last executing test programs: 5.896817504s ago: executing program 2 (id=494): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00') r3 = fsopen(&(0x7f0000000000)='cramfs\x00', 0x2e3a7972397f66db) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) getsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) syz_usb_control_io(r0, 0x0, 0x0) r6 = openat$tun(0xffffff9c, &(0x7f0000000240), 0x400400, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x483}]}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000280)=r8) 5.280115496s ago: executing program 3 (id=496): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0xbfffff, 0x4) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4620, 0xc, @dev={0xfe, 0x80, '\x00', 0x29}, 0x80000c}, 0x1c) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) epoll_create1(0x80000) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x8edf, 0x0, 0x6, 0x0, {0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, r4, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0x0, r3, {0x7, 0x26, 0x10001, 0x8e996ca245c2d217, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x20}}, 0x50) r6 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0xffffffdffffffffa, {{0x6, 0x0, 0x0, 0x10000000000, 0x0, 0x20003, {0x1, 0x6, 0x2, 0x0, 0x4, 0x1, 0x110, 0x1000000, 0x0, 0x0, 0x0, 0x0, r5, 0x2, 0x200}}, {0x0, 0x410c54ae042ac8c9}}}, 0x0, 0x0}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x49f}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) getuid() ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) syz_io_uring_setup(0x54f2, &(0x7f0000000280)={0x0, 0xd600, 0x1000, 0x0, 0x20001}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r10, r11, 0x0, &(0x7f0000000000)) io_uring_enter(r6, 0x47ba, 0x6947, 0x39, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 4.353811721s ago: executing program 3 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x0) 4.353119708s ago: executing program 3 (id=500): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @empty, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x2, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x7}, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) close_range(r0, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r4, &(0x7f0000000900)=[{&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f00000007c0)=""/25, 0x19}, {&(0x7f0000000940)=""/208, 0xd0}], 0x4, 0x6, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe9cace1d1379e2f7) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc01c7c02, &(0x7f0000000340)={r8, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000800)={r3, @in6={{0xa, 0x4e22, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10001}}, [0xffffffffffffffb4, 0xfffffffffffffb52, 0x8, 0x800, 0x9, 0x4, 0x80000000, 0x3, 0xc774, 0x4, 0x8000000000000000, 0x80, 0x1, 0x14a57e7f, 0x8000000000000001]}, &(0x7f0000000a40)=0xfc) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_disconnect(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r11, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r11, 0xa}}, 0x10) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x40095505, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 4.215055441s ago: executing program 0 (id=502): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080010100000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = openat$proc_mixer(0xffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x9800, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f00000004c0)={&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2, 0x0, {0x9, 0x800}}, {0x8, 0x0, 0x0, {0x0, 0x10001, 0x1}}, {0x2, 0x2, 0x0, {0x8, 0x8000}}, {0x7, 0x1, 0x0, {0x8, 0x80, 0x1}}, {0xf, 0x0, 0x0, {0xfffffffffffffff8, 0xc, 0x2}}, {0x1, 0x0, 0x0, {0x1, 0x9}}, {0xa63, 0x2, 0x0, {0x100}}], 0x7, 0x20, 0x3, 0xfffffffffffffff9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f000089a000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x810, r0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x2, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000340)={0x84, @multicast1, 0x4e60, 0x0, 'wlc\x00', 0x0, 0x5, 0x52}, 0x2c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f3, 0x0, 0x9}]}) 3.226557838s ago: executing program 0 (id=503): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x5, 0x3]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba4f0c7243cfaf3983427c7250be5aeb541b4b317897bcfe86a812677427a0b5c59185db31"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r3, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c193f}, @NBD_ATTR_SIZE_BYTES={0x1e, 0x2, 0x4000000010001}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048045) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.66926558s ago: executing program 3 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a30000000060a010400000000000000000a0000010900010073797a310000000004000480090002f773797a320000000014000020131100010000000000000000000a00000a"], 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) 2.627685598s ago: executing program 2 (id=505): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffe}, 0x94) pipe(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.62019973s ago: executing program 3 (id=506): syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x18, 0x8000) sched_setaffinity(r0, 0x0, 0x0) unshare(0x8000400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0xfffffffffffffffe, 0x50000, 0x1}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read(r6, &(0x7f0000000080)=""/252, 0xfc) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000000240)=0x5, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @empty}], 0x10) 2.415208301s ago: executing program 2 (id=507): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x800000008, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91100400"], &(0x7f00000003c0)='GPL\x00', 0x40000000, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) pipe2$watch_queue(0x0, 0x80) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@private2, 0x29}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000001180)={0x2}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x541b, 0x0) sendto$packet(r5, &(0x7f0000000000)="6f3d12caa129b05b93fadda088a856d286dd", 0x12, 0x4, &(0x7f0000000180)={0x11, 0x8100, 0x0, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r10, 0xf, &(0x7f0000000140)={0x2, r8}) sendmmsg$unix(r9, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 2.414298475s ago: executing program 1 (id=508): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x0) 2.306440881s ago: executing program 1 (id=509): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x14, 0x1, 0x70bd26, 0x25dfdbfb, {0x28, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) madvise(&(0x7f0000145000/0x3000)=nil, 0x3000, 0x64) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x2000fb) write$uinput_user_dev(r0, &(0x7f0000000e80)={'syz0\x00', {0x6, 0x9, 0x2, 0x7fff}, 0x3b, [0xea48, 0x6, 0x0, 0x6, 0x0, 0xd57, 0x4, 0x4, 0x96e6, 0x4, 0xa0c5, 0x1, 0x9, 0x1, 0x10000, 0x8000, 0x8fe2, 0x401, 0x9, 0x4, 0x8, 0xf, 0x9, 0x300, 0x9, 0x801, 0x4, 0x5, 0x100, 0x2, 0x0, 0x4, 0xc9, 0x80, 0x1, 0xff800000, 0x3, 0x1, 0x3ff, 0x3, 0x5, 0x3, 0x80, 0x5, 0x0, 0xffffffa5, 0x2, 0x3, 0x0, 0x7, 0x7718, 0xff, 0x6, 0x7, 0x0, 0x9, 0x0, 0x8b2, 0x0, 0x1000, 0x4f, 0x1, 0x7ff, 0x6], [0x9, 0x7, 0x5a36, 0x75, 0x9, 0x3, 0x4, 0x8, 0x7, 0x0, 0x1000, 0x519, 0x10000, 0x80, 0x3, 0x0, 0x10, 0x2, 0x100, 0x8001, 0x2, 0x4, 0xfffffffa, 0x81, 0x4581b4e7, 0x800, 0x0, 0x30000000, 0x80000001, 0x40000000, 0x7fffffff, 0x5, 0x9d7, 0x6, 0x5, 0x10001, 0x9, 0x0, 0x5, 0x7, 0x2, 0x8, 0xffffff9d, 0xd6, 0x2f, 0x0, 0x5, 0x8, 0x9, 0x6, 0x400, 0x401, 0x4800, 0x2, 0x1, 0x1, 0x5, 0x1000, 0x10001, 0x400, 0x8d7, 0x4, 0x400, 0x7], [0xbe3, 0x0, 0xfa1a, 0x10000, 0x7, 0x6, 0x9, 0x5, 0xd, 0x1, 0x7, 0xb3, 0x0, 0x7ff, 0x8, 0x9, 0x81, 0x0, 0x6, 0x90, 0x0, 0x1, 0xd, 0x400, 0xffff605e, 0xe, 0x2, 0x1, 0x0, 0xb2, 0x9, 0xffffff60, 0x1, 0xfffffe01, 0x79, 0x1b27, 0x0, 0x1, 0xb, 0xc0, 0x5, 0xe557, 0xd, 0x9, 0x6, 0x5, 0x5, 0xf255, 0x6, 0x7, 0x3, 0x8, 0xa, 0x8000, 0x2, 0xd25, 0x12f, 0x5, 0x0, 0x271, 0x8, 0x5, 0x4, 0x8244], [0x7ff, 0x1, 0x1ff, 0xffffffff, 0x3, 0x3, 0x7, 0x6, 0x10, 0x8, 0x3323, 0x3, 0xfff, 0x1, 0x400, 0x5, 0x2, 0xfffffffd, 0x2, 0x8, 0xfff, 0x4, 0x2, 0x7a, 0x800, 0x2, 0x8000, 0x8, 0x6, 0xa6c, 0x0, 0xd, 0x7fffffff, 0x3760, 0x0, 0x101, 0x0, 0x14000000, 0x3, 0x89, 0x9, 0x401, 0xbdb1, 0x40, 0x7, 0x0, 0x6, 0x1, 0x7, 0x4, 0x5, 0x3, 0x3, 0xff, 0x6, 0x7, 0x4, 0x3ff, 0x463, 0x9, 0x7, 0x20000000, 0x7, 0x51]}, 0x45c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r6, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x8008081) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0002}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.286807222s ago: executing program 0 (id=510): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)='^!{.,\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1, 0x88, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c43, 0xaa) close(r4) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.013857328s ago: executing program 1 (id=511): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080010100000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = openat$proc_mixer(0xffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x9800, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f00000004c0)={&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2, 0x0, {0x9, 0x800}}, {0x8, 0x0, 0x0, {0x0, 0x10001, 0x1}}, {0x2, 0x2, 0x0, {0x8, 0x8000}}, {0x7, 0x1, 0x0, {0x8, 0x80, 0x1}}, {0xf, 0x0, 0x0, {0xfffffffffffffff8, 0xc, 0x2}}, {0x1, 0x0, 0x0, {0x1, 0x9}}, {0xa63, 0x2, 0x0, {0x100}}], 0x7, 0x20, 0x3, 0xfffffffffffffff9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f000089a000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x810, r0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x2, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000340)={0x84, @multicast1, 0x4e60, 0x0, 'wlc\x00', 0x0, 0x5, 0x52}, 0x2c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f3, 0x0, 0x9}]}) 1.294156443s ago: executing program 0 (id=512): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080010100000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = openat$proc_mixer(0xffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x9800, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f00000004c0)={&(0x7f00000003c0)=[{0xffffffffffffffff, 0x2, 0x0, {0x9, 0x800}}, {0x8, 0x0, 0x0, {0x0, 0x10001, 0x1}}, {0x2, 0x2, 0x0, {0x8, 0x8000}}, {0x7, 0x1, 0x0, {0x8, 0x80, 0x1}}, {0xf, 0x0, 0x0, {0xfffffffffffffff8, 0xc, 0x2}}, {0x1, 0x0, 0x0, {0x1, 0x9}}, {0xa63, 0x2, 0x0, {0x100}}], 0x7, 0x20, 0x3, 0xfffffffffffffff9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5ede4a12) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f000089a000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x810, r0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x2, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000340)={0x84, @multicast1, 0x4e60, 0x0, 'wlc\x00', 0x0, 0x5, 0x52}, 0x2c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f3, 0x0, 0x9}]}) 1.079080156s ago: executing program 2 (id=513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x9, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x7}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0x1, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x800006, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xffff4e1c, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x38440a4f, 0x8000, 0x4, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0x7, 0x7f, 0x3, 0x1], [0x0, 0x2, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x2, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c9, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x100006, 0xeff]}, 0x45c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000500), 0xf791d9d6a4e1d19a, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 954.915589ms ago: executing program 1 (id=514): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000854000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xc000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1f, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 844.051922ms ago: executing program 2 (id=515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) getpgid(0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa3, 0x8080) ioctl$VIDIOC_SUBDEV_G_SELECTION(r8, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x0, {0x5, 0xff, 0x0, 0xe}}) connect$unix(r5, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r9}, 0x38) 277.342524ms ago: executing program 0 (id=516): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 166.480886ms ago: executing program 0 (id=517): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @empty, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, 0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') preadv(r4, &(0x7f0000000900)=[{&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f00000007c0)=""/25, 0x19}, {&(0x7f0000000940)=""/208, 0xd0}], 0x4, 0x6, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe9cace1d1379e2f7) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc01c7c02, &(0x7f0000000340)={r8, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e22, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10001}}, [0xffffffffffffffb4, 0xfffffffffffffb52, 0x8, 0x800, 0x9, 0x4, 0x80000000, 0x3, 0xc774, 0x4, 0x8000000000000000, 0x80, 0x1, 0x14a57e7f, 0x8000000000000001]}, &(0x7f0000000a40)=0xfc) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_disconnect(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r11, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r11, 0xa}}, 0x10) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x40095505, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 166.168812ms ago: executing program 1 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000}, 0x0) 133.265536ms ago: executing program 3 (id=519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 53.728665ms ago: executing program 1 (id=520): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="d90100c296bbcbd995f581650b1d88a40010000100feffffff20fec2787b6ac500010000fe8800000000000000000000000000000001400107144e2300050000000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x4000ffe, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f00000004c0)}, 0x40) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002680)=""/4096, 0x1000}], 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x10000}, &(0x7f0000000340)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[], 0xcc}}, 0x2400c844) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x4004743c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a1f4020a3f758d38a5a7c754500", 0x12) pselect6(0x40, &(0x7f0000000240)={0x0, 0x3, 0x3, 0x7d, 0x0, 0x8000, 0x2, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffb, 0x9, 0x0, 0xf, 0x8000000a}, 0x0, 0x0) 0s ago: executing program 2 (id=521): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x5, 0x3]}, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba4f0c7243cfaf3983427c7250be5aeb541b4b317897bcfe86a812677427a0b5c59185db31"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r3, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000050}, 0x20048045) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x84000000, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): 2, bcdDevice=30.22 [ 103.722649][ T1002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.726766][ T1002] usb 6-1: config 0 descriptor?? [ 103.936081][ T1002] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 103.951313][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.038868][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.120'. [ 104.133036][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.136990][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.140161][ T1002] usb 6-1: USB disconnect, device number 5 [ 104.142239][ T29] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 104.145449][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.150761][ T29] usb 8-1: config 0 descriptor?? [ 104.315054][ T6487] kAFS: unable to lookup cell 'mS²jĖ”8' [ 104.565042][ T29] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 104.568474][ T29] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 104.578185][ T29] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0002/input/input5 [ 104.602080][ T29] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 105.164448][ T6496] kAFS: unable to lookup cell 'mS²jĖ”8' [ 105.761364][ T5705] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 107.719473][ T6514] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 107.721808][ T6514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 107.862156][ T6514] vhci_hcd vhci_hcd.0: Device attached [ 108.362365][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 108.401982][ T6508] wg2 speed is unknown, defaulting to 1000 [ 108.421145][ T29] usb 40-1: SetAddress Request (2) to port 0 [ 108.427963][ T6508] wg2 speed is unknown, defaulting to 1000 [ 108.430143][ T29] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 108.442546][ T6508] wg2 speed is unknown, defaulting to 1000 [ 108.460384][ T54] usb 8-1: USB disconnect, device number 6 [ 108.651149][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.801090][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 108.807206][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.815475][ T39] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.824307][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.842655][ T39] usb 5-1: config 0 descriptor?? [ 108.961072][ T6517] vhci_hcd: connection reset by peer [ 108.988437][ T1157] vhci_hcd vhci_hcd.1: stop threads [ 108.991469][ T1157] vhci_hcd vhci_hcd.1: release socket [ 108.994458][ T1157] vhci_hcd vhci_hcd.1: disconnect device [ 109.049576][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 109.060428][ T39] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 109.133990][ T6040] wg2 speed is unknown, defaulting to 1000 [ 109.138835][ T6508] infiniband syz2: set active [ 109.147234][ T6508] infiniband syz2: added wg2 [ 109.164029][ T6508] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 109.170654][ T6508] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 109.177570][ T6508] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 109.203688][ T6508] RDS/IB: syz2: added [ 109.206622][ T6508] smc: adding ib device syz2 with port count 1 [ 109.208921][ T6508] smc: ib device syz2 port 1 has no pnetid [ 109.212646][ T6040] wg2 speed is unknown, defaulting to 1000 [ 109.221596][ T6508] wg2 speed is unknown, defaulting to 1000 [ 109.255888][ T5705] usb 5-1: USB disconnect, device number 6 [ 109.404696][ T6543] kAFS: unable to lookup cell 'mS²jĖ”8' [ 109.451225][ T6508] wg2 speed is unknown, defaulting to 1000 [ 109.592265][ T6508] wg2 speed is unknown, defaulting to 1000 [ 109.714455][ T6508] wg2 speed is unknown, defaulting to 1000 [ 110.058722][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.063101][ T6550] netlink: 'syz.0.137': attribute type 25 has an invalid length. [ 110.066523][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'. [ 110.114033][ T6551] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 110.116939][ T6551] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.121013][ T6547] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 110.124405][ T6547] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.142402][ T6547] vhci_hcd vhci_hcd.0: Device attached [ 110.142422][ T6551] vhci_hcd vhci_hcd.0: Device attached [ 110.241010][ T39] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.241933][ T6554] vhci_hcd: connection closed [ 110.245605][ T6552] vhci_hcd: connection closed [ 110.253232][ T1188] vhci_hcd vhci_hcd.1: stop threads [ 110.258357][ T1188] vhci_hcd vhci_hcd.1: release socket [ 110.260316][ T1188] vhci_hcd vhci_hcd.1: disconnect device [ 110.267697][ T1188] vhci_hcd vhci_hcd.1: stop threads [ 110.269781][ T1188] vhci_hcd vhci_hcd.1: release socket [ 110.283700][ T1188] vhci_hcd vhci_hcd.1: disconnect device [ 110.355555][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 110.359846][ T6562] netlink: 'syz.1.138': attribute type 25 has an invalid length. [ 110.364552][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'. [ 110.391361][ T39] usb 8-1: Using ep0 maxpacket: 8 [ 110.399647][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.409497][ T39] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.419700][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.439010][ T39] usb 8-1: config 0 descriptor?? [ 110.657881][ T39] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.846441][ T5962] block nbd2: Receive control failed (result -107) [ 110.857933][ T39] usb 8-1: USB disconnect, device number 7 [ 110.897401][ T6571] block nbd2: shutting down sockets [ 112.342653][ T1002] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 112.491140][ T1002] usb 6-1: Using ep0 maxpacket: 8 [ 112.495720][ T1002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.500778][ T1002] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.505997][ T1002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.538482][ T1002] usb 6-1: config 0 descriptor?? [ 112.767750][ T1002] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.957188][ T1002] usb 6-1: USB disconnect, device number 6 [ 113.444084][ T6597] syz.3.146 (6597): drop_caches: 2 [ 113.541039][ T29] usb 40-1: device descriptor read/8, error -110 [ 113.916534][ T6607] warning: `syz.0.150' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.953103][ T29] usb usb40-port1: attempt power cycle [ 113.986750][ T6610] random: crng reseeded on system resumption [ 114.433548][ T6618] kAFS: unable to lookup cell 'mS²jĖ”8' [ 115.026315][ T29] usb usb40-port1: unable to enumerate USB device [ 115.550989][ T6040] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.711026][ T6040] usb 5-1: Using ep0 maxpacket: 8 [ 115.715071][ T6040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.720462][ T6040] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.025451][ T6040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.366005][ T6040] usb 5-1: config 0 descriptor?? [ 116.576530][ T6040] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.775755][ T6040] usb 5-1: USB disconnect, device number 7 [ 116.784902][ T6634] tipc: Enabling not permitted [ 116.790650][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.797758][ T6634] tipc: Enabling not permitted [ 116.800526][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.806341][ T6634] tipc: Enabling not permitted [ 116.809167][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.814953][ T6634] tipc: Enabling not permitted [ 116.817923][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.828736][ T6634] tipc: Enabling not permitted [ 116.834661][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.852121][ T6634] tipc: Enabling not permitted [ 116.869999][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.875325][ T6634] tipc: Enabling not permitted [ 116.878340][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.882559][ T6634] tipc: Enabling not permitted [ 116.885532][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.885801][ T6634] tipc: Enabling not permitted [ 116.885825][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.886020][ T6634] tipc: Enabling not permitted [ 116.886045][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.886236][ T6634] tipc: Enabling not permitted [ 116.886259][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.886470][ T6634] tipc: Enabling not permitted [ 116.890478][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.892204][ T6634] tipc: Enabling not permitted [ 116.892231][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.892447][ T6634] tipc: Enabling not permitted [ 116.892468][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.892785][ T6634] tipc: Enabling not permitted [ 116.892806][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.892977][ T6634] tipc: Enabling not permitted [ 116.892998][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.893159][ T6634] tipc: Enabling not permitted [ 116.893179][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.895600][ T6634] tipc: Enabling not permitted [ 116.895625][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.895808][ T6634] tipc: Enabling not permitted [ 116.895828][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.895989][ T6634] tipc: Enabling not permitted [ 116.896008][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.896166][ T6634] tipc: Enabling not permitted [ 116.896187][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.896356][ T6634] tipc: Enabling not permitted [ 116.896386][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.896738][ T6634] tipc: Enabling not permitted [ 116.896760][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.896925][ T6634] tipc: Enabling not permitted [ 116.896946][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.897121][ T6634] tipc: Enabling not permitted [ 116.897141][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.897303][ T6634] tipc: Enabling not permitted [ 116.897325][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.897497][ T6634] tipc: Enabling not permitted [ 116.897519][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.897874][ T6634] tipc: Enabling not permitted [ 116.897897][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.898100][ T6634] tipc: Enabling not permitted [ 116.898117][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.898276][ T6634] tipc: Enabling not permitted [ 116.898295][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.898462][ T6634] tipc: Enabling not permitted [ 116.898483][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.898652][ T6634] tipc: Enabling not permitted [ 116.898673][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.899026][ T6634] tipc: Enabling not permitted [ 116.899047][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.899207][ T6634] tipc: Enabling not permitted [ 116.899227][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.899392][ T6634] tipc: Enabling not permitted [ 116.899411][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.899573][ T6634] tipc: Enabling not permitted [ 116.899592][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.899749][ T6634] tipc: Enabling not permitted [ 116.899770][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.899913][ T6634] tipc: Enabling not permitted [ 116.900096][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.900272][ T6634] tipc: Enabling not permitted [ 116.900293][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.900457][ T6634] tipc: Enabling not permitted [ 116.900477][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.900635][ T6634] tipc: Enabling not permitted [ 116.900654][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.900933][ T6634] tipc: Enabling not permitted [ 116.900953][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.901276][ T6634] tipc: Enabling not permitted [ 116.901298][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.901468][ T6634] tipc: Enabling not permitted [ 116.901488][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.901643][ T6634] tipc: Enabling not permitted [ 116.901662][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.901828][ T6634] tipc: Enabling not permitted [ 116.901847][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.902004][ T6634] tipc: Enabling not permitted [ 116.902023][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.902185][ T6634] tipc: Enabling not permitted [ 116.902206][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.902570][ T6634] tipc: Enabling not permitted [ 116.902592][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.902774][ T6634] tipc: Enabling not permitted [ 116.902794][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.902957][ T6634] tipc: Enabling not permitted [ 116.902977][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.903136][ T6634] tipc: Enabling not permitted [ 116.903155][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.903320][ T6634] tipc: Enabling not permitted [ 116.903340][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.903726][ T6634] tipc: Enabling not permitted [ 116.903748][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.903913][ T6634] tipc: Enabling not permitted [ 116.903933][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 116.904092][ T6634] tipc: Enabling not permitted [ 117.185449][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.185788][ T6634] tipc: Enabling not permitted [ 117.185809][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.186034][ T6634] tipc: Enabling not permitted [ 117.186054][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.186214][ T6634] tipc: Enabling not permitted [ 117.186233][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.186419][ T6634] tipc: Enabling not permitted [ 117.186439][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.186597][ T6634] tipc: Enabling not permitted [ 117.186619][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.186810][ T6634] tipc: Enabling not permitted [ 117.186830][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.187002][ T6634] tipc: Enabling not permitted [ 117.187026][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.187232][ T6634] tipc: Enabling not permitted [ 117.187255][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.187492][ T6634] tipc: Enabling not permitted [ 117.187516][ T6634] tipc: Enabling of bearer rejected, failed to enable media [ 117.905136][ T5705] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 118.045939][ T6656] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 118.051139][ T6656] syzkaller1: Refused to change device type [ 118.053050][ T5705] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.057754][ T5705] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.063123][ T5705] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.067341][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 118.073273][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 118.080087][ T5705] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.085304][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.089308][ T5705] usb 8-1: Product: syz [ 118.091684][ T5705] usb 8-1: Manufacturer: syz [ 118.098652][ T5705] cdc_wdm 8-1:1.0: skipping garbage [ 118.104829][ T5705] cdc_wdm 8-1:1.0: skipping garbage [ 118.108854][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 118.108868][ T40] audit: type=1326 audit(1776856444.246:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.134225][ T5705] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 118.139030][ T5705] cdc_wdm 8-1:1.0: Unknown control protocol [ 118.149780][ T40] audit: type=1326 audit(1776856444.246:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.176493][ T40] audit: type=1326 audit(1776856444.266:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.197521][ T40] audit: type=1326 audit(1776856444.266:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.221607][ T40] audit: type=1326 audit(1776856444.266:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.232598][ T40] audit: type=1326 audit(1776856444.266:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.243105][ T40] audit: type=1326 audit(1776856444.266:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.253598][ T40] audit: type=1326 audit(1776856444.266:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.264471][ T40] audit: type=1326 audit(1776856444.266:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.274859][ T40] audit: type=1326 audit(1776856444.356:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.2.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 118.303699][ T5705] usb 8-1: USB disconnect, device number 8 [ 118.496167][ T6661] mmap: syz.0.164 (6661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.716328][ T6665] kAFS: unable to lookup cell 'mS²jĖ”8' [ 118.761016][ T5705] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 118.912783][ T5705] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.920761][ T5705] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 118.929000][ T5705] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.936367][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 118.952123][ T5705] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 118.961264][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 118.965172][ T5705] usb 8-1: Product: syz [ 118.967127][ T5705] usb 8-1: Manufacturer: syz [ 118.980170][ T5705] cdc_wdm 8-1:1.0: skipping garbage [ 119.002114][ T5705] cdc_wdm 8-1:1.0: skipping garbage [ 119.006165][ T5705] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 119.009026][ T5705] cdc_wdm 8-1:1.0: Unknown control protocol [ 119.560942][ T29] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.741118][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 119.743662][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 7 bytes [ 119.745501][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.750115][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.753328][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.761578][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 119.764659][ T29] usb 6-1: config 0 descriptor?? [ 119.921018][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 119.926298][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.931733][ T54] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.935506][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.942115][ T54] usb 7-1: config 0 descriptor?? [ 119.974129][ T29] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 120.050981][ T50] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 120.155847][ T54] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 120.176325][ T29] usb 6-1: USB disconnect, device number 7 [ 120.201037][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 120.205005][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.209110][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.213536][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.218814][ T50] usb 5-1: config 0 descriptor?? [ 120.361778][ T29] usb 7-1: USB disconnect, device number 3 [ 120.427253][ T50] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 120.627516][ T29] usb 5-1: USB disconnect, device number 8 [ 120.776021][ T24] usb 8-1: USB disconnect, device number 9 [ 121.161302][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 121.214497][ T6696] : renamed from bond_slave_0 (while UP) [ 121.340937][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 121.344593][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 121.348033][ T24] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.351916][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.356242][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.359449][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.365063][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.369178][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.376592][ T24] usbtmc 8-1:16.0: bulk endpoints not found [ 121.627307][ T6702] kAFS: unable to lookup cell 'mS²jĖ”8' [ 121.889124][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 121.892190][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 122.841143][ T6042] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 122.994222][ T6042] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.999238][ T6042] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.005615][ T6042] usb 6-1: config 1 interface 0 has no altsetting 0 [ 123.013906][ T6042] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.40 [ 123.021779][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.025493][ T6042] usb 6-1: Product: syz [ 123.028202][ T6042] usb 6-1: Manufacturer: syz [ 123.031141][ T6042] usb 6-1: SerialNumber: syz [ 123.809585][ T24] usb 8-1: USB disconnect, device number 10 [ 124.066054][ T6748] kAFS: unable to lookup cell 'mS²jĖ”8' [ 125.631117][ T6042] usbhid 6-1:1.0: can't add hid device: -71 [ 125.682198][ T6042] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 125.699228][ T6042] usb 6-1: USB disconnect, device number 8 [ 125.737050][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 126.031005][ T6042] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.193560][ T6042] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.199172][ T6042] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.203196][ T6042] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.206948][ T6042] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.210594][ T6042] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.217558][ T6042] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.220760][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.223995][ T6042] usb 6-1: Product: syz [ 126.225712][ T6042] usb 6-1: Manufacturer: syz [ 126.247974][ T6042] cdc_wdm 6-1:1.0: skipping garbage [ 126.250237][ T6042] cdc_wdm 6-1:1.0: skipping garbage [ 126.259651][ T6042] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 126.262692][ T6042] cdc_wdm 6-1:1.0: Unknown control protocol [ 126.456035][ T6042] usb 6-1: USB disconnect, device number 9 [ 126.930929][ T6042] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 127.119237][ T6042] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.124690][ T6042] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.129780][ T6042] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.133360][ T6042] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 127.140999][ T6042] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.144837][ T6042] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.147910][ T6042] usb 6-1: Product: syz [ 127.149635][ T6042] usb 6-1: Manufacturer: syz [ 127.173972][ T6042] cdc_wdm 6-1:1.0: skipping garbage [ 127.176595][ T6042] cdc_wdm 6-1:1.0: skipping garbage [ 127.189997][ T6042] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 127.195586][ T6042] cdc_wdm 6-1:1.0: Unknown control protocol [ 127.661119][ T6040] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 127.731249][ T6020] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.800979][ T1002] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 127.811030][ T6040] usb 8-1: Using ep0 maxpacket: 8 [ 127.814646][ T6040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.819365][ T6040] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.823117][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.828713][ T6040] usb 8-1: config 0 descriptor?? [ 127.881128][ T6020] usb 5-1: Using ep0 maxpacket: 8 [ 127.884563][ T6020] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.888480][ T6020] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.892365][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.896547][ T6020] usb 5-1: config 0 descriptor?? [ 127.922866][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 7 bytes [ 127.952402][ T1002] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.955503][ T1002] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.958751][ T1002] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.962236][ T1002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 127.967041][ T1002] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 127.973993][ T1002] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.978355][ T1002] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.982000][ T1002] usb 7-1: Product: syz [ 127.983802][ T1002] usb 7-1: Manufacturer: syz [ 127.991794][ T1002] cdc_wdm 7-1:1.0: skipping garbage [ 127.993792][ T1002] cdc_wdm 7-1:1.0: skipping garbage [ 127.996662][ T1002] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 127.998760][ T1002] cdc_wdm 7-1:1.0: Unknown control protocol [ 128.038638][ T6040] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 128.107700][ T6020] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior3 [ 128.199989][ T6020] usb 7-1: USB disconnect, device number 4 [ 128.238951][ T6040] usb 8-1: USB disconnect, device number 11 [ 128.309005][ T1002] usb 5-1: USB disconnect, device number 9 [ 128.641065][ T6020] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 128.802453][ T6020] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.805295][ T6020] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.808736][ T6020] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.812504][ T6020] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 128.818800][ T6020] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.821848][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.824402][ T6020] usb 7-1: Product: syz [ 128.825835][ T6020] usb 7-1: Manufacturer: syz [ 128.832491][ T6020] cdc_wdm 7-1:1.0: skipping garbage [ 128.834278][ T6020] cdc_wdm 7-1:1.0: skipping garbage [ 128.838398][ T6020] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 128.840564][ T6020] cdc_wdm 7-1:1.0: Unknown control protocol [ 128.943473][ T24] usb 6-1: USB disconnect, device number 10 [ 129.217410][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 129.222142][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 129.452061][ T6042] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.631165][ T6042] usb 5-1: Using ep0 maxpacket: 8 [ 129.644895][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.648938][ T6042] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.652836][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.688064][ T6042] usb 5-1: config 0 descriptor?? [ 129.907093][ T6042] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 130.116785][ T50] usb 5-1: USB disconnect, device number 10 [ 130.627209][ T24] usb 7-1: USB disconnect, device number 5 [ 131.351039][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.530909][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 131.534506][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.539027][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.542774][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.548125][ T24] usb 5-1: config 0 descriptor?? [ 131.657258][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.664785][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.667790][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.670575][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.673081][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.675437][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.683187][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.691117][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.693591][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.696126][ T39] hid-generic 0080:0008:0000.0003: unknown main item tag 0x0 [ 131.705249][ T39] hid-generic 0080:0008:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 131.766632][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.839321][ T6839] fido_id[6839]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 131.851659][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 131.971647][ T39] usb 5-1: USB disconnect, device number 11 [ 132.591106][ T6020] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 132.741063][ T6020] usb 8-1: Using ep0 maxpacket: 8 [ 132.747242][ T6020] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 132.750444][ T6020] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.754378][ T6020] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.757791][ T6020] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.761524][ T6020] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.766012][ T6020] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.769293][ T6020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.778157][ T6020] usbtmc 8-1:16.0: bulk endpoints not found [ 133.062537][ T6861] Cannot find add_set index 0 as target [ 133.071127][ T1002] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 133.240925][ T1002] usb 6-1: Using ep0 maxpacket: 32 [ 133.244664][ T1002] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 133.248415][ T1002] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 133.252518][ T1002] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 133.256670][ T1002] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 133.260454][ T1002] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 133.267016][ T1002] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 133.270409][ T1002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.274045][ T1002] usb 6-1: Product: syz [ 133.275617][ T1002] usb 6-1: Manufacturer: syz [ 133.277163][ T1002] usb 6-1: SerialNumber: syz [ 133.281349][ T6857] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.287256][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 133.293738][ T1002] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input6 [ 133.511028][ T1002] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 133.513706][ T1002] (id 0x00) [ 133.576302][ T1002] rc_core: IR keymap rc-imon-pad not found [ 133.578633][ T1002] Registered IR keymap rc-empty [ 133.580573][ T1002] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 133.585777][ T1002] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 133.626441][ T6868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.736744][ T1002] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 133.749725][ T1002] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input7 [ 133.768127][ T1002] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:11> initialized [ 133.997242][ T6876] overlayfs: failed to resolve './file1': -2 [ 134.241018][ T1002] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 134.278102][ T6877] imon:send_packet: task interrupted [ 134.281161][ T6877] imon:send_packet: packet tx failed (-512) [ 134.285650][ T6877] imon:vfd_write: send packet #1 failed [ 134.297833][ T6877] imon:send_packet: task interrupted [ 134.300334][ T6877] imon:send_packet: packet tx failed (-512) [ 134.308462][ T6877] imon:vfd_write: send packet #0 failed [ 134.312206][ T6877] imon:send_packet: packet tx failed (-32) [ 134.317669][ T6877] imon:vfd_write: send packet #0 failed [ 134.401089][ T1002] usb 5-1: Using ep0 maxpacket: 8 [ 134.405590][ T1002] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 134.409601][ T1002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.414207][ T1002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.419124][ T1002] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 134.425698][ T1002] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 134.430134][ T1002] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.436057][ T1002] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.440291][ T1002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.454700][ T1002] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 134.473376][ T39] usb 6-1: USB disconnect, device number 11 [ 135.090978][ T1002] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 135.260899][ T1002] usb 7-1: Using ep0 maxpacket: 8 [ 135.266140][ T1002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.271766][ T1002] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.275622][ T1002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.282609][ T1002] usb 7-1: config 0 descriptor?? [ 135.354990][ T5705] usb 8-1: USB disconnect, device number 12 [ 135.497336][ T1002] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.697755][ T1002] usb 7-1: USB disconnect, device number 6 [ 135.829621][ T6888] kAFS: unable to lookup cell 'mS²jĖ”8' [ 136.039903][ T6890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.238'. [ 136.050445][ T6890] process 'syz.1.238' launched './file0' with NULL argv: empty string added [ 136.201120][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 136.205327][ T6892] netlink: 'syz.1.239': attribute type 25 has an invalid length. [ 136.209307][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.239'. [ 136.379293][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.240'. [ 136.383661][ T6895] netlink: 'syz.3.240': attribute type 25 has an invalid length. [ 136.387601][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 136.688588][ T6903] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 136.986550][ T1002] usb 5-1: USB disconnect, device number 12 [ 137.385507][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 137.385524][ T40] audit: type=1326 audit(1776856463.526:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.395287][ T40] audit: type=1326 audit(1776856463.526:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.402833][ T40] audit: type=1326 audit(1776856463.526:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.415765][ T40] audit: type=1326 audit(1776856463.526:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.425986][ T40] audit: type=1326 audit(1776856463.526:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.434435][ T40] audit: type=1326 audit(1776856463.526:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.443548][ T40] audit: type=1326 audit(1776856463.556:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.451717][ T40] audit: type=1326 audit(1776856463.556:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.459019][ T40] audit: type=1326 audit(1776856463.556:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.466395][ T40] audit: type=1326 audit(1776856463.556:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.0.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefcc code=0x7ffc0000 [ 137.636785][ T6919] IPVS: ip_vs_add_dest(): server weight less than zero [ 138.041007][ T6020] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 138.191059][ T6020] usb 6-1: Using ep0 maxpacket: 8 [ 138.195108][ T6020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.199535][ T6020] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.203272][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.208978][ T6020] usb 6-1: config 0 descriptor?? [ 138.278338][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.281618][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.444675][ T6020] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.521156][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 138.644741][ T6020] usb 6-1: USB disconnect, device number 12 [ 138.671146][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 138.674599][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.678913][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.682867][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.692045][ T24] usb 5-1: config 0 descriptor?? [ 138.890933][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 138.903340][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.962613][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 138.967201][ T6933] netlink: 'syz.3.251': attribute type 25 has an invalid length. [ 138.971418][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 139.051674][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 139.056645][ T39] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 139.061484][ T39] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.066083][ T39] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.070712][ T39] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 139.075261][ T39] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 139.079672][ T39] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.085623][ T39] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.089935][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.106801][ T39] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 139.111882][ T24] usb 5-1: USB disconnect, device number 13 [ 139.781028][ T6020] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 139.958452][ T6020] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.966461][ T6020] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.971896][ T6020] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.983770][ T6020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.988047][ T6020] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.993462][ T6020] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.996604][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.999091][ T6020] usb 6-1: Product: syz [ 140.000592][ T6020] usb 6-1: Manufacturer: syz [ 140.006247][ T6020] cdc_wdm 6-1:1.0: skipping garbage [ 140.008117][ T6020] cdc_wdm 6-1:1.0: skipping garbage [ 140.011822][ T6020] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 140.013682][ T6020] cdc_wdm 6-1:1.0: Unknown control protocol [ 140.171056][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 140.181160][ T6956] netlink: 'syz.3.257': attribute type 25 has an invalid length. [ 140.184060][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 140.216580][ T24] usb 6-1: USB disconnect, device number 13 [ 140.660986][ T24] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 140.825976][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 140.831352][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 140.843009][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 140.852705][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 140.865086][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.869858][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.877748][ T24] usb 6-1: Product: syz [ 140.879705][ T24] usb 6-1: Manufacturer: syz [ 140.890177][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 140.892795][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 140.897135][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 140.899928][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 141.510922][ T50] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 141.636460][ T24] usb 7-1: USB disconnect, device number 7 [ 141.661001][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 141.668628][ T50] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 141.676586][ T50] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 141.686889][ T50] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 141.695462][ T50] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 141.711657][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 141.716293][ T50] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.719329][ T50] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.731052][ T50] usb 8-1: Product: syz [ 141.732891][ T50] usb 8-1: Manufacturer: syz [ 141.735116][ T50] usb 8-1: SerialNumber: syz [ 141.782514][ T50] usb 8-1: config 0 descriptor?? [ 141.787684][ T50] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.803220][ T50] ldusb 8-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 141.863133][ T24] usb 6-1: USB disconnect, device number 14 [ 142.055981][ T24] usb 8-1: USB disconnect, device number 13 [ 142.107980][ T24] ldusb 8-1:0.0: LD USB Device #1 now disconnected [ 142.130611][ T6972] kAFS: unable to lookup cell 'mS²jĖ”8' [ 142.435299][ T24] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 142.597313][ T24] usb 8-1: No LPM exit latency info found, disabling LPM. [ 142.603343][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 142.610101][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 142.858293][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.988732][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 143.249523][ T6974] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.252311][ T6974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.261357][ T6974] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 143.265670][ T6974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.267782][ T6974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.375052][ T6974] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 143.380963][ T6974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.384024][ T6974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.387885][ T6974] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 143.391250][ T6974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.393333][ T6974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.399916][ T6974] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.742895][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 143.747037][ T6988] netlink: 'syz.1.265': attribute type 25 has an invalid length. [ 143.750520][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 144.316794][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.333959][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.343539][ T6995] kAFS: unable to lookup cell 'mS²jĖ”8' [ 144.364681][ T24] usb 8-1: can't set config #1, error -71 [ 144.381099][ T24] usb 8-1: USB disconnect, device number 14 [ 144.582514][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.032309][ T7012] netlink: 'syz.0.273': attribute type 2 has an invalid length. [ 145.048383][ T7012] ‚#{6c: entered promiscuous mode [ 145.053193][ T7012] netlink: 'syz.0.273': attribute type 2 has an invalid length. [ 145.055815][ T7012] ‚#{6c: left promiscuous mode [ 145.220994][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 145.231580][ T7016] FAULT_INJECTION: forcing a failure. [ 145.231580][ T7016] name failslab, interval 1, probability 0, space 0, times 1 [ 145.237658][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.274 Not tainted syzkaller #0 PREEMPT(full) [ 145.237675][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.237682][ T7016] Call Trace: [ 145.237686][ T7016] [ 145.237691][ T7016] dump_stack_lvl+0x100/0x190 [ 145.237724][ T7016] should_fail_ex.cold+0x5/0xa [ 145.237743][ T7016] should_failslab+0xc2/0x120 [ 145.237758][ T7016] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 145.237775][ T7016] ? alloc_vmap_area+0x640/0x2b70 [ 145.237789][ T7016] alloc_vmap_area+0x640/0x2b70 [ 145.237807][ T7016] ? __pfx_alloc_vmap_area+0x10/0x10 [ 145.237823][ T7016] __get_vm_area_node+0x1ca/0x330 [ 145.237838][ T7016] __vmalloc_node_range_noprof+0x228/0x1630 [ 145.237852][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.237877][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.237893][ T7016] ? rcu_is_watching+0x12/0xc0 [ 145.237909][ T7016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.237924][ T7016] ? __lock_acquire+0x4a5/0x2630 [ 145.237936][ T7016] ? __pfx___mutex_lock+0x10/0x10 [ 145.237959][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.237973][ T7016] __vmalloc_node_noprof+0xad/0xf0 [ 145.237988][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.238004][ T7016] dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.238020][ T7016] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.238036][ T7016] dvb_demux_do_ioctl+0xe64/0x1200 [ 145.238055][ T7016] dvb_usercopy+0x167/0x340 [ 145.238066][ T7016] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 145.238081][ T7016] ? __pfx_dvb_usercopy+0x10/0x10 [ 145.238099][ T7016] ? __fget_files+0x21f/0x3d0 [ 145.238115][ T7016] dvb_demux_ioctl+0x29/0x40 [ 145.238128][ T7016] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 145.238141][ T7016] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 145.238154][ T7016] __do_fast_syscall_32+0xe7/0x950 [ 145.238164][ T7016] ? lockdep_hardirqs_on+0x78/0x100 [ 145.238181][ T7016] do_fast_syscall_32+0x32/0x70 [ 145.238192][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.238211][ T7016] RIP: 0023:0xf6fdefcc [ 145.238224][ T7016] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 145.238245][ T7016] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 145.238335][ T7016] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000403c6f2b [ 145.238346][ T7016] RDX: 0000000080001e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.238355][ T7016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.238364][ T7016] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.238370][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.238385][ T7016] [ 145.238941][ T7016] syz.0.274: vmalloc error: size 8192, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 145.310959][ T5962] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.366101][ T7016] ,cpuset=/,mems_allowed=0-1 [ 145.368603][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.274 Not tainted syzkaller #0 PREEMPT(full) [ 145.368630][ T7016] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.368638][ T7016] Call Trace: [ 145.368642][ T7016] [ 145.368647][ T7016] dump_stack_lvl+0x100/0x190 [ 145.368666][ T7016] warn_alloc.cold+0x95/0x1c1 [ 145.368679][ T7016] ? __pfx_warn_alloc+0x10/0x10 [ 145.368698][ T7016] ? lockdep_hardirqs_on+0x78/0x100 [ 145.368719][ T7016] ? __get_vm_area_node+0x2c5/0x330 [ 145.368736][ T7016] ? __get_vm_area_node+0x208/0x330 [ 145.368753][ T7016] __vmalloc_node_range_noprof+0xccd/0x1630 [ 145.368774][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.368795][ T7016] ? rcu_is_watching+0x12/0xc0 [ 145.368812][ T7016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.368829][ T7016] ? __lock_acquire+0x4a5/0x2630 [ 145.368843][ T7016] ? __pfx___mutex_lock+0x10/0x10 [ 145.368862][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.368878][ T7016] __vmalloc_node_noprof+0xad/0xf0 [ 145.368892][ T7016] ? dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.368910][ T7016] dvb_dmxdev_filter_start+0x914/0xdd0 [ 145.368934][ T7016] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.368951][ T7016] dvb_demux_do_ioctl+0xe64/0x1200 [ 145.368971][ T7016] dvb_usercopy+0x167/0x340 [ 145.368985][ T7016] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 145.369001][ T7016] ? __pfx_dvb_usercopy+0x10/0x10 [ 145.369020][ T7016] ? __fget_files+0x21f/0x3d0 [ 145.369037][ T7016] dvb_demux_ioctl+0x29/0x40 [ 145.369051][ T7016] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 145.369064][ T7016] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 145.369079][ T7016] __do_fast_syscall_32+0xe7/0x950 [ 145.369089][ T7016] ? lockdep_hardirqs_on+0x78/0x100 [ 145.369107][ T7016] do_fast_syscall_32+0x32/0x70 [ 145.369118][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.369134][ T7016] RIP: 0023:0xf6fdefcc [ 145.369155][ T7016] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 145.369167][ T7016] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 145.369180][ T7016] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000403c6f2b [ 145.369188][ T7016] RDX: 0000000080001e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.369194][ T7016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.369201][ T7016] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 145.369207][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.369222][ T7016] [ 145.369358][ T7016] Mem-Info: [ 145.458815][ T7016] active_anon:5984 inactive_anon:37 isolated_anon:0 [ 145.458815][ T7016] active_file:24701 inactive_file:37069 isolated_file:0 [ 145.458815][ T7016] unevictable:1768 dirty:361 writeback:0 [ 145.458815][ T7016] slab_reclaimable:6009 slab_unreclaimable:54525 [ 145.458815][ T7016] mapped:24109 shmem:2861 pagetables:1104 [ 145.458815][ T7016] sec_pagetables:301 bounce:0 [ 145.458815][ T7016] kernel_misc_reclaimable:0 [ 145.458815][ T7016] free:31614 free_pcp:18226 free_cma:0 [ 145.475525][ T7016] Node 0 active_anon:276kB inactive_anon:124kB active_file:2376kB inactive_file:100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:24kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8716kB pagetables:1520kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 145.482283][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.482659][ T5313] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.492249][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 145.492546][ T7016] Node 1 active_anon:22260kB inactive_anon:24kB active_file:96428kB inactive_file:148176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96392kB dirty:1420kB writeback:0kB shmem:6108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4328kB pagetables:2896kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 145.507897][ T7016] Node 0 DMA free:2076kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:32kB free_cma:0kB [ 145.521504][ T7016] lowmem_reserve[]: 0 283 283 283 283 [ 145.524615][ T7016] Node 0 DMA32 free:16260kB boost:0kB min:13048kB low:16308kB high:19568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:276kB inactive_anon:124kB active_file:2376kB inactive_file:100kB unevictable:3536kB writepending:24kB zspages:0kB present:1032196kB managed:290632kB mlocked:0kB bounce:0kB free_pcp:13232kB local_pcp:3432kB free_cma:0kB [ 145.539218][ T24] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 145.539585][ T7016] lowmem_reserve[]: 0 0 0 0 0 [ 145.544660][ T7016] Node 1 DMA32 free:108120kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22260kB inactive_anon:24kB active_file:96428kB inactive_file:148176kB unevictable:3536kB writepending:1420kB zspages:3524kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:60468kB local_pcp:23768kB free_cma:0kB [ 145.547263][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 145.552480][ T7019] xt_l2tp: unknown flags: 51 [ 145.558728][ T7016] lowmem_reserve[]: 0 0 0 0 0 [ 145.564863][ T7016] Node 0 DMA: 39*4kB (UM) 8*8kB (UM) 6*16kB (UM) 5*32kB (UM) 3*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2076kB [ 145.570529][ T7016] Node 0 DMA32: 391*4kB (UE) 35*8kB (UME) 147*16kB (UME) 25*32kB (UME) 32*64kB (UME) 24*128kB (UME) 14*256kB (UME) 3*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 16260kB [ 145.577817][ T24] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 145.578262][ T7016] Node 1 [ 145.581818][ T24] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 145.581842][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 145.584442][ T7016] DMA32: 281*4kB (UME) 158*8kB (UME) 202*16kB (UME) 256*32kB (UME) 87*64kB (UME) 80*128kB (UME) 33*256kB (UME) 10*512kB (UME) 8*1024kB (UM) 8*2048kB (UM) 11*4096kB (M) = 112820kB [ 145.598280][ T7016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.605779][ T7016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.606812][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 145.608957][ T7016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 145.615933][ T7016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 145.619009][ T7016] 65212 total pagecache pages [ 145.620582][ T7016] 1034 pages in swap cache [ 145.620900][ T24] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 145.623217][ T7016] Free swap = 112792kB [ 145.625856][ T24] usb 8-1: Product: syz [ 145.627144][ T7016] Total swap = 124996kB [ 145.629875][ T7016] 524155 pages RAM [ 145.630979][ T24] usb 8-1: Manufacturer: syz [ 145.631768][ T7016] 0 pages HighMem/MovableOnly [ 145.632814][ T24] usb 8-1: SerialNumber: syz [ 145.636574][ T7016] 210604 pages reserved [ 145.638599][ T7016] 0 pages cma reserved [ 145.642848][ T24] usb 8-1: config 0 descriptor?? [ 145.647808][ T24] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 145.653886][ T24] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 145.857037][ T6040] usb 8-1: USB disconnect, device number 15 [ 145.862662][ T6040] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 146.433982][ T7037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 146.436273][ T7037] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 146.456748][ T7037] vhci_hcd vhci_hcd.0: Device attached [ 146.549328][ T7040] FAULT_INJECTION: forcing a failure. [ 146.549328][ T7040] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.563880][ T7040] CPU: 2 UID: 0 PID: 7040 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(full) [ 146.563907][ T7040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.563917][ T7040] Call Trace: [ 146.563923][ T7040] [ 146.563929][ T7040] dump_stack_lvl+0x100/0x190 [ 146.563956][ T7040] should_fail_ex.cold+0x5/0xa [ 146.563985][ T7040] _copy_to_user+0x32/0xd0 [ 146.564015][ T7040] simple_read_from_buffer+0xcb/0x170 [ 146.564036][ T7040] proc_fail_nth_read+0x1af/0x230 [ 146.564062][ T7040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.564087][ T7040] ? rw_verify_area+0xce/0x6d0 [ 146.564120][ T7040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.564143][ T7040] vfs_read+0x1e4/0xb30 [ 146.564163][ T7040] ? __pfx_vfs_read+0x10/0x10 [ 146.564178][ T7040] ? find_held_lock+0x2b/0x80 [ 146.564200][ T7040] ? __fget_files+0x215/0x3d0 [ 146.564222][ T7040] ? __fget_files+0x21f/0x3d0 [ 146.564245][ T7040] ksys_read+0x12a/0x250 [ 146.564262][ T7040] ? __pfx_ksys_read+0x10/0x10 [ 146.564278][ T7040] ? rcu_is_watching+0x12/0xc0 [ 146.564298][ T7040] ? rcu_is_watching+0x12/0xc0 [ 146.564319][ T7040] do_int80_emulation+0x141/0x700 [ 146.564339][ T7040] asm_int80_emulation+0x1a/0x20 [ 146.564356][ T7040] RIP: 0023:0xf7125cab [ 146.564369][ T7040] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 146.564384][ T7040] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 146.564400][ T7040] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53e65d0 [ 146.564410][ T7040] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 146.564419][ T7040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.564428][ T7040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 146.564438][ T7040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.564459][ T7040] [ 146.574881][ T7043] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.657766][ T7043] block device autoloading is deprecated and will be removed. [ 146.661024][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.931250][ T50] usb 38-1: SetAddress Request (2) to port 0 [ 146.933695][ T50] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 146.987841][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 146.992069][ T7053] netlink: 'syz.3.284': attribute type 25 has an invalid length. [ 146.995751][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 147.012297][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 147.171052][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 147.177540][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.184971][ T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.192810][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.202206][ T24] usb 6-1: config 0 descriptor?? [ 147.332623][ T7038] vhci_hcd: connection reset by peer [ 147.337305][ T46] vhci_hcd vhci_hcd.0: stop threads [ 147.339686][ T46] vhci_hcd vhci_hcd.0: release socket [ 147.342364][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 147.415637][ T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 147.471907][ T5962] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.540963][ T5313] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.542973][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.616475][ T6020] usb 6-1: USB disconnect, device number 15 [ 148.318136][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 148.686316][ T7078] ptrace attach of "/syz-executor exec"[7079] was attempted by "/syz-executor exec"[7078] [ 148.740690][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 148.746281][ T5962] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.276583][ T7077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.452614][ T7077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.541152][ T5962] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.621733][ T5313] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.624828][ T5962] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.629239][ T7077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.643818][ T7100] netlink: 'syz.0.295': attribute type 11 has an invalid length. [ 149.650010][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 149.656781][ T7102] netlink: 'syz.1.294': attribute type 25 has an invalid length. [ 149.659635][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 149.681696][ T7100] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 149.753510][ T7077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.874289][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.902849][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 149.926159][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.956165][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.964806][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.191483][ T1002] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 150.330932][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 150.360980][ T1002] usb 5-1: Using ep0 maxpacket: 8 [ 150.365194][ T1002] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.370049][ T1002] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.374766][ T1002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.381063][ T1002] usb 5-1: config 0 descriptor?? [ 150.500977][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 150.508570][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.518723][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 150.528904][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 150.542275][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 150.552372][ T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 150.562209][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.578739][ T9] hub 7-1:1.0: bad descriptor, ignoring hub [ 150.581499][ T9] hub 7-1:1.0: probe with driver hub failed with error -5 [ 150.585137][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 150.587222][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 150.601015][ T1002] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.607893][ T9] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 150.613566][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 150.705837][ T7123] netlink: 'syz.3.301': attribute type 5 has an invalid length. [ 150.761191][ T7126] netlink: 'syz.3.301': attribute type 5 has an invalid length. [ 150.794283][ T1476] usb 5-1: USB disconnect, device number 14 [ 150.794335][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 150.891703][ T6040] usb 7-1: USB disconnect, device number 8 [ 151.251137][ T6040] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 151.300974][ T1002] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 151.402825][ T6040] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.407652][ T6040] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 151.411585][ T6040] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 151.415276][ T6040] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 151.418618][ T6040] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.424537][ T7120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.432204][ T6040] hub 7-1:1.0: bad descriptor, ignoring hub [ 151.438877][ T6040] hub 7-1:1.0: probe with driver hub failed with error -5 [ 151.441832][ T6040] cdc_wdm 7-1:1.0: skipping garbage [ 151.443711][ T6040] cdc_wdm 7-1:1.0: skipping garbage [ 151.447477][ T6040] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 151.450933][ T1002] usb 6-1: Using ep0 maxpacket: 32 [ 151.451815][ T6040] cdc_wdm 7-1:1.0: Unknown control protocol [ 151.454144][ T1002] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 151.459405][ T1002] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 151.463389][ T1002] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 151.466970][ T1002] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 151.471234][ T1002] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 151.478099][ T1002] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 151.481440][ T1002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.484569][ T1002] usb 6-1: Product: syz [ 151.486845][ T1002] usb 6-1: Manufacturer: syz [ 151.488732][ T1002] usb 6-1: SerialNumber: syz [ 151.494428][ T7134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.498667][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 151.503428][ T1002] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input8 [ 151.596063][ T7138] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 151.602946][ T7138] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 151.721162][ T1002] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 151.724646][ T1002] (id 0x00) [ 151.772180][ T1476] usb 7-1: USB disconnect, device number 9 [ 151.813670][ T1002] rc_core: IR keymap rc-imon-pad not found [ 151.928189][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 152.022459][ T50] usb 38-1: device descriptor read/8, error -110 [ 152.255701][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 152.259411][ T7149] netlink: 'syz.2.310': attribute type 25 has an invalid length. [ 152.262687][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 152.418254][ T50] usb usb38-port1: attempt power cycle [ 152.451670][ T1002] Registered IR keymap rc-empty [ 152.907584][ T1002] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 152.998172][ T50] usb usb38-port1: unable to enumerate USB device [ 153.420973][ T6020] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 153.580985][ T6020] usb 8-1: Using ep0 maxpacket: 32 [ 153.586456][ T6020] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 153.590968][ T6020] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 153.596781][ T6020] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 153.602276][ T6020] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 153.607272][ T6020] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 153.615524][ T6020] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 153.619932][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.623953][ T6020] usb 8-1: Product: syz [ 153.626266][ T6020] usb 8-1: Manufacturer: syz [ 153.629007][ T6020] usb 8-1: SerialNumber: syz [ 153.637439][ T7159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.644092][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 153.649462][ T6020] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input10 [ 153.660232][ T1002] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 153.681166][ T1476] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 153.861015][ T1476] usb 7-1: Using ep0 maxpacket: 8 [ 153.862185][ T1002] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 153.866516][ T1476] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 153.868195][ T1002] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input9 [ 153.871014][ T6020] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 153.871162][ T1476] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.871191][ T1476] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.871217][ T1476] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.871243][ T1476] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.871286][ T1476] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.871308][ T1476] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.883504][ T1002] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:16> initialized [ 153.887630][ T6020] (id 0x00) [ 153.951114][ T6020] rc_core: IR keymap rc-imon-pad not found [ 153.953249][ T6020] Registered IR keymap rc-empty [ 153.955063][ T6020] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 153.960014][ T6020] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 154.032735][ T5705] usb 6-1: USB disconnect, device number 16 [ 154.074997][ T6020] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1 [ 154.084222][ T6020] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1/input11 [ 154.093568][ T6020] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:16> initialized [ 154.118946][ T1476] usb 7-1: usb_control_msg returned -32 [ 154.130995][ T1476] usbtmc 7-1:16.0: can't read capabilities [ 154.318795][ T7161] imon:vfd_write: invalid payload size [ 154.324499][ T24] usb 7-1: USB disconnect, device number 10 [ 154.617839][ T7167] imon:send_packet: task interrupted [ 154.620043][ T7167] imon:send_packet: packet tx failed (-512) [ 154.622551][ T7167] imon:vfd_write: send packet #1 failed [ 154.627770][ T7167] imon:send_packet: task interrupted [ 154.629698][ T7167] imon:send_packet: packet tx failed (-512) [ 154.632128][ T7167] imon:vfd_write: send packet #0 failed [ 154.634555][ T7167] imon:send_packet: packet tx failed (-32) [ 154.637805][ T7167] imon:vfd_write: send packet #0 failed [ 154.818295][ T6040] usb 8-1: USB disconnect, device number 16 [ 155.115275][ T7175] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.604491][ T7184] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 155.607271][ T7184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 155.612087][ T7184] vhci_hcd vhci_hcd.0: Device attached [ 155.851002][ T6040] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 155.921598][ T50] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 156.041823][ T7190] kAFS: unable to lookup cell 'mS²jĖ”8' [ 156.070967][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 156.077835][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.086269][ T50] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.093620][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.104589][ T50] usb 7-1: config 0 descriptor?? [ 156.241518][ T7185] vhci_hcd: connection reset by peer [ 156.255459][ T12] vhci_hcd vhci_hcd.3: stop threads [ 156.257848][ T12] vhci_hcd vhci_hcd.3: release socket [ 156.260494][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 156.319527][ T50] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.521014][ T50] usb 7-1: USB disconnect, device number 11 [ 156.579065][ T7194] kAFS: unable to lookup cell 'mS²jĖ”8' [ 156.866921][ T7199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.420759][ T7207] ptrace attach of "/syz-executor exec"[7216] was attempted by "/syz-executor exec"[7207] [ 157.668503][ T7218] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 157.671898][ T7218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.725133][ T7218] vhci_hcd vhci_hcd.0: Device attached [ 157.829531][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 157.837144][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 157.961198][ T50] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 158.237645][ T7220] vhci_hcd: connection reset by peer [ 158.241342][ T220] vhci_hcd vhci_hcd.1: stop threads [ 158.244024][ T220] vhci_hcd vhci_hcd.1: release socket [ 158.249756][ T220] vhci_hcd vhci_hcd.1: disconnect device [ 159.222531][ T7233] batman_adv: batadv0: Adding interface: dummy0 [ 159.227051][ T7233] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.236562][ T7233] batman_adv: batadv0: Interface activated: dummy0 [ 160.775893][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 160.971704][ T7257] new mount options do not match the existing superblock, will be ignored [ 160.977839][ T7257] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 160.991223][ T6040] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 160.996553][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 161.121857][ T7257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.297413][ T7257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.405396][ T7257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.417358][ T7266] kAFS: unable to lookup cell 'mS²jĖ”8' [ 161.562722][ T7257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.769137][ T220] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.783319][ T220] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.850427][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.913850][ T220] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.718636][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 162.740567][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 162.755229][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 162.813723][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 163.081341][ T6020] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 163.141330][ T50] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 163.180969][ T1476] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 163.241011][ T6020] usb 7-1: Using ep0 maxpacket: 32 [ 163.245218][ T6020] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 163.250088][ T6020] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 163.255819][ T6020] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 163.260690][ T6020] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 163.266052][ T6020] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 163.274307][ T6020] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 163.278885][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.282919][ T6020] usb 7-1: Product: syz [ 163.285164][ T6020] usb 7-1: Manufacturer: syz [ 163.287330][ T6020] usb 7-1: SerialNumber: syz [ 163.293208][ T7290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.307088][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 163.314405][ T6020] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input12 [ 163.331055][ T1476] usb 8-1: Using ep0 maxpacket: 8 [ 163.340988][ T1476] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.352004][ T1476] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.357788][ T1476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.366578][ T1476] usb 8-1: config 0 descriptor?? [ 163.520949][ T6020] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 163.525421][ T6020] (id 0x00) [ 163.556007][ T7300] kAFS: unable to lookup cell 'mS²jĖ”8' [ 163.582809][ T1476] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.601050][ T6020] rc_core: IR keymap rc-imon-pad not found [ 163.603777][ T6020] Registered IR keymap rc-empty [ 163.606341][ T6020] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 163.611487][ T6020] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 163.724406][ T6020] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 163.732513][ T6020] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input13 [ 163.741468][ T6020] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:12> initialized [ 163.781968][ T6020] usb 8-1: USB disconnect, device number 17 [ 164.630757][ T7305] wg2 speed is unknown, defaulting to 1000 [ 165.039978][ T50] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 165.203865][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.360'. [ 165.228100][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 165.232190][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.239725][ T50] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.253397][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.275602][ T50] usb 5-1: config 0 descriptor?? [ 165.486408][ T50] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.535604][ T7329] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3947684803 (3947684803 ns) > initial count (3882709461 ns). Using initial count to start timer. [ 165.553588][ T7329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 165.686187][ T50] usb 5-1: USB disconnect, device number 15 [ 165.830999][ T24] usb 7-1: USB disconnect, device number 12 [ 165.969024][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 165.977622][ T7335] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.061195][ T7335] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.146422][ T7335] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.215961][ T7335] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.321269][ T46] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.339612][ T46] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.350392][ T46] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.360544][ T46] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.552572][ T7345] random: crng reseeded on system resumption [ 166.667020][ T6020] hid_parser_main: 33 callbacks suppressed [ 166.667065][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.688033][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.701990][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.722501][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.734842][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.747725][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.759765][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.775567][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.785236][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.799228][ T6020] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 166.867089][ T6020] hid-generic 00A0:0006:0003.0004: hidraw1: HID v0.05 Device [syz1] on syz0 [ 167.871235][ T1002] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 168.031017][ T1002] usb 7-1: Using ep0 maxpacket: 32 [ 168.036939][ T1002] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 168.040492][ T1002] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 168.044707][ T1002] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 168.048429][ T1002] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 168.051883][ T1002] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 168.061034][ T1002] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 168.067047][ T1002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.071330][ T1002] usb 7-1: Product: syz [ 168.073237][ T1002] usb 7-1: Manufacturer: syz [ 168.074724][ T1002] usb 7-1: SerialNumber: syz [ 168.086327][ T7362] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.094114][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 168.108808][ T1002] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input14 [ 168.311041][ T1002] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 168.313697][ T1002] (id 0x00) [ 168.361051][ T1002] rc_core: IR keymap rc-imon-pad not found [ 168.363516][ T1002] Registered IR keymap rc-empty [ 168.365830][ T1002] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 168.372135][ T1002] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 168.378718][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 168.378731][ T40] audit: type=1800 audit(1776856494.516:933): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.371" name="cpuset.memory_pressure_enabled" dev="9p" ino=81002617 res=0 errno=0 [ 168.523169][ T1002] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 168.534201][ T1002] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input15 [ 168.536625][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 168.548776][ T7376] netlink: 'syz.1.375': attribute type 25 has an invalid length. [ 168.554221][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 168.565317][ T1002] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:13> initialized [ 169.716937][ T7389] veth1_to_bond: entered promiscuous mode [ 169.721705][ T7389] batadv0: entered promiscuous mode [ 169.735094][ T7389] veth1_to_bond: left promiscuous mode [ 169.738642][ T7389] batadv0: left promiscuous mode [ 169.870912][ T7389] veth1_to_bond: entered promiscuous mode [ 169.880435][ T7389] batadv0: entered promiscuous mode [ 169.897048][ T7389] veth1_to_bond: left promiscuous mode [ 169.912206][ T7389] batadv0: left promiscuous mode [ 170.013988][ T7389] veth1_to_bond: entered promiscuous mode [ 170.017974][ T7389] batadv0: entered promiscuous mode [ 170.024865][ T7389] veth1_to_bond: left promiscuous mode [ 170.029286][ T7389] batadv0: left promiscuous mode [ 170.065800][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 170.105315][ T7392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.125895][ T7389] veth1_to_bond: entered promiscuous mode [ 170.129694][ T7389] batadv0: entered promiscuous mode [ 170.183255][ T7399] comedi comedi1: ni_at_a2150: I/O port conflict (0xcf7,28) [ 170.189834][ T7389] veth1_to_bond: left promiscuous mode [ 170.192994][ T7389] batadv0: left promiscuous mode [ 170.241063][ T7392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.274688][ T7389] veth1_to_bond: entered promiscuous mode [ 170.280651][ T7389] batadv0: entered promiscuous mode [ 170.287819][ T7389] veth1_to_bond: left promiscuous mode [ 170.291052][ T7389] batadv0: left promiscuous mode [ 170.348363][ T7392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.376480][ T7389] veth1_to_bond: entered promiscuous mode [ 170.379336][ T7389] batadv0: entered promiscuous mode [ 170.387064][ T7389] veth1_to_bond: left promiscuous mode [ 170.390451][ T7389] batadv0: left promiscuous mode [ 170.451768][ T7392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.467518][ T7389] veth1_to_bond: entered promiscuous mode [ 170.470851][ T7389] batadv0: entered promiscuous mode [ 170.474488][ T7389] veth1_to_bond: left promiscuous mode [ 170.477637][ T7389] batadv0: left promiscuous mode [ 170.556266][ T7384] imon:send_packet: task interrupted [ 170.558158][ T7384] imon:send_packet: packet tx failed (-512) [ 170.560088][ T7384] imon:vfd_write: send packet #1 failed [ 170.572185][ T6020] usb 7-1: USB disconnect, device number 13 [ 170.573060][ T1252] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.673796][ T1252] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.676997][ T1252] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.708205][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.824409][ T10] hid (null): unknown global tag 0xc [ 170.828960][ T10] hid (null): unknown global tag 0xc [ 170.831674][ T10] hid (null): invalid report_size -714099056 [ 170.833787][ T10] hid (null): report_id 0 is invalid [ 170.836639][ T10] hid-generic 0000:0004:007F.0005: unknown global tag 0xc [ 170.838909][ T10] hid-generic 0000:0004:007F.0005: item 0 0 1 12 parsing failed [ 170.843370][ T10] hid-generic 0000:0004:007F.0005: probe with driver hid-generic failed with error -22 [ 170.929939][ T7406] kAFS: unable to lookup cell 'mS²jĖ”8' [ 172.070994][ T54] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 172.117460][ T7422] could not allocate digest TFM handle md5 [ 172.221078][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 172.225518][ T54] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 172.230335][ T54] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 172.235596][ T54] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 172.245366][ T54] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 172.254660][ T54] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 172.268032][ T54] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 172.271406][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.274349][ T54] usb 7-1: Product: syz [ 172.275904][ T54] usb 7-1: Manufacturer: syz [ 172.279113][ T54] usb 7-1: SerialNumber: syz [ 172.285704][ T7424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.290288][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 172.296845][ T54] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input16 [ 172.531057][ T54] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 172.537139][ T54] (id 0x00) [ 172.600995][ T1476] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 172.601025][ T54] rc_core: IR keymap rc-imon-pad not found [ 172.607600][ T54] Registered IR keymap rc-empty [ 172.609718][ T54] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 172.614068][ T54] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 172.723189][ T54] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 172.729989][ T54] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input17 [ 172.739325][ T54] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:14> initialized [ 172.751024][ T1476] usb 8-1: Using ep0 maxpacket: 32 [ 172.756256][ T1476] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 172.760615][ T1476] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 172.764905][ T1476] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 172.769060][ T1476] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 172.773780][ T1476] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 172.780697][ T1476] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 172.784037][ T1476] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.786788][ T1476] usb 8-1: Product: syz [ 172.788347][ T1476] usb 8-1: Manufacturer: syz [ 172.790428][ T1476] usb 8-1: SerialNumber: syz [ 172.799598][ T7434] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.814863][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 172.826133][ T1476] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input18 [ 173.040931][ T1476] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 173.044024][ T1476] (id 0x00) [ 173.091453][ T1476] rc_core: IR keymap rc-imon-pad not found [ 173.093952][ T1476] Registered IR keymap rc-empty [ 173.096022][ T1476] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 173.099918][ T1476] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 173.181208][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.232855][ T1476] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1 [ 173.238682][ T1476] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc1/input19 [ 173.248080][ T1476] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:18> initialized [ 173.341314][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 173.344824][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.348823][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.351796][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.356853][ T9] usb 5-1: config 0 descriptor?? [ 173.563701][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior2 [ 173.700930][ T54] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 173.768706][ T6022] usb 5-1: USB disconnect, device number 16 [ 173.850974][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 173.854613][ T54] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 173.857743][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.861401][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.864663][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.869139][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.873876][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.876934][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.085397][ T54] usb 6-1: usb_control_msg returned -32 [ 174.087289][ T54] usbtmc 6-1:16.0: can't read capabilities [ 174.343245][ T54] usb 6-1: USB disconnect, device number 17 [ 174.807314][ T7443] imon:send_packet: task interrupted [ 174.809993][ T7443] imon:send_packet: packet tx failed (-512) [ 174.812765][ T7443] imon:vfd_write: send packet #1 failed [ 174.818719][ T7445] imon:display_open: display port is already open [ 174.829750][ T6022] usb 7-1: USB disconnect, device number 14 [ 174.857497][ T7450] kAFS: unable to lookup cell 'mS²jĖ”8' [ 174.897313][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 175.328315][ T1476] usb 8-1: USB disconnect, device number 18 [ 175.751602][ T1476] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 175.911010][ T1476] usb 8-1: Using ep0 maxpacket: 8 [ 175.922226][ T1476] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.935467][ T1476] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.942986][ T1476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.958844][ T1476] usb 8-1: config 0 descriptor?? [ 176.191369][ T1476] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 176.392391][ T1476] usb 8-1: USB disconnect, device number 19 [ 177.271048][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 177.422686][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 177.432824][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 177.437697][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.446116][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.452434][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.457420][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.467997][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.473265][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.769488][ T9] usb 6-1: usb_control_msg returned -32 [ 177.772555][ T9] usbtmc 6-1:16.0: can't read capabilities [ 177.783522][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 178.180173][ T7491] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 178.180483][ T54] usb 6-1: USB disconnect, device number 18 [ 178.291310][ T7510] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 180.765274][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 181.344071][ T39] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 181.531464][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 181.534537][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.538342][ T39] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 181.541681][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.637837][ T39] usb 6-1: config 0 descriptor?? [ 181.848605][ T39] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 182.048806][ T39] usb 6-1: USB disconnect, device number 19 [ 182.431862][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 183.067031][ T7589] binder: 7584:7589 ioctl 4002f516 0 returned -22 [ 183.848260][ T7597] FAULT_INJECTION: forcing a failure. [ 183.848260][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 183.853186][ T7597] CPU: 3 UID: 0 PID: 7597 Comm: syz.1.438 Not tainted syzkaller #0 PREEMPT(full) [ 183.853202][ T7597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.853210][ T7597] Call Trace: [ 183.853214][ T7597] [ 183.853219][ T7597] dump_stack_lvl+0x100/0x190 [ 183.853236][ T7597] should_fail_ex.cold+0x5/0xa [ 183.853251][ T7597] ? tomoyo_realpath_from_path+0xb6/0x690 [ 183.853265][ T7597] should_failslab+0xc2/0x120 [ 183.853279][ T7597] __kmalloc_noprof+0xe0/0x850 [ 183.853295][ T7597] ? kfree+0x1dd/0x6c0 [ 183.853312][ T7597] tomoyo_realpath_from_path+0xb6/0x690 [ 183.853326][ T7597] tomoyo_path_number_perm+0x23c/0x580 [ 183.853343][ T7597] ? tomoyo_path_number_perm+0x22e/0x580 [ 183.853360][ T7597] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 183.853377][ T7597] ? get_pid_task+0x106/0x250 [ 183.853405][ T7597] ? find_held_lock+0x2b/0x80 [ 183.853418][ T7597] ? __fget_files+0x215/0x3d0 [ 183.853430][ T7597] ? hook_file_ioctl_common+0x149/0x410 [ 183.853447][ T7597] ? __fget_files+0x215/0x3d0 [ 183.853460][ T7597] ? __fget_files+0x21f/0x3d0 [ 183.853474][ T7597] security_file_ioctl_compat+0xd3/0x230 [ 183.853492][ T7597] __ia32_compat_sys_ioctl+0xc2/0x360 [ 183.853505][ T7597] __do_fast_syscall_32+0xe7/0x950 [ 183.853520][ T7597] ? lockdep_hardirqs_on+0x78/0x100 [ 183.853537][ T7597] do_fast_syscall_32+0x32/0x70 [ 183.853547][ T7597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.853561][ T7597] RIP: 0023:0xf7f28fcc [ 183.853570][ T7597] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 183.853580][ T7597] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 183.853592][ T7597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 183.853599][ T7597] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.853605][ T7597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.853611][ T7597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.853617][ T7597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.853629][ T7597] [ 183.853634][ T7597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.940209][ T7597] comedi comedi1: pcmda12: I/O port conflict (0x6,16) [ 184.063967][ T7603] comedi comedi1: pcmda12: I/O port conflict (0x6,16) [ 184.301002][ T54] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 184.810918][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 184.824968][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.828849][ T54] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.832209][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.840425][ T54] usb 8-1: config 0 descriptor?? [ 184.857774][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 184.947673][ T5962] Bluetooth: hci0: Malformed Event: 0x13 [ 185.145144][ T54] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 185.195706][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 185.200556][ T7627] netlink: 173 bytes leftover after parsing attributes in process `syz.1.450'. [ 185.285171][ T39] usb 8-1: USB disconnect, device number 20 [ 185.311007][ T6022] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.455497][ T7636] wg2 speed is unknown, defaulting to 1000 [ 185.464811][ T6022] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 185.467947][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.470649][ T6022] usb 5-1: Product: syz [ 185.473944][ T6022] usb 5-1: Manufacturer: syz [ 185.475411][ T6022] usb 5-1: SerialNumber: syz [ 185.483175][ T6022] usb 5-1: config 0 descriptor?? [ 185.915891][ T39] usb 5-1: USB disconnect, device number 17 [ 186.612592][ T7651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.456'. [ 186.925264][ T7659] could not allocate digest TFM handle md5 [ 187.096008][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 187.161464][ T39] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 187.321059][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 187.325706][ T39] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 187.331512][ T39] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 187.336497][ T39] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 187.343052][ T39] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10140, setting to 1024 [ 187.348506][ T39] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 187.359187][ T39] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 187.368677][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.379771][ T39] usb 6-1: Product: syz [ 187.384069][ T39] usb 6-1: Manufacturer: syz [ 187.388859][ T39] usb 6-1: SerialNumber: syz [ 187.408736][ T7663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.416723][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 187.420382][ T39] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input21 [ 187.539443][ T7674] could not allocate digest TFM handle md5 [ 187.640944][ T39] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 187.643679][ T39] (id 0x00) [ 187.691545][ T39] rc_core: IR keymap rc-imon-pad not found [ 187.693552][ T39] Registered IR keymap rc-empty [ 187.695656][ T39] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 187.699518][ T39] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 187.841614][ T39] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 187.846687][ T39] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input22 [ 187.852731][ T39] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:20> initialized [ 188.272680][ T40] audit: type=1800 audit(1776856514.416:934): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.463" name="/" dev="fuse" ino=1 res=0 errno=0 [ 188.880961][ T50] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 189.031030][ T50] usb 7-1: Using ep0 maxpacket: 8 [ 189.034611][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.038886][ T50] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.043225][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.047846][ T50] usb 7-1: config 0 descriptor?? [ 189.265170][ T50] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 189.469159][ T39] usb 7-1: USB disconnect, device number 15 [ 189.904768][ T7685] imon:send_packet: task interrupted [ 189.907013][ T7685] imon:send_packet: packet tx failed (-512) [ 189.909077][ T7685] imon:vfd_write: send packet #1 failed [ 189.923074][ T1476] usb 6-1: USB disconnect, device number 20 [ 190.586823][ T7709] kAFS: unable to lookup cell 'mS²jĖ”8' [ 190.666061][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 190.669609][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 191.057810][ T7723] binder: 7721:7723 ioctl 4002f516 0 returned -22 [ 191.700466][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 191.705228][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 192.044022][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 192.184720][ T50] hid (null): unknown global tag 0xc [ 192.186856][ T50] hid (null): unknown global tag 0xc [ 192.188931][ T50] hid (null): invalid report_size -714099056 [ 192.192763][ T50] hid (null): report_id 0 is invalid [ 192.198280][ T50] hid-generic 0000:0004:007F.0006: unknown global tag 0xc [ 192.201187][ T50] hid-generic 0000:0004:007F.0006: item 0 0 1 12 parsing failed [ 192.204050][ T50] hid-generic 0000:0004:007F.0006: probe with driver hid-generic failed with error -22 [ 192.345774][ T7739] kAFS: unable to lookup cell 'mS²jĖ”8' [ 192.462627][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 192.466659][ T7742] netlink: 'syz.3.482': attribute type 25 has an invalid length. [ 192.470338][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.482'. [ 192.806833][ T40] audit: type=1326 audit(1776856518.946:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.825572][ T40] audit: type=1326 audit(1776856518.946:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.836888][ T40] audit: type=1326 audit(1776856518.956:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.847069][ T40] audit: type=1326 audit(1776856518.956:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.856495][ T40] audit: type=1326 audit(1776856518.956:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.864835][ T40] audit: type=1326 audit(1776856518.956:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.872194][ T40] audit: type=1326 audit(1776856518.956:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.879975][ T40] audit: type=1326 audit(1776856518.956:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 192.887872][ T40] audit: type=1326 audit(1776856518.956:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7135cab code=0x7ffc0000 [ 193.286680][ T40] kauditd_printk_skb: 167 callbacks suppressed [ 193.286697][ T40] audit: type=1326 audit(1776856519.426:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 193.299032][ T40] audit: type=1326 audit(1776856519.426:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f33ff7 code=0x7ffc0000 [ 193.308260][ T40] audit: type=1326 audit(1776856519.426:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 193.317165][ T40] audit: type=1326 audit(1776856519.436:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 193.326825][ T40] audit: type=1326 audit(1776856519.436:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f33ff7 code=0x7ffc0000 [ 193.336158][ T40] audit: type=1326 audit(1776856519.436:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 193.345704][ T40] audit: type=1326 audit(1776856519.446:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 193.354900][ T40] audit: type=1326 audit(1776856519.446:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f33ff7 code=0x7ffc0000 [ 193.364868][ T40] audit: type=1326 audit(1776856519.446:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 193.373997][ T40] audit: type=1326 audit(1776856519.456:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.483" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f33fcc code=0x7ffc0000 [ 194.008653][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 194.017206][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 194.655348][ T7772] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 195.781347][ T39] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 195.825606][ T7784] kAFS: unable to lookup cell 'mS²jĖ”8' [ 195.931029][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 195.937190][ T39] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 195.942982][ T39] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.947049][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.951270][ T39] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.955396][ T39] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.961935][ T39] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 195.965182][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.051112][ T1476] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 196.175597][ T39] usb 6-1: usb_control_msg returned -32 [ 196.181222][ T39] usbtmc 6-1:16.0: can't read capabilities [ 196.220898][ T1476] usb 7-1: Using ep0 maxpacket: 8 [ 196.224139][ T1476] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.226912][ T1476] usb 7-1: config 0 has no interface number 0 [ 196.229053][ T1476] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.233050][ T1476] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.236227][ T1476] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.250726][ T1476] usb 7-1: config 0 descriptor?? [ 196.260073][ T1476] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 196.480705][ T7781] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 196.480973][ T1476] usb 6-1: USB disconnect, device number 21 [ 197.710972][ T54] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 197.861009][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 197.864566][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.869303][ T54] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.873352][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.879569][ T54] usb 8-1: config 0 descriptor?? [ 197.939062][ T1002] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 198.090993][ T1002] usb 6-1: Using ep0 maxpacket: 8 [ 198.094675][ T1002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.095456][ T54] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 198.099424][ T1002] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.107343][ T1002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.117438][ T1002] usb 6-1: config 0 descriptor?? [ 198.295488][ T5705] usb 8-1: USB disconnect, device number 21 [ 198.330670][ T1002] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 198.534556][ T39] usb 6-1: USB disconnect, device number 22 [ 198.556961][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 198.559987][ T7815] nbd: must specify a size in bytes for the device [ 199.044624][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 199.060371][ T29] usb 7-1: USB disconnect, device number 16 [ 199.165080][ T7821] Cannot find set identified by id 2 to match [ 199.181762][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 199.492623][ T7833] QAT: Invalid ioctl 21531 [ 199.710629][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.713762][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.948330][ T7853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.073455][ T7853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.172451][ T7853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.238694][ T7853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.370477][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.404458][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.422528][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.448719][ T1252] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.789650][ T1476] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.032615][ T1476] usb 5-1: Using ep0 maxpacket: 8 [ 202.069866][ T1476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.082309][ T1476] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.090615][ T1476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.231951][ T7871] nbd1: detected capacity change from 0 to 128 [ 202.299612][ T1476] usb 5-1: config 0 descriptor?? [ 202.351548][ T5966] [ 202.352570][ T5966] ====================================================== [ 202.355292][ T5966] WARNING: possible circular locking dependency detected [ 202.358044][ T5966] syzkaller #0 Not tainted [ 202.360258][ T5966] ------------------------------------------------------ [ 202.363478][ T5966] udevd/5966 is trying to acquire lock: [ 202.365647][ T5966] ffff888029ac3c68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 202.369200][ T5966] [ 202.369200][ T5966] but task is already holding lock: [ 202.372118][ T5966] ffff8880751f51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 202.375458][ T5966] [ 202.375458][ T5966] which lock already depends on the new lock. [ 202.375458][ T5966] [ 202.379938][ T5966] [ 202.379938][ T5966] the existing dependency chain (in reverse order) is: [ 202.383769][ T5966] [ 202.383769][ T5966] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 202.386502][ T5966] __mutex_lock+0x1a4/0x1b10 [ 202.388402][ T5966] nbd_queue_rq+0xba/0x1080 [ 202.390287][ T5966] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 202.392473][ T5966] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 202.394905][ T5966] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 202.397671][ T5966] blk_mq_run_hw_queue+0x23c/0x670 [ 202.400334][ T5966] blk_mq_dispatch_list+0x51d/0x1360 [ 202.402799][ T5966] blk_mq_flush_plug_list+0x130/0x600 [ 202.404884][ T5966] __blk_flush_plug+0x2c4/0x4b0 [ 202.406503][ T5966] blk_finish_plug+0x5c/0xa0 [ 202.408490][ T5966] read_pages+0x5f7/0xdf0 [ 202.410375][ T5966] page_cache_ra_unbounded+0x483/0xa10 [ 202.412618][ T5966] force_page_cache_ra+0x269/0x370 [ 202.414762][ T5966] page_cache_sync_ra+0x1b6/0xb00 [ 202.416879][ T5966] filemap_get_pages+0x6cf/0x2030 [ 202.419170][ T5966] filemap_read+0x3b5/0x10a0 [ 202.421470][ T5966] blkdev_read_iter+0x2c4/0x4f0 [ 202.423792][ T5966] vfs_read+0x825/0xb30 [ 202.425721][ T5966] ksys_read+0x12a/0x250 [ 202.427607][ T5966] do_syscall_64+0x10b/0xf80 [ 202.429583][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.432161][ T5966] [ 202.432161][ T5966] -> #5 (set->srcu){.+.+}-{0:0}: [ 202.435117][ T5966] __synchronize_srcu+0xa2/0x300 [ 202.437566][ T5966] blk_mq_quiesce_queue+0x149/0x1c0 [ 202.439986][ T5966] elevator_switch+0x17b/0x7e0 [ 202.442113][ T5966] elevator_change+0x352/0x530 [ 202.444152][ T5966] elevator_set_default+0x29e/0x360 [ 202.446330][ T5966] blk_register_queue+0x48e/0x630 [ 202.448501][ T5966] __add_disk+0x73f/0xe40 [ 202.450460][ T5966] add_disk_fwnode+0x118/0x5c0 [ 202.452741][ T5966] nbd_dev_add+0x77a/0xb10 [ 202.455030][ T5966] nbd_init+0x291/0x2b0 [ 202.457125][ T5966] do_one_initcall+0x121/0x750 [ 202.459316][ T5966] kernel_init_freeable+0x6ea/0x7b0 [ 202.461497][ T5966] kernel_init+0x1f/0x1e0 [ 202.463384][ T5966] ret_from_fork+0x72b/0xd50 [ 202.465406][ T5966] ret_from_fork_asm+0x1a/0x30 [ 202.467439][ T5966] [ 202.467439][ T5966] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 202.470721][ T5966] __mutex_lock+0x1a4/0x1b10 [ 202.473140][ T5966] elevator_change+0x1bc/0x530 [ 202.475431][ T5966] elevator_set_none+0x92/0xf0 [ 202.477456][ T5966] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 202.479967][ T5966] nbd_start_device+0x1a6/0xbd0 [ 202.482079][ T5966] nbd_genl_connect+0xff2/0x1a40 [ 202.484175][ T5966] genl_family_rcv_msg_doit+0x214/0x300 [ 202.486622][ T5966] genl_rcv_msg+0x560/0x800 [ 202.489173][ T5966] netlink_rcv_skb+0x159/0x420 [ 202.491901][ T5966] genl_rcv+0x28/0x40 [ 202.493953][ T5966] netlink_unicast+0x585/0x850 [ 202.495983][ T5966] netlink_sendmsg+0x8b0/0xda0 [ 202.497988][ T5966] ____sys_sendmsg+0x9e1/0xb70 [ 202.500033][ T5966] ___sys_sendmsg+0x190/0x1e0 [ 202.502006][ T5966] __sys_sendmsg+0x170/0x220 [ 202.503967][ T5966] __do_fast_syscall_32+0xe7/0x950 [ 202.506213][ T5966] do_fast_syscall_32+0x32/0x70 [ 202.508283][ T5966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.511058][ T5966] [ 202.511058][ T5966] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 202.514798][ T5966] blk_alloc_queue+0x610/0x790 [ 202.516927][ T5966] blk_mq_alloc_queue+0x174/0x290 [ 202.519058][ T5966] __blk_mq_alloc_disk+0x29/0x120 [ 202.521159][ T5966] nbd_dev_add+0x492/0xb10 [ 202.523051][ T5966] nbd_init+0x291/0x2b0 [ 202.524983][ T5966] do_one_initcall+0x121/0x750 [ 202.527251][ T5966] kernel_init_freeable+0x6ea/0x7b0 [ 202.529665][ T5966] kernel_init+0x1f/0x1e0 [ 202.531584][ T5966] ret_from_fork+0x72b/0xd50 [ 202.533565][ T5966] ret_from_fork_asm+0x1a/0x30 [ 202.535621][ T5966] [ 202.535621][ T5966] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 202.538380][ T5966] fs_reclaim_acquire+0xc4/0x100 [ 202.540447][ T5966] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 202.543087][ T5966] __alloc_skb+0x140/0x710 [ 202.545514][ T5966] tcp_stream_alloc_skb+0x34/0x660 [ 202.548046][ T5966] tcp_sendmsg_locked+0x13cd/0x4500 [ 202.550316][ T5966] tcp_sendmsg+0x2e/0x50 [ 202.552194][ T5966] inet_sendmsg+0xb9/0x140 [ 202.554101][ T5966] sock_write_iter+0x4ea/0x5a0 [ 202.556171][ T5966] vfs_write+0x6ac/0x1070 [ 202.558041][ T5966] ksys_write+0x1f8/0x250 [ 202.559937][ T5966] do_syscall_64+0x10b/0xf80 [ 202.561956][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.564779][ T5966] [ 202.564779][ T5966] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 202.568222][ T5966] lock_sock_nested+0x41/0xf0 [ 202.570340][ T5966] inet_shutdown+0x67/0x410 [ 202.572317][ T5966] nbd_mark_nsock_dead+0xae/0x5c0 [ 202.574421][ T5966] recv_work+0x5fb/0x8c0 [ 202.576285][ T5966] process_one_work+0xa0e/0x1980 [ 202.578435][ T5966] worker_thread+0x5ef/0xe50 [ 202.580476][ T5966] kthread+0x370/0x450 [ 202.582540][ T5966] ret_from_fork+0x72b/0xd50 [ 202.584836][ T5966] ret_from_fork_asm+0x1a/0x30 [ 202.587051][ T5966] [ 202.587051][ T5966] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 202.589984][ T5966] __lock_acquire+0x14b8/0x2630 [ 202.592054][ T5966] lock_acquire+0x1b1/0x370 [ 202.594010][ T5966] __mutex_lock+0x1a4/0x1b10 [ 202.596031][ T5966] nbd_queue_rq+0x428/0x1080 [ 202.598000][ T5966] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 202.600403][ T5966] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 202.603374][ T5966] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 202.606237][ T5966] blk_mq_run_hw_queue+0x23c/0x670 [ 202.608396][ T5966] blk_mq_dispatch_list+0x51d/0x1360 [ 202.610632][ T5966] blk_mq_flush_plug_list+0x130/0x600 [ 202.612862][ T5966] __blk_flush_plug+0x2c4/0x4b0 [ 202.614925][ T5966] blk_finish_plug+0x5c/0xa0 [ 202.617115][ T5966] read_pages+0x5f7/0xdf0 [ 202.619306][ T5966] page_cache_ra_unbounded+0x483/0xa10 [ 202.621802][ T5966] force_page_cache_ra+0x269/0x370 [ 202.624006][ T5966] page_cache_sync_ra+0x1b6/0xb00 [ 202.626140][ T5966] filemap_get_pages+0x6cf/0x2030 [ 202.628228][ T5966] filemap_read+0x3b5/0x10a0 [ 202.630175][ T5966] blkdev_read_iter+0x2c4/0x4f0 [ 202.632254][ T5966] vfs_read+0x825/0xb30 [ 202.634100][ T5966] ksys_read+0x12a/0x250 [ 202.636243][ T5966] do_syscall_64+0x10b/0xf80 [ 202.638551][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.641443][ T5966] [ 202.641443][ T5966] other info that might help us debug this: [ 202.641443][ T5966] [ 202.645578][ T5966] Chain exists of: [ 202.645578][ T5966] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 202.645578][ T5966] [ 202.650159][ T5966] Possible unsafe locking scenario: [ 202.650159][ T5966] [ 202.652951][ T5966] CPU0 CPU1 [ 202.654942][ T5966] ---- ---- [ 202.656875][ T5966] lock(&cmd->lock); [ 202.658376][ T5966] lock(set->srcu); [ 202.660715][ T5966] lock(&cmd->lock); [ 202.663141][ T5966] lock(&nsock->tx_lock); [ 202.664827][ T5962] block nbd1: Receive control failed (result -32) [ 202.665009][ T5966] [ 202.665009][ T5966] *** DEADLOCK *** [ 202.665009][ T5966] [ 202.665019][ T5966] 4 locks held by udevd/5966: [ 202.665035][ T5966] #0: ffff88801e27b5e8 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2b6/0x4f0 [ 202.677865][ T5966] #1: ffff88801e27b780 (mapping.invalidate_lock){++++}-{4:4}, at: force_page_cache_ra+0x25c/0x370 [ 202.681952][ T5966] #2: ffff888026a5ae98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 202.685420][ T5966] #3: ffff8880751f51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 202.688747][ T5966] [ 202.688747][ T5966] stack backtrace: [ 202.691102][ T5966] CPU: 2 UID: 0 PID: 5966 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 202.691130][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.691142][ T5966] Call Trace: [ 202.691150][ T5966] [ 202.691158][ T5966] dump_stack_lvl+0x100/0x190 [ 202.691182][ T5966] print_circular_bug.cold+0x178/0x1c7 [ 202.691215][ T5966] check_noncircular+0x146/0x160 [ 202.691250][ T5966] __lock_acquire+0x14b8/0x2630 [ 202.691273][ T5966] lock_acquire+0x1b1/0x370 [ 202.691288][ T5966] ? nbd_queue_rq+0x428/0x1080 [ 202.691307][ T5966] ? __pfx___might_resched+0x10/0x10 [ 202.691329][ T5966] ? preempt_schedule_thunk+0x16/0x30 [ 202.691362][ T5966] __mutex_lock+0x1a4/0x1b10 [ 202.691394][ T5966] ? nbd_queue_rq+0x428/0x1080 [ 202.691412][ T5966] ? nbd_queue_rq+0x428/0x1080 [ 202.691429][ T5966] ? do_raw_spin_lock+0x128/0x260 [ 202.691450][ T5966] ? __pfx___mutex_lock+0x10/0x10 [ 202.691479][ T5966] ? rcu_is_watching+0x12/0xc0 [ 202.691505][ T5966] ? find_held_lock+0x2b/0x80 [ 202.691532][ T5966] ? nbd_queue_rq+0x428/0x1080 [ 202.691551][ T5966] nbd_queue_rq+0x428/0x1080 [ 202.691572][ T5966] ? __pfx_nbd_queue_rq+0x10/0x10 [ 202.691595][ T5966] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 202.691623][ T5966] ? sbitmap_get+0x1d7/0x360 [ 202.691648][ T5966] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 202.691669][ T5966] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 202.691690][ T5966] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 202.691719][ T5966] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 202.691753][ T5966] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 202.691784][ T5966] blk_mq_run_hw_queue+0x23c/0x670 [ 202.691812][ T5966] ? blk_mq_run_hw_queue+0x22e/0x670 [ 202.691840][ T5966] blk_mq_dispatch_list+0x51d/0x1360 [ 202.691857][ T5966] ? __pfx___might_resched+0x1/0x10 [ 202.691877][ T5966] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 202.691900][ T5966] blk_mq_flush_plug_list+0x130/0x600 [ 202.691922][ T5966] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 202.691946][ T5966] __blk_flush_plug+0x2c4/0x4b0 [ 202.691984][ T5966] ? __pfx___blk_flush_plug+0x10/0x10 [ 202.692011][ T5966] ? lock_acquire+0x1b1/0x370 [ 202.692030][ T5966] blk_finish_plug+0x5c/0xa0 [ 202.692058][ T5966] read_pages+0x5f7/0xdf0 [ 202.692088][ T5966] ? lru_move_tail+0x1897/0x1930 [ 202.692107][ T5966] ? __pfx_read_pages+0x10/0x10 [ 202.692135][ T5966] ? filemap_alloc_folio_noprof+0x66/0x80 [ 202.692160][ T5966] page_cache_ra_unbounded+0x483/0xa10 [ 202.692192][ T5966] force_page_cache_ra+0x269/0x370 [ 202.692221][ T5966] page_cache_sync_ra+0x1b6/0xb00 [ 202.692251][ T5966] filemap_get_pages+0x6cf/0x2030 [ 202.692278][ T5966] ? __pfx___up_read+0x10/0x10 [ 202.692297][ T5966] ? validate_mm+0x261/0x4e0 [ 202.692326][ T5966] ? __pfx_filemap_get_pages+0x10/0x10 [ 202.692357][ T5966] ? __pfx___might_resched+0x10/0x10 [ 202.692378][ T5966] ? __pfx_validate_mm+0x10/0x10 [ 202.692403][ T5966] filemap_read+0x3b5/0x10a0 [ 202.692424][ T5966] ? __pfx_filemap_read+0x10/0x10 [ 202.692461][ T5966] ? __pfx_down_read+0x10/0x10 [ 202.692483][ T5966] blkdev_read_iter+0x2c4/0x4f0 [ 202.692503][ T5966] ? __pfx_blkdev_read_iter+0x10/0x10 [ 202.692523][ T5966] vfs_read+0x825/0xb30 [ 202.692544][ T5966] ? __pfx_vfs_read+0x10/0x10 [ 202.692564][ T5966] ? ksys_mmap_pgoff+0xec/0x610 [ 202.692588][ T5966] ? __pfx___schedule+0x10/0x10 [ 202.692614][ T5966] ksys_read+0x12a/0x250 [ 202.692633][ T5966] ? __pfx_ksys_read+0x10/0x10 [ 202.692654][ T5966] ? rcu_is_watching+0x12/0xc0 [ 202.692677][ T5966] do_syscall_64+0x10b/0xf80 [ 202.692703][ T5966] ? clear_bhb_loop+0x40/0x90 [ 202.692724][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.692743][ T5966] RIP: 0033:0x7f57ad0a7407 [ 202.692763][ T5966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 202.692783][ T5966] RSP: 002b:00007ffe3fd350e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 202.692803][ T5966] RAX: ffffffffffffffda RBX: 00007f57ad771880 RCX: 00007f57ad0a7407 [ 202.692817][ T5966] RDX: 0000000000000200 RSI: 00007f57ad770000 RDI: 0000000000000009 [ 202.692828][ T5966] RBP: 0000560fc6c79050 R08: 0000000000000000 R09: 0000000000000000 [ 202.692838][ T5966] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 202.692848][ T5966] R13: 0000000000000000 R14: 0000560fc6c7ae98 R15: 00007f57ad83639c [ 202.692867][ T5966] [ 203.085687][ T5313] block nbd1: Receive control failed (result -32) [ 203.276232][ T1476] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.435819][ T5966] block nbd1: Dead connection, failed to find a fallback [ 203.444576][ T5966] block nbd1: shutting down sockets [ 203.450522][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 203.468116][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.477355][ T1476] usb 5-1: USB disconnect, device number 18 [ 203.493394][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.505743][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.514016][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.525168][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.533997][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.546460][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.558331][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.573453][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.583961][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.601421][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.605686][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.610657][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.614237][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.617717][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.621955][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.624665][ T5966] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 203.627612][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.630313][ T5966] Buffer I/O error on dev nbd1, logical block 0, async page read [ 203.633302][ T5966] ldm_validate_partition_table(): Disk read failed. [ 203.635814][ T5966] Dev nbd1: unable to read RDB block 0 [ 203.638152][ T5966] nbd1: unable to read partition table [ 203.656490][ T5966] ldm_validate_partition_table(): Disk read failed. [ 203.659582][ T5966] Dev nbd1: unable to read RDB block 0 [ 203.670689][ T5966] nbd1: unable to read partition table