ T5535] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 133.153574][ T5535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.157629][ T7106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.368264][ T6101] usb 7-1: USB disconnect, device number 14 [ 133.368273][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 133.368297][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 133.543215][ T1481] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 133.703681][ T1481] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 133.708051][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.711903][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.716491][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.720134][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.723995][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.728505][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.732142][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.735881][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.740458][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.744319][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.748138][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.752593][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.756475][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.760325][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.764968][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.768837][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.772623][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.777146][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.780899][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.783912][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.787358][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.790328][ T1481] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.793337][ T1481] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.796867][ T1481] usb 8-1: config 0 interface 0 has no altsetting 0 [ 133.800606][ T1481] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 133.803624][ T1481] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 133.806403][ T1481] usb 8-1: Product: syz [ 133.807741][ T1481] usb 8-1: Manufacturer: syz [ 133.809280][ T1481] usb 8-1: SerialNumber: syz [ 133.814697][ T1481] usb 8-1: config 0 descriptor?? [ 133.822193][ T1481] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 133.975691][ T7129] macsec1: entered allmulticast mode [ 133.978393][ T7129] veth1_macvtap: entered allmulticast mode [ 133.991586][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'. [ 134.009872][ T7129] veth1_macvtap (unregistering): left allmulticast mode [ 134.136000][ C3] usb 8-1: yurex_control_callback - control failed: -71 [ 134.136233][ T24] usb 8-1: USB disconnect, device number 9 [ 134.141181][ T7132] yurex 8-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 134.143553][ T24] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 134.159573][ T7122] netlink: 'syz.3.333': attribute type 39 has an invalid length. [ 134.910639][ T7151] sctp: [Deprecated]: syz.3.340 (pid 7151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.910639][ T7151] Use struct sctp_sack_info instead [ 134.932091][ T7150] sctp: [Deprecated]: syz.3.340 (pid 7150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.932091][ T7150] Use struct sctp_sack_info instead [ 134.939718][ T7150] Invalid logical block size (73728) [ 134.946060][ T7151] Invalid logical block size (73728) [ 135.076440][ T7151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.209351][ T7165] bond1 (unregistering): Released all slaves [ 135.270945][ T7151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.354481][ T7151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.452929][ T7151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.429695][ T7185] netlink: zone id is out of range [ 136.434597][ T7185] netlink: zone id is out of range [ 136.438643][ T7185] netlink: zone id is out of range [ 136.443476][ T7185] netlink: zone id is out of range [ 136.447644][ T7185] netlink: zone id is out of range [ 136.450413][ T7185] netlink: zone id is out of range [ 136.452262][ T7185] netlink: zone id is out of range [ 136.454952][ T7185] netlink: zone id is out of range [ 136.457391][ T7185] netlink: zone id is out of range [ 136.460649][ T7185] netlink: zone id is out of range [ 137.399551][ T7196] Bluetooth: MGMT ver 1.23 [ 138.193112][ T5847] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 138.343071][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 138.346133][ T5847] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 138.348775][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 138.353702][ T5847] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 138.356563][ T5847] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 138.359242][ T5847] usb 6-1: Product: syz [ 138.360766][ T5847] usb 6-1: Manufacturer: syz [ 138.362417][ T5847] usb 6-1: SerialNumber: syz [ 138.366049][ T5847] usb 6-1: config 0 descriptor?? [ 138.370649][ T5847] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 138.375339][ T5847] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.413139][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 138.440567][ T7214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.354'. [ 138.497365][ T7217] lo speed is unknown, defaulting to 1000 [ 138.565264][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 138.569121][ T24] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 138.574384][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 138.578249][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.580909][ T5847] usb 6-1: USB disconnect, device number 19 [ 138.581589][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 138.606475][ T5847] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 138.687844][ T7223] binder: 7218:7223 ioctl c0306201 800003c0 returned -14 [ 138.791637][ T7210] ldusb: No device or device unplugged -19 [ 139.363117][ T5847] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 139.515121][ T5847] usb 7-1: not running at top speed; connect to a high speed hub [ 139.519484][ T5847] usb 7-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 139.524499][ T5847] usb 7-1: config 1 interface 0 has no altsetting 0 [ 139.529621][ T5847] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 139.533741][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.537253][ T5847] usb 7-1: Product: ᰊ [ 139.539195][ T5847] usb 7-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 139.553550][ T5847] usb 7-1: SerialNumber: М [ 139.560009][ T7232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.723126][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 140.334314][ T5847] usblp0: Disabling reads from problematic bidirectional printer [ 140.343830][ T5847] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 140.354391][ T5847] usb 7-1: USB disconnect, device number 15 [ 140.364774][ T5847] usblp0: removed [ 140.649017][ T7260] netlink: 'syz.0.365': attribute type 8 has an invalid length. [ 140.653353][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 140.678573][ T7260] bond0: entered promiscuous mode [ 140.680656][ T7260] bond_slave_0: entered promiscuous mode [ 140.684490][ T7260] bond_slave_1: entered promiscuous mode [ 140.702536][ T7260] gretap0: entered promiscuous mode [ 140.716952][ T7260] team0: entered promiscuous mode [ 140.718857][ T7260] team_slave_0: entered promiscuous mode [ 140.723799][ T7260] team_slave_1: entered promiscuous mode [ 140.743623][ T7260] hsr1: entered promiscuous mode [ 140.886345][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 141.047549][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 141.171158][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 141.196478][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 141.202618][ T5847] usb 8-1: USB disconnect, device number 10 [ 141.219603][ T7279] netlink: 'syz.1.374': attribute type 3 has an invalid length. [ 141.488686][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.583060][ T5833] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 141.693097][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 141.696658][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.699793][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.702957][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.706885][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.710952][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.714045][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.735296][ T5833] usb 7-1: not running at top speed; connect to a high speed hub [ 141.738973][ T5833] usb 7-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 141.742409][ T5833] usb 7-1: config 1 interface 0 has no altsetting 0 [ 141.747021][ T5833] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 141.750067][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.752669][ T5833] usb 7-1: Product: ᰊ [ 141.755338][ T5833] usb 7-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 141.766436][ T5833] usb 7-1: SerialNumber: М [ 141.774388][ T7284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.932168][ T24] usb 5-1: usb_control_msg returned -71 [ 141.934072][ T24] usbtmc 5-1:16.0: can't read capabilities [ 141.957953][ T24] usb 5-1: USB disconnect, device number 9 [ 142.671849][ T5833] usblp0: Disabling reads from problematic bidirectional printer [ 142.679255][ T5833] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 142.691943][ T5833] usb 7-1: USB disconnect, device number 16 [ 142.723982][ T5833] usblp0: removed [ 143.198352][ T7332] i2c_designware pcspkr: error -EINVAL: invalid resource (null) [ 143.201430][ T7332] i2c_designware pcspkr: probe with driver i2c_designware failed with error -22 [ 143.358459][ T7340] type: 2025082625 invalid [ 143.663503][ T5535] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 143.823361][ T5535] usb 7-1: Using ep0 maxpacket: 8 [ 143.827781][ T5535] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 143.831471][ T5535] usb 7-1: config 0 has no interface number 0 [ 143.834393][ T5535] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.843119][ T5535] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.846489][ T5535] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 143.850606][ T5535] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 143.862697][ T5535] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.868741][ T5535] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 143.871644][ T5535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.874452][ T5535] usb 7-1: Product: syz [ 143.875779][ T5535] usb 7-1: Manufacturer: syz [ 143.877377][ T5535] usb 7-1: SerialNumber: syz [ 143.880316][ T5535] usb 7-1: config 0 descriptor?? [ 143.895841][ T7359] binder: Unknown parameter 'smackfshat' [ 143.905209][ T7359] Invalid ELF header len 2 [ 143.985127][ T1481] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 144.085007][ T5535] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 144.169123][ T1481] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 144.175423][ T1481] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.183664][ T1481] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.192339][ T1481] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.198521][ T1481] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.203427][ T1481] usb 5-1: Product: syz [ 144.205436][ T1481] usb 5-1: Manufacturer: syz [ 144.207378][ T1481] usb 5-1: SerialNumber: syz [ 144.211628][ T1481] usb 5-1: config 0 descriptor?? [ 144.216070][ T1481] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.218628][ T1481] hub 5-1:0.0: probe with driver hub failed with error -5 [ 144.228563][ T1481] usb 5-1: selecting invalid altsetting 0 [ 144.302060][ T5535] usb 7-1: USB disconnect, device number 17 [ 144.726796][ T7380] net_ratelimit: 10 callbacks suppressed [ 144.726817][ T7380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.828466][ T7383] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 144.848141][ T1481] usb 5-1: USB disconnect, device number 10 [ 145.092318][ T7392] nfs: Deprecated parameter 'nointr' [ 145.192501][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.414'. [ 146.123362][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 146.208450][ T7415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.418'. [ 146.251718][ T7415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 146.251756][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.252069][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 146.264456][ T7416] usbip_core: unknown command [ 146.264504][ T7416] vhci_hcd: unknown pdu 10616832 [ 146.264548][ T7416] usbip_core: unknown command [ 146.277095][ T12] vhci_hcd vhci_hcd.0: stop threads [ 146.277165][ T12] vhci_hcd vhci_hcd.0: release socket [ 146.277344][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 146.343153][ T56] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 146.483144][ T56] usb 8-1: device descriptor read/64, error -71 [ 146.723198][ T41] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 146.733432][ T56] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 146.873200][ T56] usb 8-1: device descriptor read/64, error -71 [ 146.979519][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 146.986956][ T41] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 146.989068][ T56] usb usb8-port1: attempt power cycle [ 146.996386][ T41] usb 7-1: can't read configurations, error -71 [ 147.333533][ T56] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 147.366175][ T56] usb 8-1: device descriptor read/8, error -71 [ 147.563277][ T7426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.598311][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 147.603194][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 147.623079][ T56] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 147.643662][ T56] usb 8-1: device descriptor read/8, error -71 [ 147.755044][ T56] usb usb8-port1: unable to enumerate USB device [ 148.214010][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.431'. [ 148.220304][ T7442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 148.222544][ T7442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.226320][ T7442] vhci_hcd vhci_hcd.0: Device attached [ 148.233426][ T7445] usbip_core: unknown command [ 148.235037][ T7445] vhci_hcd: unknown pdu 10616832 [ 148.236957][ T7445] usbip_core: unknown command [ 148.238668][ T12] vhci_hcd vhci_hcd.1: stop threads [ 148.240344][ T12] vhci_hcd vhci_hcd.1: release socket [ 148.243747][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 148.604109][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 149.637010][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 149.637026][ T42] audit: type=1326 audit(1785488975.424:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 149.661073][ T42] audit: type=1326 audit(1785488975.424:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706efec code=0x7ffc0000 [ 149.679709][ T42] audit: type=1326 audit(1785488975.424:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 149.697307][ T42] audit: type=1326 audit(1785488975.424:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706efec code=0x7ffc0000 [ 149.806460][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 150.278332][ T7490] gfs2: error -5 reading superblock [ 150.293354][ T50] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.321671][ T42] audit: type=1326 audit(1785488976.104:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 150.331974][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 150.334790][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 150.337672][ T42] audit: type=1326 audit(1785488976.104:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz.2.437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 150.340774][ T10] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 150.453119][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 150.454698][ T50] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 150.458270][ T50] usb 5-1: config 179 has no interface number 0 [ 150.465741][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 150.474894][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 150.480422][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.488932][ T50] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 150.499308][ T50] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.509345][ T50] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.513284][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.521153][ T7488] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 150.543056][ T7494] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 150.552484][ T7494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.561322][ T7494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.567426][ T7494] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.756108][ T7502] syzkaller0: entered promiscuous mode [ 150.763103][ T7502] syzkaller0: entered allmulticast mode [ 150.789767][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 150.793448][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 150.797088][ T7505] netlink: 'syz.2.447': attribute type 7 has an invalid length. [ 150.808497][ T10] usb 5-1: USB disconnect, device number 12 [ 150.809112][ C3] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.813617][ C3] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.826130][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.833613][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.839239][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.841794][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.989865][ T7513] lo speed is unknown, defaulting to 1000 [ 150.998370][ T7516] FAULT_INJECTION: forcing a failure. [ 150.998370][ T7516] name failslab, interval 1, probability 0, space 0, times 0 [ 151.003856][ T7516] CPU: 0 UID: 0 PID: 7516 Comm: syz.2.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.003904][ T7516] Tainted: [L]=SOFTLOCKUP [ 151.003911][ T7516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.003921][ T7516] Call Trace: [ 151.003927][ T7516] [ 151.003934][ T7516] dump_stack_lvl+0x100/0x190 [ 151.003961][ T7516] should_fail_ex.cold+0x5/0xa [ 151.003982][ T7516] should_failslab+0xc2/0x120 [ 151.004009][ T7516] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 151.004033][ T7516] ? __alloc_skb+0x5b7/0x710 [ 151.004055][ T7516] ? __alloc_skb+0x140/0x710 [ 151.004084][ T7516] __alloc_skb+0x140/0x710 [ 151.004105][ T7516] ? __alloc_skb+0x5b7/0x710 [ 151.004127][ T7516] ? __pfx___alloc_skb+0x10/0x10 [ 151.004157][ T7516] pfkey_sendmsg+0x161/0x840 [ 151.004187][ T7516] ____sys_sendmsg+0xa4d/0xbe0 [ 151.004202][ T7516] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 151.004226][ T7516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.004253][ T7516] ___sys_sendmsg+0x190/0x1e0 [ 151.004272][ T7516] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.004299][ T7516] ? find_held_lock+0x2b/0x80 [ 151.004337][ T7516] __sys_sendmsg+0x160/0x210 [ 151.004359][ T7516] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.004388][ T7516] ? __pfx_ksys_write+0x10/0x10 [ 151.004412][ T7516] __do_fast_syscall_32+0xe7/0x970 [ 151.004445][ T7516] ? lockdep_hardirqs_on+0x78/0x100 [ 151.004468][ T7516] do_fast_syscall_32+0x32/0x70 [ 151.004491][ T7516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.004512][ T7516] RIP: 0023:0xf706efec [ 151.004533][ T7516] Code: Unable to access opcode bytes at 0xf706efc2. [ 151.004541][ T7516] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 151.004558][ T7516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 151.004569][ T7516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.004578][ T7516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.004587][ T7516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 151.004597][ T7516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.004619][ T7516] [ 151.404553][ T7526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.455'. [ 151.450352][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.457'. [ 152.043061][ T10] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 152.100197][ T7545] fuse: Unknown parameter 'rootmode' [ 152.219945][ T10] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 152.222661][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.229521][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 152.235327][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.239146][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.242477][ T10] usb 7-1: Product: syz [ 152.244994][ T10] usb 7-1: Manufacturer: syz [ 152.246970][ T10] usb 7-1: SerialNumber: syz [ 152.253730][ T10] usb 7-1: config 0 descriptor?? [ 152.261839][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 152.264478][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 152.269557][ T10] usb 7-1: selecting invalid altsetting 0 [ 152.613142][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 152.615790][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.618306][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.623129][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 152.623143][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.633796][ T5750] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 152.773176][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 152.778387][ T10] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.785732][ T10] usb 6-1: config 179 has no interface number 0 [ 152.791535][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.818392][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.838357][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.856037][ T10] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.862778][ T10] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.873024][ T10] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.877699][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.887764][ T7554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.107251][ T1356] usb 7-1: USB disconnect, device number 20 [ 153.164333][ T29] usb 6-1: USB disconnect, device number 20 [ 153.164459][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 153.169370][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 153.303196][ T7571] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 153.438502][ T7576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.445779][ T7576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.451916][ T7576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.510225][ T7603] tipc: Started in network mode [ 154.512754][ T7603] tipc: Node identity 4, cluster identity 4711 [ 154.515411][ T7603] tipc: Node number set to 4 [ 154.793140][ T5833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.953155][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 154.957290][ T5833] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 154.960774][ T5833] usb 5-1: config 179 has no interface number 0 [ 154.963558][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 154.968574][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 154.973519][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 154.978388][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 154.983316][ T5833] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 154.988621][ T5833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.992257][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.998012][ T7607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.493665][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.493828][ T5750] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.496094][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.518338][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.521136][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.524629][ T5833] usb 5-1: USB disconnect, device number 13 [ 155.891903][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 155.953267][ T41] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 155.956734][ T7626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'. [ 155.998592][ T7626] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 156.000799][ T7626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.003649][ T7626] vhci_hcd vhci_hcd.0: Device attached [ 156.027708][ T7628] usbip_core: unknown command [ 156.029881][ T7628] vhci_hcd: unknown pdu 10616832 [ 156.032189][ T7628] usbip_core: unknown command [ 156.035877][ T12] vhci_hcd vhci_hcd.1: stop threads [ 156.038229][ T12] vhci_hcd vhci_hcd.1: release socket [ 156.040566][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 156.134695][ T41] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 156.139648][ T41] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.144651][ T41] usb 7-1: config 0 interface 0 has no altsetting 0 [ 156.149017][ T41] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.152064][ T41] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.155919][ T41] usb 7-1: Product: syz [ 156.157292][ T41] usb 7-1: Manufacturer: syz [ 156.158933][ T41] usb 7-1: SerialNumber: syz [ 156.165695][ T41] usb 7-1: config 0 descriptor?? [ 156.171890][ T41] hub 7-1:0.0: bad descriptor, ignoring hub [ 156.175261][ T7631] smbdirect: ib_dev[syz1] removed [ 156.176763][ T41] hub 7-1:0.0: probe with driver hub failed with error -5 [ 156.183420][ T41] usb 7-1: selecting invalid altsetting 0 [ 157.087021][ T41] usb 7-1: USB disconnect, device number 22 [ 157.323072][ T41] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 157.407650][ T5104] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 158.168444][ T7660] Invalid ELF header magic: != ELF [ 158.349965][ T7677] batadv1: entered promiscuous mode [ 158.351990][ T7672] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.352703][ T7679] netlink: 36 bytes leftover after parsing attributes in process `syz.0.498'. [ 158.361680][ T7673] lo speed is unknown, defaulting to 1000 [ 158.803245][ T29] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 158.963119][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 158.969836][ T29] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 158.974052][ T29] usb 8-1: config 0 has no interface number 0 [ 158.976010][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.979471][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 158.983949][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.988002][ T29] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.992194][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 158.995057][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.002479][ T29] usb 8-1: config 0 descriptor?? [ 159.008998][ T29] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.233120][ T7684] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 159.302474][ T29] usb 8-1: USB disconnect, device number 15 [ 159.308944][ T7695] fuse: Bad value for 'fd' [ 159.311502][ T29] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 159.312106][ T7695] 9p: Bad value for 'rfdno' [ 159.899339][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 160.062073][ T7712] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 161.429337][ T7753] netlink: 76 bytes leftover after parsing attributes in process `syz.1.521'. [ 162.513142][ T41] usb 7-1: device descriptor read/64, error -110 [ 162.570169][ T7766] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 162.574412][ T7766] ALSA: mixer_oss: invalid index 137438 [ 162.702853][ T6101] libceph: connect (1)[c::]:6789 error -101 [ 162.704928][ T6101] libceph: mon0 (1)[c::]:6789 connect error [ 162.753293][ T41] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 162.756385][ T7772] ceph: No mds server is up or the cluster is laggy [ 162.893388][ T41] usb 7-1: device descriptor read/64, error -32 [ 162.897118][ T7778] netlink: 'syz.1.529': attribute type 2 has an invalid length. [ 162.965617][ T6101] libceph: connect (1)[c::]:6789 error -101 [ 163.029148][ T41] usb usb7-port1: attempt power cycle [ 163.037494][ T6101] libceph: mon0 (1)[c::]:6789 connect error [ 163.103673][ T41] raw-gadget.0 gadget.2: failed to queue resume event [ 163.674109][ T41] raw-gadget.0 gadget.2: failed to queue reset event [ 163.883208][ T41] raw-gadget.0 gadget.2: failed to queue resume event [ 163.925398][ T233] Bluetooth: hci4: Frame reassembly failed (-84) [ 163.937039][ T7786] Bluetooth: hci4: Frame reassembly failed (-84) [ 164.093152][ T41] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 164.173901][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 164.176386][ T41] usb 7-1: device descriptor read/8, error -32 [ 164.283670][ T41] raw-gadget.0 gadget.2: failed to queue suspend event [ 164.287969][ T41] raw-gadget.0 gadget.2: failed to queue reset event [ 164.353182][ T41] raw-gadget.0 gadget.2: failed to queue resume event [ 164.413858][ T41] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 164.433238][ C2] raw-gadget.0 gadget.2: ignoring, device is not running [ 164.435680][ T41] usb 7-1: device descriptor read/8, error -32 [ 164.545104][ T41] raw-gadget.0 gadget.2: failed to queue suspend event [ 164.549186][ T41] usb usb7-port1: unable to enumerate USB device [ 164.587275][ T7619] raw-gadget.0 gadget.2: failed to queue disconnect event [ 164.866358][ T7803] netlink: 'syz.1.534': attribute type 21 has an invalid length. [ 164.869019][ T7803] netlink: 128 bytes leftover after parsing attributes in process `syz.1.534'. [ 164.872155][ T7803] netlink: 'syz.1.534': attribute type 5 has an invalid length. [ 164.874859][ T7803] netlink: 'syz.1.534': attribute type 6 has an invalid length. [ 164.877377][ T7803] netlink: 3 bytes leftover after parsing attributes in process `syz.1.534'. [ 165.159187][ T7811] netlink: 72 bytes leftover after parsing attributes in process `syz.1.537'. [ 165.903871][ T7838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.973257][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 165.974387][ T5104] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 166.145773][ T5833] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 166.313139][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 166.316758][ T5833] usb 7-1: config 0 has no interfaces? [ 166.318567][ T5833] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.321597][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.330162][ T5833] usb 7-1: config 0 descriptor?? [ 166.558873][ T5833] usb 7-1: USB disconnect, device number 27 [ 166.837495][ T7850] new mount options do not match the existing superblock, will be ignored [ 166.941768][ T7856] openvswitch: netlink: Missing key (keys=40, expected=100) [ 167.146177][ T5833] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 167.313887][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 167.319699][ T5833] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.322423][ T5833] usb 5-1: config 179 has no interface number 0 [ 167.324621][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 167.328158][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 167.331682][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.338171][ T5833] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 167.345511][ T5833] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.350995][ T5833] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.357940][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.377877][ T7854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.565892][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 167.585221][ T7879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 167.587514][ T7879] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.590648][ T7879] vhci_hcd vhci_hcd.0: Device attached [ 167.600838][ T7880] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 1 [ 167.632763][ T13] vhci_hcd vhci_hcd.3: stop threads [ 167.641471][ T13] vhci_hcd vhci_hcd.3: release socket [ 167.652642][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 167.662601][ C2] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.665202][ C2] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.667992][ T1481] usb 5-1: USB disconnect, device number 14 [ 168.030399][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 169.009678][ T7903] Option '&7f%R(ﮘWO]mA(BeTv_bJqQ-I:' to dns_resolver key: bad/missing value [ 169.622071][ T7919] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 169.646835][ T7919] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 169.652135][ T7919] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 169.655641][ T7919] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 169.671562][ T7919] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 169.695463][ T7919] pci 0000:00:01.0: Adding to iommu group 1 [ 169.745152][ T7919] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 169.748135][ T7919] pci 0000:00:01.0: vgaarb: bridge control possible [ 169.750836][ T7919] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 169.815290][ T7919] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 169.842194][ T7919] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 169.880667][ T7919] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 169.913897][ T7919] [drm] Found bochs VGA, ID 0xb0c5. [ 169.916209][ T7919] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 169.964756][ T7919] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 170.069003][ T7919] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 170.358799][ T42] audit: type=1800 audit(1785488996.144:205): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.573" name="bus" dev="ramfs" ino=19037 res=0 errno=0 [ 170.478553][ T7949] lo speed is unknown, defaulting to 1000 [ 170.586444][ T7951] program syz.3.582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.891262][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 171.951746][ T7980] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 171.956604][ T7980] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 171.962003][ T7980] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 171.982342][ T7980] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.983174][ T1481] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 172.627424][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 172.985198][ T1481] usb 7-1: not running at top speed; connect to a high speed hub [ 172.989392][ T1481] usb 7-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 172.993836][ T1481] usb 7-1: config 1 interface 0 has no altsetting 0 [ 172.997540][ T1481] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 173.000948][ T1481] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.003968][ T1481] usb 7-1: Product: ᰊ [ 173.005289][ T1481] usb 7-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 173.015935][ T1481] usb 7-1: SerialNumber: М [ 173.026842][ T7975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.382028][ T1481] usblp0: Disabling reads from problematic bidirectional printer [ 173.391930][ T1481] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 173.405829][ T1481] usb 7-1: USB disconnect, device number 28 [ 173.412047][ T1481] usblp0: removed [ 173.603898][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 174.037246][ T8014] syzkaller0: entered promiscuous mode [ 174.039578][ T8014] syzkaller0: entered allmulticast mode [ 174.044542][ T8014] fuse: Bad value for 'fd' [ 174.226161][ T8027] syzkaller0: entered promiscuous mode [ 174.227989][ T8027] syzkaller0: entered allmulticast mode [ 174.525373][ T6101] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 174.529281][ T8039] netlink: 84 bytes leftover after parsing attributes in process `syz.1.616'. [ 174.544569][ T6101] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 174.574296][ T8040] fido_id[8040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.605642][ T42] audit: type=1400 audit(1785488999.394:206): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=8042 comm="syz.1.617" [ 174.649770][ T8043] syz.1.617: attempt to access beyond end of device [ 174.649770][ T8043] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 174.654818][ T8043] gfs2: error -5 reading superblock [ 174.663362][ T41] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 174.665858][ T5915] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.670992][ T5915] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.679717][ T5915] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.703510][ T5915] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.817163][ T41] usb 5-1: not running at top speed; connect to a high speed hub [ 174.822026][ T41] usb 5-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 174.827625][ T41] usb 5-1: config 1 interface 0 has no altsetting 0 [ 174.832232][ T41] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 174.837175][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.840408][ T41] usb 5-1: Product: ᰊ [ 174.842202][ T41] usb 5-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 174.853435][ T41] usb 5-1: SerialNumber: М [ 174.858250][ T8034] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.782126][ T41] usblp0: Disabling reads from problematic bidirectional printer [ 175.788987][ T41] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 175.802388][ T41] usb 5-1: USB disconnect, device number 15 [ 175.812640][ T41] usblp0: removed [ 175.979619][ T8081] lo speed is unknown, defaulting to 1000 [ 177.038801][ T8112] macsec1: entered allmulticast mode [ 177.041012][ T8112] veth1_macvtap: entered allmulticast mode [ 177.051126][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 177.064511][ T8112] veth1_macvtap (unregistering): left allmulticast mode [ 177.253658][ T6101] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 177.526149][ T6101] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 177.556523][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.567700][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.587658][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.602578][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.614864][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.621199][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.627185][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.636155][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.640934][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.647585][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.651593][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.656785][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.670410][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.673271][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.676652][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.680781][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.683627][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.686987][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.792870][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.797713][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.801221][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.804578][ T6101] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 177.807393][ T6101] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 177.810936][ T6101] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.824205][ T6101] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 177.827315][ T6101] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 177.830092][ T6101] usb 5-1: Product: syz [ 177.831489][ T6101] usb 5-1: Manufacturer: syz [ 177.833060][ T6101] usb 5-1: SerialNumber: syz [ 177.836085][ T6101] usb 5-1: config 0 descriptor?? [ 177.845409][ T6101] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 178.083065][ T5847] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 178.156192][ C3] usb 5-1: yurex_control_callback - control failed: -71 [ 178.161418][ C2] usb 5-1: yurex_control_callback - control failed: -71 [ 178.166210][ T6101] usb 5-1: USB disconnect, device number 16 [ 178.171473][ T8110] netlink: 'syz.0.639': attribute type 39 has an invalid length. [ 178.177159][ T6101] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 178.244878][ T5847] usb 7-1: Using ep0 maxpacket: 32 [ 178.254613][ T5847] usb 7-1: config index 0 descriptor too short (expected 13339, got 27) [ 178.261021][ T5847] usb 7-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 178.277228][ T5847] usb 7-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 178.288673][ T5847] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.297883][ T5847] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.307952][ T5847] usb 7-1: Product: syz [ 178.309649][ T5847] usb 7-1: Manufacturer: syz [ 178.311593][ T5847] usb 7-1: SerialNumber: syz [ 178.423246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.699682][ T8169] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 178.702487][ T8169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.721820][ T8169] vhci_hcd vhci_hcd.0: Device attached [ 178.901089][ T5847] usb 7-1: USB disconnect, device number 29 [ 178.923276][ T8169] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 179.023089][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 179.025558][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 179.297632][ T8170] vhci_hcd: connection reset by peer [ 179.301381][ T5915] vhci_hcd vhci_hcd.3: stop threads [ 179.303172][ T5915] vhci_hcd vhci_hcd.3: release socket [ 179.306663][ T5915] vhci_hcd vhci_hcd.3: disconnect device [ 179.419211][ T8182] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 179.421326][ T8182] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.438896][ T8182] vhci_hcd vhci_hcd.0: Device attached [ 179.773203][ T56] usb 38-1: SetAddress Request (2) to port 0 [ 179.775628][ T56] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 180.186345][ T8183] vhci_hcd: connection reset by peer [ 180.190673][ T5915] vhci_hcd vhci_hcd.0: stop threads [ 180.197051][ T5915] vhci_hcd vhci_hcd.0: release socket [ 180.203507][ T5915] vhci_hcd vhci_hcd.0: disconnect device [ 180.423379][ T8208] openvswitch: netlink: Key 4 has unexpected len 8 expected 12 [ 180.772341][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.656'. [ 181.060930][ T8211] netlink: 296 bytes leftover after parsing attributes in process `syz.1.657'. [ 181.740134][ T5825] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 181.896322][ T5825] usb 7-1: config index 0 descriptor too short (expected 8251, got 59) [ 181.899636][ T5825] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.899679][ T5825] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.900688][ T5825] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.922217][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.926600][ T5825] usb 7-1: SerialNumber: syz [ 181.937204][ T5825] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 182.077240][ T8233] binder: 8232:8233 ioctl 8030942b 80000240 returned -22 [ 182.468891][ T8253] syzkaller0: entered promiscuous mode [ 182.470800][ T8253] syzkaller0: entered allmulticast mode [ 183.033071][ T5833] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 183.141322][ T8272] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 183.151846][ T8272] CIFS mount error: No usable UNC path provided in device string! [ 183.151846][ T8272] [ 183.156514][ T8272] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.190517][ T5833] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.193644][ T5833] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 183.195884][ T5833] usb 8-1: can't read configurations, error -71 [ 183.345264][ T8279] pimreg: tun_chr_ioctl cmd 1074025684 [ 183.368805][ T8283] none: Can't lookup blockdev [ 183.633183][ T5825] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.794494][ T5825] usb 5-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 183.797931][ T5825] usb 5-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 183.802943][ T5825] usb 5-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 183.808079][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.810861][ T5825] usb 5-1: Product: syz [ 183.813263][ T5825] usb 5-1: Manufacturer: syz [ 183.815185][ T5825] usb 5-1: SerialNumber: syz [ 183.974817][ T5825] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 184.053221][ T29] usb 44-1: device descriptor read/8, error -110 [ 184.212475][ T8310] FAULT_INJECTION: forcing a failure. [ 184.212475][ T8310] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.217785][ T8310] CPU: 1 UID: 0 PID: 8310 Comm: syz.1.690 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.217805][ T8310] Tainted: [L]=SOFTLOCKUP [ 184.217809][ T8310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.217821][ T8310] Call Trace: [ 184.217826][ T8310] [ 184.217831][ T8310] dump_stack_lvl+0x100/0x190 [ 184.217908][ T8310] should_fail_ex.cold+0x5/0xa [ 184.217921][ T8310] _copy_from_user+0x2e/0xd0 [ 184.217963][ T8310] cmsghdr_from_user_compat_to_kern+0x354/0x7d0 [ 184.218007][ T8310] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 184.218024][ T8310] ? __import_iovec+0x1d2/0x640 [ 184.218045][ T8310] ____sys_sendmsg+0x607/0xbe0 [ 184.218057][ T8310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.218071][ T8310] ? _kstrtoull+0x13c/0x1f0 [ 184.218082][ T8310] ? __pfx__kstrtoull+0x10/0x10 [ 184.218095][ T8310] ___sys_sendmsg+0x190/0x1e0 [ 184.218107][ T8310] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.218118][ T8310] ? __lock_acquire+0x49f/0x1a40 [ 184.218150][ T8310] __sys_sendmmsg+0x309/0x440 [ 184.218166][ T8310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 184.218180][ T8310] ? find_held_lock+0x2b/0x80 [ 184.218196][ T8310] ? __mutex_unlock_slowpath+0x35d/0x930 [ 184.218217][ T8310] ? fput+0x79/0x100 [ 184.218230][ T8310] ? ksys_write+0x1ac/0x250 [ 184.218242][ T8310] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 184.218258][ T8310] ? lockdep_hardirqs_on+0x78/0x100 [ 184.218270][ T8310] __do_fast_syscall_32+0xe7/0x970 [ 184.218284][ T8310] ? lockdep_hardirqs_on+0x78/0x100 [ 184.218298][ T8310] do_fast_syscall_32+0x32/0x70 [ 184.218312][ T8310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.218326][ T8310] RIP: 0023:0xf708efec [ 184.218340][ T8310] Code: Unable to access opcode bytes at 0xf708efc2. [ 184.218352][ T8310] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 184.218364][ T8310] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002d80 [ 184.218371][ T8310] RDX: 0000000000000001 RSI: 00000000240008d1 RDI: 0000000000000000 [ 184.218378][ T8310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.218384][ T8310] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.218390][ T8310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.218404][ T8310] [ 184.514782][ T29] usb usb44-port1: attempt power cycle [ 184.520480][ T8227] usb 7-1: USB disconnect, device number 30 [ 184.680662][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 184.690453][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.699952][ T8320] nfs4: Unknown parameter 'et/ip_tables_matches' [ 184.756703][ T42] audit: type=1326 audit(1785489009.544:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.765874][ T42] audit: type=1326 audit(1785489009.544:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.776114][ T42] audit: type=1326 audit(1785489009.554:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.784426][ T42] audit: type=1326 audit(1785489009.554:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.795156][ T42] audit: type=1326 audit(1785489009.554:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.805849][ T42] audit: type=1326 audit(1785489009.554:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.815189][ T42] audit: type=1326 audit(1785489009.554:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.826056][ T42] audit: type=1326 audit(1785489009.554:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.839763][ T42] audit: type=1326 audit(1785489009.554:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a73eb code=0x7ffc0000 [ 184.852044][ T42] audit: type=1326 audit(1785489009.554:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.2.696" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf706efec code=0x7ffc0000 [ 184.933241][ T56] usb 38-1: device descriptor read/8, error -110 [ 185.098155][ T29] usb usb44-port1: unable to enumerate USB device [ 185.136607][ T8332] bond1 (unregistering): Released all slaves [ 185.326054][ T56] usb usb38-port1: attempt power cycle [ 185.795698][ T8349] file system registered [ 185.865132][ T5825] usb 5-1: selecting invalid altsetting 8 [ 185.872163][ T5825] usb 5-1: [UEAGLE-ATM] setting alternate 8 failed for 2 interface, using bulk mode [ 185.882513][ T5825] usb 5-1: [UEAGLE-ATM] urb submission failed with error -19 [ 185.889188][ T5825] ueagle-atm 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 185.904519][ T56] usb usb38-port1: unable to enumerate USB device [ 185.913905][ T5825] usb 5-1: USB disconnect, device number 17 [ 185.920172][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 185.934592][ T8349] netlink: 'syz.2.702': attribute type 5 has an invalid length. [ 185.941527][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'. [ 185.966709][ T8349] geneve2: entered promiscuous mode [ 185.968943][ T8349] geneve2: entered allmulticast mode [ 186.003202][ T5915] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 186.007941][ T5915] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 186.016398][ T5915] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 186.030676][ T5915] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 186.445202][ T5751] ffs_data_put(): freeing [ 186.998802][ T8373] ipt_REJECT: TCP_RESET invalid for non-tcp [ 187.303247][ T5833] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 187.475214][ T5833] usb 8-1: unable to get BOS descriptor or descriptor too short [ 187.478201][ T5833] usb 8-1: not running at top speed; connect to a high speed hub [ 187.482203][ T5833] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 187.485677][ T5833] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 187.489044][ T5833] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 187.494748][ T5833] usb 8-1: config 14 has no interface number 0 [ 187.497449][ T5833] usb 8-1: config 14 has no interface number 1 [ 187.500132][ T5833] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 187.506072][ T5833] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 187.510876][ T5833] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.514683][ T5833] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 187.518149][ T5833] usb 8-1: config 14 interface 57 has no altsetting 0 [ 187.520340][ T5833] usb 8-1: config 14 interface 228 has no altsetting 0 [ 187.524874][ T5833] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 187.528083][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.530601][ T5833] usb 8-1: Product: syz [ 187.531942][ T5833] usb 8-1: Manufacturer: syz [ 187.533722][ T5833] usb 8-1: SerialNumber: syz [ 187.947791][ T5833] legousbtower 8-1:14.57: interrupt endpoints not found [ 188.355663][ T5833] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 188.363565][ T5833] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 188.774017][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 188.777397][ T8417] netlink: 90 bytes leftover after parsing attributes in process `syz.1.722'. [ 188.784445][ T8417] netlink: 90 bytes leftover after parsing attributes in process `syz.1.722'. [ 188.907038][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.723'. [ 188.921504][ T8423] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 188.924307][ T8423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.928143][ T8423] vhci_hcd vhci_hcd.0: Device attached [ 188.942696][ T8428] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 188.949286][ T5915] vhci_hcd vhci_hcd.2: stop threads [ 188.951561][ T5915] vhci_hcd vhci_hcd.2: release socket [ 188.957147][ T5915] vhci_hcd vhci_hcd.2: disconnect device [ 188.968315][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 189.017798][ T8432] FAULT_INJECTION: forcing a failure. [ 189.017798][ T8432] name failslab, interval 1, probability 0, space 0, times 0 [ 189.022856][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.1.726 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.022903][ T8432] Tainted: [L]=SOFTLOCKUP [ 189.022910][ T8432] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.022919][ T8432] Call Trace: [ 189.022925][ T8432] [ 189.022932][ T8432] dump_stack_lvl+0x100/0x190 [ 189.022957][ T8432] should_fail_ex.cold+0x5/0xa [ 189.022975][ T8432] should_failslab+0xc2/0x120 [ 189.022998][ T8432] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 189.023018][ T8432] ? get_pid_task+0xfc/0x250 [ 189.023037][ T8432] ? sock_alloc_inode+0x26/0x2c0 [ 189.023063][ T8432] ? __pfx_sock_alloc_inode+0x10/0x10 [ 189.023087][ T8432] sock_alloc_inode+0x26/0x2c0 [ 189.023109][ T8432] ? __pfx_sock_alloc_inode+0x10/0x10 [ 189.023131][ T8432] alloc_inode+0x68/0x250 [ 189.023153][ T8432] sock_alloc+0x44/0x280 [ 189.023177][ T8432] do_accept+0xf9/0x530 [ 189.023194][ T8432] ? do_raw_spin_lock+0x128/0x260 [ 189.023213][ T8432] ? __pfx_do_accept+0x10/0x10 [ 189.023247][ T8432] __sys_accept4+0x108/0x200 [ 189.023265][ T8432] ? __pfx___sys_accept4+0x10/0x10 [ 189.023285][ T8432] ? ksys_write+0x1ac/0x250 [ 189.023304][ T8432] __ia32_sys_accept4+0x94/0x100 [ 189.023322][ T8432] ? lockdep_hardirqs_on+0x78/0x100 [ 189.023342][ T8432] __do_fast_syscall_32+0xe7/0x970 [ 189.023362][ T8432] ? lockdep_hardirqs_on+0x78/0x100 [ 189.023382][ T8432] do_fast_syscall_32+0x32/0x70 [ 189.023402][ T8432] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.023422][ T8432] RIP: 0023:0xf708efec [ 189.023443][ T8432] Code: Unable to access opcode bytes at 0xf708efc2. [ 189.023450][ T8432] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016c [ 189.023467][ T8432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 189.023477][ T8432] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 189.023486][ T8432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.023495][ T8432] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 189.023505][ T8432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.023526][ T8432] [ 189.165040][ T10] usb 8-1: USB disconnect, device number 18 [ 189.176307][ T10] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 189.276731][ T8435] loop6: detected capacity change from 0 to 2640 [ 189.279241][ T8435] buffer_io_error: 9 callbacks suppressed [ 189.279251][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.285639][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.289196][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.292486][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.296506][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.299830][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.303352][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.306735][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.313893][ T8435] ldm_validate_partition_table(): Disk read failed. [ 189.323276][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.330068][ T8435] Buffer I/O error on dev loop6, logical block 0, async page read [ 189.336926][ T8435] Dev loop6: unable to read RDB block 0 [ 189.339576][ T8435] loop6: unable to read partition table [ 189.342206][ T8435] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 189.468942][ T8439] No such timeout policy "syz1" [ 190.279188][ T8456] nbd: socks must be embedded in a SOCK_ITEM attr [ 190.284640][ T8456] block nbd0: shutting down sockets [ 190.485878][ T8466] netlink: 40 bytes leftover after parsing attributes in process `syz.1.737'. [ 190.499402][ T8465] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 190.501866][ T8465] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.505268][ T8465] vhci_hcd vhci_hcd.0: Device attached [ 190.562705][ T8467] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 190.569003][ T5915] vhci_hcd vhci_hcd.1: stop threads [ 190.571274][ T5915] vhci_hcd vhci_hcd.1: release socket [ 190.574888][ T5915] vhci_hcd vhci_hcd.1: disconnect device [ 190.672767][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 190.748258][ T8480] IPVS: rr: FWM 3 0x00000003 - no destination available [ 191.043134][ T41] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 191.183108][ T41] usb 5-1: device descriptor read/64, error -71 [ 191.207661][ T8488] uhci_hcd 0000:00:1d.0: remove, state 4 [ 191.209710][ T8488] usb usb1: USB disconnect, device number 1 [ 191.443226][ T41] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 191.463645][ T8488] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 191.586238][ T41] usb 5-1: device descriptor read/64, error -71 [ 192.043602][ T41] usb usb5-port1: attempt power cycle [ 192.190829][ T8504] loop0: detected capacity change from 0 to 32768 [ 192.198248][ T8504] loop2: detected capacity change from 0 to 32768 [ 192.209140][ T8504] loop3: detected capacity change from 0 to 32768 [ 192.264774][ T8504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.463767][ T8504] md: loop1 has zero or unknown size, marking faulty! [ 192.484489][ T8504] md: error, md_import_device() returned -22 [ 192.527136][ T8510] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 192.559886][ T8517] e1000e 0000:00:02.0 eth1: removed PHC [ 192.717712][ T8517] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 192.753133][ T41] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.776395][ T41] usb 5-1: device descriptor read/8, error -71 [ 192.846320][ T8528] netlink: 'syz.1.756': attribute type 5 has an invalid length. [ 193.015176][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 193.025790][ T41] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 193.054028][ T41] usb 5-1: device descriptor read/8, error -71 [ 193.133424][ T5833] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 193.163318][ T41] usb usb5-port1: unable to enumerate USB device [ 193.293161][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 193.296176][ T5833] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 193.299068][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 193.304887][ T5833] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 193.308950][ T5833] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 193.312248][ T5833] usb 6-1: Product: syz [ 193.314009][ T5833] usb 6-1: Manufacturer: syz [ 193.316294][ T5833] usb 6-1: SerialNumber: syz [ 193.317225][ T8567] fuse: Bad value for 'fd' [ 193.322535][ T5833] usb 6-1: config 0 descriptor?? [ 193.328351][ T5833] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 193.344426][ T5833] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 193.377150][ T8567] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 193.532126][ T5847] usb 6-1: USB disconnect, device number 21 [ 193.532189][ C2] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 193.538763][ T5847] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 193.734569][ T8542] ldusb: No device or device unplugged -19 [ 193.768096][ T8591] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 193.773973][ T8591] CPU: 1 UID: 0 PID: 8591 Comm: syz.2.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.774010][ T8591] Tainted: [L]=SOFTLOCKUP [ 193.774018][ T8591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.774030][ T8591] Call Trace: [ 193.774039][ T8591] [ 193.774047][ T8591] dump_stack_lvl+0x100/0x190 [ 193.774078][ T8591] sysfs_warn_dup.cold+0x1c/0x28 [ 193.774109][ T8591] sysfs_create_dir_ns+0x24b/0x2b0 [ 193.774171][ T8591] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 193.774200][ T8591] ? find_held_lock+0x2b/0x80 [ 193.774226][ T8591] ? kobject_add_internal+0x25f/0x930 [ 193.774256][ T8591] ? kobject_add_internal+0x25f/0x930 [ 193.774287][ T8591] ? class_dir_child_ns_type+0xd/0x60 [ 193.774331][ T8591] kobject_add_internal+0x2c8/0x930 [ 193.774366][ T8591] kobject_add+0x16a/0x1e0 [ 193.774394][ T8591] ? __pfx_kobject_add+0x10/0x10 [ 193.774423][ T8591] ? get_device_parent+0x1b3/0x4c0 [ 193.774452][ T8591] ? kobject_put+0xb9/0x640 [ 193.774487][ T8591] device_add+0x294/0x1970 [ 193.774514][ T8591] ? lockdep_init_map_type+0x5c/0x250 [ 193.774533][ T8591] ? __pfx_device_add+0x10/0x10 [ 193.774573][ T8591] ? lockdep_init_map_type+0x5c/0x250 [ 193.774594][ T8591] ? __init_waitqueue_head+0xca/0x150 [ 193.774622][ T8591] tty_register_device_attr+0x388/0x7f0 [ 193.774660][ T8591] ? lockdep_init_map_type+0x5c/0x250 [ 193.774681][ T8591] ? __pfx_tty_register_device_attr+0x10/0x10 [ 193.774715][ T8591] ? tty_port_init+0x156/0x1c0 [ 193.774749][ T8591] gsm_activate_mux+0x155/0x2a0 [ 193.774776][ T8591] gsmld_ioctl+0xbbc/0x15c0 [ 193.774802][ T8591] ? __pfx_gsmld_ioctl+0x10/0x10 [ 193.774841][ T8591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 193.774884][ T8591] ? __pfx_gsmld_ioctl+0x10/0x10 [ 193.774904][ T8591] tty_compat_ioctl+0x396/0x420 [ 193.774933][ T8591] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 193.774962][ T8591] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 193.774995][ T8591] __do_fast_syscall_32+0xe7/0x970 [ 193.775026][ T8591] do_fast_syscall_32+0x32/0x70 [ 193.775053][ T8591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.775079][ T8591] RIP: 0023:0xf706efec [ 193.775107][ T8591] Code: Unable to access opcode bytes at 0xf706efc2. [ 193.775116][ T8591] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 193.775154][ T8591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 193.775169][ T8591] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.775182][ T8591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.775196][ T8591] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 193.775207][ T8591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.775234][ T8591] [ 193.775392][ T8591] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 193.977976][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.980743][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.733002][ T5833] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 194.841747][ T8608] lo speed is unknown, defaulting to 1000 [ 195.214622][ T5833] usb 5-1: not running at top speed; connect to a high speed hub [ 195.509202][ T5833] usb 5-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 195.513887][ T5833] usb 5-1: config 1 interface 0 has no altsetting 0 [ 195.517607][ T5833] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 195.520516][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.523039][ T5833] usb 5-1: Product: ᰊ [ 195.524359][ T5833] usb 5-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 195.534079][ T5833] usb 5-1: SerialNumber: М [ 195.542126][ T8594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.758107][ T5833] usblp0: Disabling reads from problematic bidirectional printer [ 195.767762][ T5833] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 195.778114][ T5833] usb 5-1: USB disconnect, device number 22 [ 195.789502][ T5833] usblp0: removed [ 195.908148][ T8620] tipc: Started in network mode [ 195.909852][ T8620] tipc: Node identity ac14140f, cluster identity 4711 [ 195.918950][ T8620] tipc: New replicast peer: 255.255.255.255 [ 195.921415][ T8620] tipc: Enabled bearer , priority 10 [ 196.309757][ T8646] netlink: 5188 bytes leftover after parsing attributes in process `syz.2.781'. [ 197.423550][ T5833] tipc: Node number set to 2886997007 [ 197.558832][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 197.558853][ T42] audit: type=1804 audit(1785489022.344:235): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.787" name="/newroot/198/tracing/uprobe_events" dev="tracefs" ino=1073 res=1 errno=0 [ 197.804462][ T8676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 198.183251][ T34] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 198.335084][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 198.339180][ T34] usb 6-1: config 1 interface 0 altsetting 96 endpoint 0x82 has invalid maxpacket 544, setting to 64 [ 198.344111][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 198.348540][ T34] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 198.351952][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.355312][ T34] usb 6-1: Product: ᰊ [ 198.356876][ T34] usb 6-1: Manufacturer: 髑໇㧢崥餄싉謖Ή◾噈ᙸ䊑䙍뮯鰾竃铟椇꺇狒숂溘홗ꍢ흳醕⒜ၯΉ컨ퟞベ鲧焩뻘ᦵ肨쏴䷅ᓰꫡ玝ӥ똎ﲻﱇӓꆏ뀝칇艊㋞ﯦꆭᵡ协튴﫝뭛騠蜡⾍ᛣۖﺡ铅㒑蛜뉖◻쥂唥铩뮃猪傽齿捂ヤ봜勞넜潝齃╫ၽ寴얆䞊哏꘨⥌뼪ꖺ䧘봏嘆烧鬱Դ [ 198.369862][ T34] usb 6-1: SerialNumber: М [ 198.379366][ T8681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.688392][ T34] usblp0: Disabling reads from problematic bidirectional printer [ 199.700640][ T34] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 96 proto 2 vid 0x03F0 pid 0x0004 [ 199.716030][ T34] usb 6-1: USB disconnect, device number 22 [ 199.732275][ T34] usblp0: removed [ 199.815040][ T8687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 199.817153][ T8687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.833123][ T8687] vhci_hcd vhci_hcd.0: Device attached [ 200.123325][ T56] usb 38-1: SetAddress Request (6) to port 0 [ 200.125693][ T56] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 200.207797][ T8688] vhci_hcd: connection reset by peer [ 200.209943][ T12] vhci_hcd vhci_hcd.0: stop threads [ 200.211557][ T12] vhci_hcd vhci_hcd.0: release socket [ 200.216855][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 200.674778][ T8703] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 201.074857][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 201.140916][ T42] audit: type=1800 audit(1785489025.924:236): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.800" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 201.801896][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 201.815553][ T8717] netlink: 'syz.1.801': attribute type 5 has an invalid length. [ 201.821694][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 201.839093][ T8721] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.878774][ T8717] geneve3: entered promiscuous mode [ 201.883083][ T8717] geneve3: entered allmulticast mode [ 201.904542][ T5746] ffs_data_put(): freeing [ 201.906062][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 201.911470][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 201.920018][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 201.925748][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 201.980312][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'. [ 202.032765][ T8728] vfio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 202.679272][ T8737] binder: 8736:8737 ioctl 40285881 80000040 returned -22 [ 203.105171][ T8753] lo speed is unknown, defaulting to 1000 [ 203.418213][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 203.989530][ T8791] 2: renamed from team_slave_1 (while UP) [ 204.046406][ T8794] FAULT_INJECTION: forcing a failure. [ 204.046406][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.050704][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.0.823 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.050724][ T8794] Tainted: [L]=SOFTLOCKUP [ 204.050729][ T8794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.050735][ T8794] Call Trace: [ 204.050740][ T8794] [ 204.050745][ T8794] dump_stack_lvl+0x100/0x190 [ 204.050763][ T8794] should_fail_ex.cold+0x5/0xa [ 204.050776][ T8794] _copy_from_user+0x2e/0xd0 [ 204.050793][ T8794] get_compat_msghdr+0xb3/0x480 [ 204.050811][ T8794] ? __pfx_get_compat_msghdr+0x10/0x10 [ 204.050833][ T8794] ___sys_sendmsg+0x1b6/0x1e0 [ 204.050846][ T8794] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.050864][ T8794] ? find_held_lock+0x2b/0x80 [ 204.050886][ T8794] __sys_sendmsg+0x160/0x210 [ 204.050901][ T8794] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.050919][ T8794] ? __pfx_ksys_write+0x10/0x10 [ 204.050933][ T8794] __do_fast_syscall_32+0xe7/0x970 [ 204.050947][ T8794] ? lockdep_hardirqs_on+0x78/0x100 [ 204.050961][ T8794] do_fast_syscall_32+0x32/0x70 [ 204.050975][ T8794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.050989][ T8794] RIP: 0023:0xf7f56fec [ 204.051003][ T8794] Code: Unable to access opcode bytes at 0xf7f56fc2. [ 204.051008][ T8794] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 204.051020][ T8794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000c80 [ 204.051027][ T8794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.051033][ T8794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.051039][ T8794] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.051045][ T8794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.051058][ T8794] [ 204.861908][ T8808] input: syz1 as /devices/virtual/input/input9 [ 205.184617][ T56] usb 38-1: device descriptor read/8, error -110 [ 205.481149][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 205.486178][ T8813] bridge: RTM_NEWNEIGH with invalid ether address [ 205.489304][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 205.493622][ T8813] bridge: RTM_NEWNEIGH with invalid ether address [ 205.575708][ T56] usb usb38-port1: attempt power cycle [ 205.599734][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 205.603787][ T8817] netlink: 'syz.2.831': attribute type 10 has an invalid length. [ 205.607108][ T8817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.831'. [ 205.619553][ T8817] geneve3: entered promiscuous mode [ 205.621757][ T8817] geneve3: entered allmulticast mode [ 205.632564][ T8817] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 205.674706][ T8817] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 205.733929][ T8817] bond1 (unregistering): Released all slaves [ 206.169431][ T56] usb usb38-port1: unable to enumerate USB device [ 207.315711][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'. [ 207.321190][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'. [ 207.556197][ T8841] pci_bus 0000:01: busn_res: [bus 01] is released [ 207.584957][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 207.592679][ T8842] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 207.612018][ T8842] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 207.616512][ T8842] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 207.619054][ T8842] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 207.622126][ T8842] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 207.646356][ T8842] pci 0000:00:01.0: Adding to iommu group 1 [ 207.651986][ T8842] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 207.654169][ T8842] pci 0000:00:01.0: vgaarb: bridge control possible [ 207.656241][ T8842] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 207.661855][ T8842] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 207.670941][ T8842] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 207.673355][ T8842] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 207.675568][ T8842] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 207.677527][ T8842] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 207.680069][ T8842] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 207.682672][ T8842] pci 0000:00:02.0: enabling Extended Tags [ 207.706056][ T8842] pci 0000:00:02.0: Adding to iommu group 2 [ 207.716254][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 207.718193][ T8842] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 207.730165][ T8842] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 207.732763][ T8842] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 207.736850][ T8842] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 207.754592][ T8842] pci 0000:00:03.0: Adding to iommu group 3 [ 207.765786][ T8842] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 207.773193][ T8842] pci 0000:00:04.0: PCI bridge to [bus 01] [ 207.775765][ T8842] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 207.778687][ T8842] pci 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 207.784192][ T8842] pci 0000:00:04.0: bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 207.788283][ T8842] pci 0000:00:04.0: enabling Extended Tags [ 207.821421][ T8842] pci 0000:00:04.0: Adding to iommu group 4 [ 207.866786][ T8842] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 207.876088][ T8842] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 207.882659][ T8842] pci 0000:00:1d.0: Adding to iommu group 7 [ 207.890173][ T8842] pci 0000:00:04.0: PCI bridge to [bus 01] [ 207.895768][ T8842] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 207.901488][ T8842] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 207.905543][ T8842] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 207.908218][ T8842] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff]: assigned [ 207.910845][ T8842] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref]: assigned [ 207.913895][ T8842] pci 0000:00:02.0: ROM [mem 0x81200000-0x8123ffff pref]: assigned [ 207.916394][ T8842] pci 0000:00:02.0: BAR 0 [mem 0x81240000-0x8125ffff]: assigned [ 207.919827][ T8842] pci 0000:00:02.0: BAR 1 [mem 0x81260000-0x8127ffff]: assigned [ 207.923417][ T8842] pci 0000:00:02.0: BAR 3 [mem 0x81280000-0x81283fff]: assigned [ 207.926997][ T8842] pci 0000:00:03.0: BAR 4 [mem 0x580200000-0x580203fff 64bit pref]: assigned [ 207.932118][ T8842] pci 0000:00:01.0: BAR 2 [mem 0x81284000-0x81284fff]: assigned [ 207.936177][ T8842] pci 0000:00:03.0: BAR 1 [mem 0x81285000-0x81285fff]: assigned [ 207.939608][ T8842] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 207.942068][ T8842] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 207.945407][ T8842] pci 0000:00:03.0: BAR 0 [io 0x2020-0x203f]: assigned [ 207.948922][ T8842] pci 0000:00:1d.0: BAR 4 [io 0x2040-0x205f]: assigned [ 207.952143][ T8842] pci 0000:00:04.0: PCI bridge to [bus 01] [ 207.954360][ T8842] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 207.958947][ T8842] pci 0000:00:04.0: bridge window [mem 0x81000000-0x811fffff] [ 207.964391][ T8842] pci 0000:00:04.0: bridge window [mem 0x580000000-0x5801fffff 64bit pref] [ 207.972625][ T8842] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 207.990487][ T8842] [drm] Found bochs VGA, ID 0xb0c5. [ 207.992822][ T8842] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81284000. [ 207.998835][ T8842] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 208.075907][ T8867] syzkaller0: entered promiscuous mode [ 208.078377][ T8867] syzkaller0: entered allmulticast mode [ 208.094833][ T8842] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 208.183937][ T8842] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 208.332420][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.353406][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.368206][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.385736][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.392670][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.440739][ T8842] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 208.444218][ T8842] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 208.447718][ T8842] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 208.496906][ T8842] virtio-pci 0000:00:03.0: PCI INT A: failed to register GSI [ 208.500308][ T8842] virtio-pci 0000:00:03.0: probe with driver virtio-pci failed with error -16 [ 208.602051][ T8842] pcieport 0000:00:04.0: PME: Signaling with IRQ 30 [ 208.626343][ T8842] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(31) aer_irq aer_isr aerdrv [ 208.631103][ T8842] pcieport 0000:00:04.0: AER: request AER IRQ 31 failed [ 208.634357][ T8842] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 208.643297][ T5847] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 208.740240][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.747059][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.789755][ T8842] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 139965 usecs [ 208.830958][ T8842] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 208.846717][ T8842] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 208.852542][ T8842] uhci_hcd 0000:00:1d.0: detected 2 ports [ 208.856437][ T8842] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002040 [ 208.881285][ T8842] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 208.885156][ T8842] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 208.889401][ T8842] usb usb1: Product: UHCI Host Controller [ 208.891432][ T8842] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 208.893661][ T8842] usb usb1: SerialNumber: 0000:00:1d.0 [ 208.921508][ T5458] 8021q: adding VLAN 0 to HW filter on device eth1 [ 208.922344][ T8842] hub 1-0:1.0: USB hub found [ 208.931735][ T8842] hub 1-0:1.0: 2 ports detected [ 208.940675][ T5847] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.968790][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.977202][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.980417][ T5847] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 208.984304][ T5847] usb 6-1: can't read configurations, error -71 [ 209.008909][ T8870] lo speed is unknown, defaulting to 1000 [ 209.187379][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.193590][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.295985][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.299271][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.399268][ T5826] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 209.871139][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.877537][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.880651][ T8870] bridge_slave_0: entered allmulticast mode [ 209.885155][ T8870] bridge_slave_0: entered promiscuous mode [ 209.901386][ T13] bridge_slave_1: left allmulticast mode [ 209.903565][ T13] bridge_slave_1: left promiscuous mode [ 209.907528][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.922750][ T13] bridge_slave_0: left allmulticast mode [ 209.925899][ T13] bridge_slave_0: left promiscuous mode [ 209.930681][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.158045][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.165836][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.170983][ T13] bond0 (unregistering): Released all slaves [ 210.185087][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.188505][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.191779][ T8870] bridge_slave_1: entered allmulticast mode [ 210.200816][ T8870] bridge_slave_1: entered promiscuous mode [ 210.242730][ T8870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.264044][ T8870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.320650][ T13] tipc: Left network mode [ 210.339267][ T8870] team0: Port device team_slave_0 added [ 210.347267][ T8870] team0: Port device team_slave_1 added [ 210.456124][ T64] Bluetooth: hci4: command tx timeout [ 210.521559][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.528065][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.538902][ T8870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.542484][ T8962] tipc: Started in network mode [ 210.544227][ T8962] tipc: Node identity 4, cluster identity 4711 [ 210.546622][ T8962] tipc: Node number set to 4 [ 210.548892][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.551762][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.573154][ T8870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.673084][ T56] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.674843][ T5458] 8021q: adding VLAN 0 to HW filter on device eth2 [ 210.707419][ T8870] hsr_slave_0: entered promiscuous mode [ 210.711886][ T8870] hsr_slave_1: entered promiscuous mode [ 210.714184][ T8870] debugfs: 'hsr0' already exists in 'hsr' [ 210.716374][ T8870] Cannot create hsr debugfs directory [ 210.725438][ T13] hsr_slave_0: left promiscuous mode [ 210.728096][ T13] hsr_slave_1: left promiscuous mode [ 210.730619][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.733261][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.736950][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.739360][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.753891][ T13] veth1_macvtap: left promiscuous mode [ 210.756990][ T13] veth0_macvtap: left promiscuous mode [ 210.759507][ T13] veth1_vlan: left promiscuous mode [ 210.761487][ T13] veth0_vlan: left promiscuous mode [ 210.853084][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 210.853192][ T5847] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 210.856041][ T56] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 210.863095][ T56] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 210.866660][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 210.871226][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.884567][ T56] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 210.890399][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.895287][ T56] usb 5-1: Product: syz [ 210.896644][ T56] usb 5-1: Manufacturer: syz [ 210.900344][ T56] usb 5-1: SerialNumber: syz [ 210.906342][ T56] usb 5-1: config 0 descriptor?? [ 210.908572][ T8955] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.923196][ T5826] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 210.967466][ T13] team0 (unregistering): Port device team_slave_1 removed [ 210.977466][ T13] team0 (unregistering): Port device team_slave_0 removed [ 211.003660][ T5847] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 211.008149][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.011907][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.016881][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.020187][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.023730][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.027159][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.030251][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.033521][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.037082][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.040113][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.044217][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.048805][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.052661][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.057094][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.061616][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.067098][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.071091][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.076111][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.079192][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.082136][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.083135][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 211.088146][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.089524][ T5826] usb 7-1: unable to get BOS descriptor or descriptor too short [ 211.091467][ T5847] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.094940][ T5826] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 211.098121][ T5847] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.101027][ T5826] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 211.105231][ T5847] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.107851][ T5847] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 211.108840][ T5826] usb 7-1: config 14 has no interface number 0 [ 211.110837][ T5847] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 211.114837][ T5826] usb 7-1: config 14 has no interface number 1 [ 211.116789][ T5847] usb 6-1: Product: syz [ 211.116807][ T5847] usb 6-1: Manufacturer: syz [ 211.116818][ T5847] usb 6-1: SerialNumber: syz [ 211.120137][ T5826] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 211.124453][ T5847] usb 6-1: config 0 descriptor?? [ 211.126223][ T5826] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 211.128636][ T56] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 211.131979][ T5826] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 211.132095][ T5847] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 211.146230][ T56] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input10 [ 211.146979][ T5826] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 211.154652][ T5826] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 211.159064][ T5826] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.164408][ T5826] usb 7-1: config 14 interface 57 has no altsetting 0 [ 211.167179][ T5826] usb 7-1: config 14 interface 228 has no altsetting 0 [ 211.171485][ T5826] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 211.175503][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.178694][ T5826] usb 7-1: Product: syz [ 211.180345][ T5826] usb 7-1: Manufacturer: syz [ 211.182155][ T5826] usb 7-1: SerialNumber: syz [ 211.435743][ T5458] 8021q: adding VLAN 0 to HW filter on device eth3 [ 211.440876][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.445322][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.456619][ T8977] block nbd0: Receive control failed (result -32) [ 211.468934][ C1] powermate: config urb returned -71 [ 211.474023][ C1] powermate: config urb returned -71 [ 211.476353][ C1] powermate: config urb returned -71 [ 211.478686][ C1] powermate: config urb returned -71 [ 211.481045][ T5825] usb 5-1: USB disconnect, device number 23 [ 211.483622][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 211.498196][ T8975] block nbd0: shutting down sockets [ 211.504948][ T5833] usb 6-1: USB disconnect, device number 25 [ 211.526910][ T5833] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 211.621599][ T5826] legousbtower 7-1:14.57: interrupt endpoints not found [ 211.627146][ T8870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.634333][ T8870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.637829][ T8870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.643252][ T8870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.646754][ T8870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.651698][ T8870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.654712][ T8870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.664444][ T8870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.729012][ T5458] 8021q: adding VLAN 0 to HW filter on device eth4 [ 211.780954][ T8870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.806196][ T8870] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.817564][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.819944][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.835917][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.838872][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.926038][ T5458] 8021q: adding VLAN 0 to HW filter on device eth5 [ 212.024245][ T5826] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 212.029144][ T5826] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 212.183315][ T8870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.213635][ T9027] binder: 9026:9027 ioctl c0306201 800004c0 returned -14 [ 212.218338][ T9027] binder: 9026:9027 unknown command 1078485781 [ 212.221047][ T9027] binder: 9026:9027 ioctl c0306201 800001c0 returned -22 [ 212.262343][ T9033] loop5: detected capacity change from 0 to 7 [ 212.280141][ T9033] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 212.282051][ T9033] loop5: partition table partially beyond EOD, truncated [ 212.290460][ T9033] loop5: p1 size 487441168 extends beyond EOD, truncated [ 212.317075][ T7737] udevd[7737]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 212.372713][ T8870] veth0_vlan: entered promiscuous mode [ 212.390775][ T8870] veth1_vlan: entered promiscuous mode [ 212.406388][ T9038] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.425627][ T8870] veth0_macvtap: entered promiscuous mode [ 212.429888][ T8870] veth1_macvtap: entered promiscuous mode [ 212.439954][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.444597][ T8870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.505183][ T9042] Invalid ELF header magic: != ELF [ 212.533442][ T64] Bluetooth: hci4: command tx timeout [ 212.598322][ T8825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.612526][ T9043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.880'. [ 212.619207][ T8825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.633674][ T8825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.654979][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.659769][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.680614][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.686498][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.697073][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.971656][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 212.989391][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.010421][ T9051] [ 213.011381][ T9051] ====================================================== [ 213.014000][ T9051] WARNING: possible circular locking dependency detected [ 213.016745][ T9051] syzkaller #0 Tainted: G L [ 213.019213][ T9051] ------------------------------------------------------ [ 213.021547][ T9051] syz.4.847/9051 is trying to acquire lock: [ 213.023383][ T9051] ffffffff901d35e8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 213.026425][ T9051] [ 213.026425][ T9051] but task is already holding lock: [ 213.029023][ T9051] ffff888013321440 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 213.032945][ T9051] [ 213.032945][ T9051] which lock already depends on the new lock. [ 213.032945][ T9051] [ 213.036960][ T9051] [ 213.036960][ T9051] the existing dependency chain (in reverse order) is: [ 213.040503][ T9051] [ 213.040503][ T9051] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 213.044073][ T9051] lock_acquire+0x1b9/0x370 [ 213.046212][ T9051] down_write+0x8b/0x1f0 [ 213.048152][ T9051] configfs_depend_item_unlocked+0xf3/0x6a0 [ 213.050711][ T9051] usbg_make_tpg+0x261/0x620 [ 213.052640][ T9051] target_fabric_make_tpg+0xab/0x8c0 [ 213.055024][ T9051] configfs_mkdir+0x51e/0xb70 [ 213.057150][ T9051] vfs_mkdir+0x361/0x850 [ 213.059131][ T9051] filename_mkdirat+0x48b/0x5e0 [ 213.061352][ T9051] __ia32_sys_mkdir+0x6a/0x90 [ 213.063521][ T9051] __do_fast_syscall_32+0xe7/0x970 [ 213.065745][ T9051] do_fast_syscall_32+0x32/0x70 [ 213.067959][ T9051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.070678][ T9051] [ 213.070678][ T9051] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 213.073775][ T9051] lock_acquire+0x1b9/0x370 [ 213.075850][ T9051] __mutex_lock+0x1a4/0x1bd0 [ 213.077979][ T9051] tcm_set_name+0x29/0xb0 [ 213.080039][ T9051] function_make+0x21c/0x3f0 [ 213.082133][ T9051] configfs_mkdir+0x51e/0xb70 [ 213.084280][ T9051] vfs_mkdir+0x361/0x850 [ 213.086286][ T9051] filename_mkdirat+0x48b/0x5e0 [ 213.088503][ T9051] __ia32_sys_mkdir+0x6a/0x90 [ 213.090678][ T9051] __do_fast_syscall_32+0xe7/0x970 [ 213.093013][ T9051] do_fast_syscall_32+0x32/0x70 [ 213.095227][ T9051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.098043][ T9051] [ 213.098043][ T9051] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 213.101440][ T9051] check_prev_add+0xeb/0xe60 [ 213.103563][ T9051] __lock_acquire+0x136c/0x1a40 [ 213.105579][ T9051] lock_acquire+0x1b9/0x370 [ 213.107166][ T9051] __mutex_lock+0x1a4/0x1bd0 [ 213.109204][ T9051] configfs_rmdir+0x5ae/0x950 [ 213.111350][ T9051] vfs_rmdir+0x328/0x8a0 [ 213.113365][ T9051] filename_rmdir+0x31a/0x5c0 [ 213.115517][ T9051] __ia32_sys_rmdir+0x45/0x60 [ 213.117675][ T9051] __do_fast_syscall_32+0xe7/0x970 [ 213.120020][ T9051] do_fast_syscall_32+0x32/0x70 [ 213.122248][ T9051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.125076][ T9051] [ 213.125076][ T9051] other info that might help us debug this: [ 213.125076][ T9051] [ 213.129259][ T9051] Chain exists of: [ 213.129259][ T9051] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#25 [ 213.129259][ T9051] [ 213.135177][ T9051] Possible unsafe locking scenario: [ 213.135177][ T9051] [ 213.138236][ T9051] CPU0 CPU1 [ 213.140504][ T9051] ---- ---- [ 213.142713][ T9051] lock(&sb->s_type->i_mutex_key#25); [ 213.144984][ T9051] lock(&opts->dep_lock); [ 213.147840][ T9051] lock(&sb->s_type->i_mutex_key#25); [ 213.151103][ T9051] lock(gadget_subsys.su_mutex); [ 213.153200][ T9051] [ 213.153200][ T9051] *** DEADLOCK *** [ 213.153200][ T9051] [ 213.156522][ T9051] 3 locks held by syz.4.847/9051: [ 213.158599][ T9051] #0: ffff88802266e450 (sb_writers#14){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 213.162513][ T9051] #1: ffff8880283b6040 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 213.167126][ T9051] #2: ffff888013321440 (&sb->s_type->i_mutex_key#25){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 213.171267][ T9051] [ 213.171267][ T9051] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.173728][ T9051] CPU: 3 UID: 0 PID: 9051 Comm: syz.4.847 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.173762][ T9051] Tainted: [L]=SOFTLOCKUP [ 213.173769][ T9051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.173791][ T9051] Call Trace: [ 213.173799][ T9051] [ 213.173807][ T9051] dump_stack_lvl+0x100/0x190 [ 213.173833][ T9051] print_circular_bug.cold+0x178/0x1c7 [ 213.173866][ T9051] check_noncircular+0x146/0x160 [ 213.173899][ T9051] check_prev_add+0xeb/0xe60 [ 213.173927][ T9051] ? __bfs+0x150/0x2a0 [ 213.173951][ T9051] __lock_acquire+0x136c/0x1a40 [ 213.173985][ T9051] lock_acquire+0x1b9/0x370 [ 213.174012][ T9051] ? configfs_rmdir+0x5ae/0x950 [ 213.174034][ T9051] ? __pfx___might_resched+0x10/0x10 [ 213.174066][ T9051] __mutex_lock+0x1a4/0x1bd0 [ 213.174090][ T9051] ? configfs_rmdir+0x5ae/0x950 [ 213.174110][ T9051] ? configfs_rmdir+0x5ae/0x950 [ 213.174133][ T9051] ? __pfx___mutex_lock+0x10/0x10 [ 213.174157][ T9051] ? do_raw_spin_lock+0x128/0x260 [ 213.174176][ T9051] ? find_held_lock+0x2b/0x80 [ 213.174198][ T9051] ? fast_dput+0x2fe/0x6d0 [ 213.174223][ T9051] ? do_raw_spin_unlock+0x145/0x1e0 [ 213.174244][ T9051] ? _raw_spin_unlock+0x28/0x50 [ 213.174262][ T9051] ? fast_dput+0x168/0x6d0 [ 213.174287][ T9051] ? configfs_rmdir+0x5ae/0x950 [ 213.174307][ T9051] configfs_rmdir+0x5ae/0x950 [ 213.174331][ T9051] ? __pfx_configfs_rmdir+0x10/0x10 [ 213.174352][ T9051] ? __pfx_down_write+0x10/0x10 [ 213.174380][ T9051] vfs_rmdir+0x328/0x8a0 [ 213.174406][ T9051] filename_rmdir+0x31a/0x5c0 [ 213.174428][ T9051] ? __pfx_filename_rmdir+0x10/0x10 [ 213.174458][ T9051] ? do_getname+0x191/0x390 [ 213.174483][ T9051] __ia32_sys_rmdir+0x45/0x60 [ 213.174503][ T9051] __do_fast_syscall_32+0xe7/0x970 [ 213.174529][ T9051] ? lockdep_hardirqs_on+0x78/0x100 [ 213.174554][ T9051] do_fast_syscall_32+0x32/0x70 [ 213.174580][ T9051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.174605][ T9051] RIP: 0023:0xf7fc4fec [ 213.174629][ T9051] Code: Unable to access opcode bytes at 0xf7fc4fc2. [ 213.174650][ T9051] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 213.174670][ T9051] RAX: ffffffffffffffda RBX: 0000000080000800 RCX: 0000000000000000 [ 213.174684][ T9051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 213.174695][ T9051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.174708][ T9051] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 213.174720][ T9051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.174739][ T9051] [ 213.400478][ T9051] netlink: 'syz.4.847': attribute type 2 has an invalid length. [ 213.695905][ T13] bridge_slave_1: left allmulticast mode [ 213.697787][ T13] bridge_slave_1: left promiscuous mode [ 213.700384][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.704791][ T13] bridge_slave_0: left allmulticast mode [ 213.707129][ T13] bridge_slave_0: left promiscuous mode [ 213.709563][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.780267][ T13] bond0 (unregistering): left promiscuous mode [ 213.782902][ T13] bond_slave_0: left promiscuous mode [ 213.785597][ T13] bond_slave_1: left promiscuous mode [ 213.789152][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.795544][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.799736][ T13] bond0 (unregistering): Released all slaves [ 213.810544][ T13] bond1 (unregistering): Released all slaves [ 213.867664][ T13] tipc: Left network mode [ 213.908770][ T1356] usb 7-1: USB disconnect, device number 31 [ 213.915323][ T1356] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 214.033183][ T13] team0: left promiscuous mode [ 214.035344][ T13] team_slave_0: left promiscuous mode [ 214.037739][ T13] team_slave_1: left promiscuous mode [ 214.042104][ T13] hsr_slave_0: left promiscuous mode [ 214.045320][ T13] hsr_slave_1: left promiscuous mode [ 214.047359][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.049661][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.052426][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.055648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.060536][ T13] veth1_macvtap: left promiscuous mode [ 214.062867][ T13] veth0_macvtap: left promiscuous mode [ 214.116311][ T13] team0 (unregistering): Port device team_slave_1 removed [ 214.127709][ T13] team0 (unregistering): Port device team_slave_0 removed [ 214.152690][ T5825] lo speed is unknown, defaulting to 1000 [ 214.154597][ T165] smbdirect: ib_dev[syz2] removed [ 214.159227][ T5825] syz2: Port: 1 Link DOWN [ 214.557538][ T13] IPVS: stop unused estimator thread 0... [ 214.636156][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.639336][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.642387][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 214.736527][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.739813][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.742957][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 214.894561][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.897860][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.901213][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 214.965158][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.968283][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.971575][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 215.039489][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.042741][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.046117][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 215.106487][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.109796][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.113043][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 215.140636][ T5458] 8021q: adding VLAN 0 to HW filter on device eth6 [ 215.179631][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.182744][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.186846][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 215.247228][ T5458] 8021q: adding VLAN 0 to HW filter on device eth7 [ 215.256980][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.260223][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.263802][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 215.366700][ T13] bridge_slave_1: left allmulticast mode [ 215.368576][ T13] bridge_slave_1: left promiscuous mode [ 215.370416][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.373545][ T13] bridge_slave_0: left allmulticast mode [ 215.375330][ T13] bridge_slave_0: left promiscuous mode [ 215.377177][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.382550][ T13] bridge_slave_1: left allmulticast mode [ 215.384457][ T13] bridge_slave_1: left promiscuous mode [ 215.386303][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.389430][ T13] bridge_slave_0: left allmulticast mode [ 215.391248][ T13] bridge_slave_0: left promiscuous mode [ 215.393259][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.478249][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.492173][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.504211][ T13] bond0 (unregistering): Released all slaves [ 215.615230][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.616531][ T48] smbdirect: ib_dev[syz1] removed [ 215.624014][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.628549][ T13] bond0 (unregistering): Released all slaves [ 215.633705][ T5458] 8021q: adding VLAN 0 to HW filter on device eth8 [ 215.701295][ T13] tipc: Disabling bearer [ 215.704437][ T13] tipc: Left network mode [ 215.720607][ T13] tipc: Left network mode [ 215.779721][ T5458] 8021q: adding VLAN 0 to HW filter on device eth9 [ 215.931970][ T5458] 8021q: adding VLAN 0 to HW filter on device eth10 [ 216.060220][ T5458] 8021q: adding VLAN 0 to HW filter on device eth11 [ 216.100472][ T13] hsr_slave_0: left promiscuous mode [ 216.103091][ T13] hsr_slave_1: left promiscuous mode [ 216.105052][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.107317][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.110208][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.113145][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.118662][ T13] hsr_slave_0: left promiscuous mode [ 216.121439][ T13] hsr_slave_1: left promiscuous mode [ 216.124156][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.127218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.131008][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.134294][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.142144][ T13] veth1_vlan: left promiscuous mode [ 216.146956][ T13] veth0_vlan: left promiscuous mode [ 216.202578][ T13] team0 (unregistering): Port device team_slave_1 removed [ 216.207041][ T13] team0 (unregistering): Port device team_slave_0 removed [ 216.316287][ T13] team0 (unregistering): Port device 12 removed [ 216.322808][ T13] team0 (unregistering): Port device team_slave_0 removed [ 216.470044][ T5458] 8021q: adding VLAN 0 to HW filter on device eth12 [ 216.591134][ T5458] 8021q: adding VLAN 0 to HW filter on device eth13 [ 217.008890][ T13] IPVS: stop unused estimator thread 0... [ 217.010906][ T13] IPVS: stop unused estimator thread 0... [ 217.079914][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.188716][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.268610][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.338613][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.429662][ T13] bridge_slave_1: left allmulticast mode [ 217.432135][ T13] bridge_slave_1: left promiscuous mode [ 217.434631][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.439060][ T13] bridge_slave_0: left allmulticast mode [ 217.441399][ T13] bridge_slave_0: left promiscuous mode [ 217.444852][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.482753][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.488977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.493763][ T13] bond0 (unregistering): Released all slaves [ 217.615173][ T5458] 8021q: adding VLAN 0 to HW filter on device eth14 [ 217.742348][ T13] hsr_slave_0: left promiscuous mode [ 217.745259][ T13] hsr_slave_1: left promiscuous mode [ 217.747899][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.751007][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.754846][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.757936][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.763531][ T13] veth1_macvtap: left promiscuous mode [ 217.766021][ T13] veth0_macvtap: left promiscuous mode [ 217.768406][ T13] veth1_vlan: left promiscuous mode [ 217.770643][ T13] veth0_vlan: left promiscuous mode [ 217.839921][ T13] team0 (unregistering): Port device team_slave_1 removed [ 217.846449][ T13] team0 (unregistering): Port device team_slave_0 removed [ 217.891330][ T5458] 8021q: adding VLAN 0 to HW filter on device eth15 [ 218.025376][ T5458] 8021q: adding VLAN 0 to HW filter on device eth16 [ 218.172807][ T5458] 8021q: adding VLAN 0 to HW filter on device eth17