last executing test programs: 2m23.168151164s ago: executing program 0 (id=414): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000027c0)=[{0x7, 0x8000, 0x0, 0x0}, {0x401, 0x2000, 0x20, 0x0}, {0x0, 0x8801, 0x0, 0x0}], 0x3}) 2m23.103956304s ago: executing program 0 (id=415): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}, 0xde}], 0x1, 0x10040, 0x0) 2m22.890395037s ago: executing program 0 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000400000200012800800010067747000140002800800040010000000080003"], 0x40}}, 0x0) 2m22.819460188s ago: executing program 0 (id=417): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f00000000c0)={0x108, 0x0, 0x8006, 0x80000001, 0x39c1, 0x400004, 0x0, 0xc}, &(0x7f00000001c0)=0x20) 2m21.841679953s ago: executing program 0 (id=421): set_mempolicy(0x8006, &(0x7f0000000100)=0x80000fff, 0x3) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x0, 0x9, 0xa, 0x20, 0x5}, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000440)) setsockopt(r4, 0x84, 0x83, &(0x7f00000002c0)="8a00000002000000", 0x8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300400000fedbdf250c00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$RTC_EPOCH_READ(r8, 0x8008700d, &(0x7f0000000400)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff78a0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd00e}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/86, 0x56}], 0x1}, 0x40) 2m21.601766236s ago: executing program 0 (id=424): mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00004000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x2}}}}}}, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_usb_connect(0x5, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x38, 0xd6, 0x73, 0x8, 0x2639, 0x1, 0x7b24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0xff, 0xc0, 0x5, "", [{{0x9, 0x4, 0x76, 0x8, 0x0, 0xce, 0x86, 0xb9, 0x87}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000440)=[{0x0, 0x1, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x4}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r6, 0x0, 0x4ffe6, 0x0) 2m6.545288082s ago: executing program 32 (id=424): mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00004000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x2}}}}}}, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_usb_connect(0x5, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x38, 0xd6, 0x73, 0x8, 0x2639, 0x1, 0x7b24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0xff, 0xc0, 0x5, "", [{{0x9, 0x4, 0x76, 0x8, 0x0, 0xce, 0x86, 0xb9, 0x87}}]}}]}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000440)=[{0x0, 0x1, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x4}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r6, 0x0, 0x4ffe6, 0x0) 2.972064277s ago: executing program 4 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '}.(!^\\\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.677840131s ago: executing program 3 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000030605000000000000000000020000080500010007b700000900020073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 2.589209362s ago: executing program 3 (id=1382): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) 2.409820265s ago: executing program 3 (id=1384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x9, 0xfff, 0x2, 0x0, [{0x1, 0x10, 0x8, '\x00', 0x9}, {0x6, 0x6, 0x3, '\x00', 0x58}, {0x97, 0x1, 0x3, '\x00', 0x7}, {0x5, 0x1, 0x0, '\x00', 0x8c}, {0x80, 0x3, 0x81, '\x00', 0x1}, {0xcd, 0x7, 0x4, '\x00', 0x3}, {0x18, 0xd, 0x7, '\x00', 0x50}, {0x6, 0x1, 0x8, '\x00', 0x3}, {0x10, 0x8, 0x5, '\x00', 0x90}, {0xc8, 0x4, 0x5, '\x00', 0xd6}, {0x69, 0x1, 0x7, '\x00', 0x40}, {0x80, 0x3b, 0xe7}, {0x80, 0x10, 0x1}, {0x4, 0xf, 0x8, '\x00', 0x5}, {0x9, 0x6d, 0x6, '\x00', 0x5}, {0x0, 0x0, 0x1, '\x00', 0x4}, {0x5, 0x0, 0x66, '\x00', 0x9}, {0x0, 0xd, 0xb, '\x00', 0x4}, {0x8, 0xb3, 0x1, '\x00', 0x8}, {0x5, 0x80, 0x4, '\x00', 0xc0}, {0x6, 0x59, 0x6, '\x00', 0x74}, {0x6, 0x7, 0x55, '\x00', 0x7}, {0x5, 0x8, 0xc, '\x00', 0x9}, {0xc, 0xd, 0xff, '\x00', 0x16}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) 2.176564578s ago: executing program 3 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002380)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f835800000100f23f82e0f1c440a0966b89a008ee0", 0x88}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.869642303s ago: executing program 3 (id=1388): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.680842605s ago: executing program 4 (id=1389): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005980)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10103, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.680563135s ago: executing program 3 (id=1391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x149800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b000100000000090400"], 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x36, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40f7761f, 0x0, 0x0, 0x0, 0x566}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0xff, 0x8, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xfffffffa, 0xd4, &(0x7f0000000600)=""/212, 0x0, 0x4e, '\x00', r1, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x8, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x8, 0x3}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x7, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r3], 0x20) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5e}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x84, 0x5, [{{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000002, 0x0, 0x7}]}) ioctl$KVM_IRQ_LINE_STATUS(r8, 0xc008ae67, &(0x7f0000000140)={0x0, 0x3fe}) r11 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r11, &(0x7f0000000100)=""/253, 0xfd, 0x36) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @raw_data=[0xe5d8, 0x3, 0x4, 0x10000, 0x7ffffefe, 0x2, 0xff, 0x10001, 0x3, 0x9, 0x80005, 0xffffd983, 0x3, 0xf, 0x2, 0x7fff]}) 1.273998681s ago: executing program 2 (id=1394): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) 1.194330012s ago: executing program 2 (id=1395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x9, 0xfff, 0x2, 0x0, [{0x1, 0x10, 0x8, '\x00', 0x9}, {0x6, 0x6, 0x3, '\x00', 0x58}, {0x97, 0x1, 0x3, '\x00', 0x7}, {0x5, 0x1, 0x0, '\x00', 0x8c}, {0x80, 0x3, 0x81, '\x00', 0x1}, {0xcd, 0x7, 0x4, '\x00', 0x3}, {0x18, 0xd, 0x7, '\x00', 0x50}, {0x6, 0x1, 0x8, '\x00', 0x3}, {0x10, 0x8, 0x5, '\x00', 0x90}, {0xc8, 0x4, 0x5, '\x00', 0xd6}, {0x69, 0x1, 0x7, '\x00', 0x40}, {0x80, 0x3b, 0xe7}, {0x80, 0x10, 0x1}, {0x4, 0xf, 0x8, '\x00', 0x5}, {0x9, 0x6d, 0x6, '\x00', 0x5}, {0x0, 0x0, 0x1, '\x00', 0x4}, {0x5, 0x0, 0x66, '\x00', 0x9}, {0x0, 0xd, 0xb, '\x00', 0x4}, {0x8, 0xb3, 0x1, '\x00', 0x8}, {0x5, 0x80, 0x4, '\x00', 0xc0}, {0x6, 0x59, 0x6, '\x00', 0x74}, {0x6, 0x7, 0x55, '\x00', 0x7}, {0x5, 0x8, 0xc, '\x00', 0x9}, {0xc, 0xd, 0xff, '\x00', 0x16}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) 1.110703784s ago: executing program 2 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.015769075s ago: executing program 2 (id=1397): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 913.214266ms ago: executing program 1 (id=1398): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0xd5a2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) 790.373758ms ago: executing program 2 (id=1399): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 767.296018ms ago: executing program 1 (id=1400): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@iv={0x78, 0x117, 0x2, 0x60, "272e75208cbb72f8d90a8db0770c6806330b8d0cf424cf7f69624d5f2868972746fe1b0810aeeb4e984c7bb5acf260c8313e19e6513437df4418d366b39b05d1f42ca230fa6201c0ddb3ce8c5ba821361e00e92b3cdfafccc9d436add0c742fc"}], 0x78}], 0x1, 0x40800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x11a0, 0x1, 0x2, 0x8, 0x3}, {0xffff1256, 0x0, 0x7, 0x3, 0x3, 0x7fff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 757.863169ms ago: executing program 4 (id=1401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000030605000000000000000000020000080500010007b700000900020073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 604.201981ms ago: executing program 4 (id=1402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x9, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "6a5c8d6e56a3857dfcdef7b2cc5943f5ab90a2a3c7b5b43b3c90ba420a16d00355354d134f9c2ee484adb8416e3f180a4b2d6e5552aa66ae89476a7ec13c04c39a107796cd115bcf28d72b188105acd71d1fee6f6a325169ef91d1e19089385aca27a7ccbdb2c2869cd2985c286e09ae436b1fed83c1b7d7fab107eb218151a560723252a1b16822925e4a160f93b0d43d9ba46411be3bcbad2c3f1e11a392b690c802177bd3ed3d1c2f69044f98128018c150e2c4b6322face88f5ed2cd741343af9eac5a454120c13ddc503835cbad8646351ba5d4af335af601dac0231ef35eb8933c4b7c235387bf398a3a26e3efbadc1616242f1131028e424db8c55351"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 587.515731ms ago: executing program 1 (id=1403): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x2, 0x0, 0x0, 0x5, 0x2de}, {0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]}) 385.862704ms ago: executing program 1 (id=1404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x303}, "5c2ef7b962e0923a", "514ce0a6418889fbff75c63833c2036e", "2260bd67", "e8495bd21699cb23"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 385.178854ms ago: executing program 4 (id=1412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x9, 0x0, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 201.221007ms ago: executing program 1 (id=1405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 137.733168ms ago: executing program 4 (id=1406): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb0607000008000000010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet(0x2, 0x1, 0x100) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 10.33477ms ago: executing program 2 (id=1407): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000041}, 0x0) 0s ago: executing program 1 (id=1408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mq_open(&(0x7f0000000640)='nl8\xf2\x18\xdb\xd5.\x8c\xf0\x02\x8c\xe3\xd1\xfdf\xd6\xe8\xd3*\x8f\x16Zb}\x01TY\xa3]\x8e$B\xb5f\xa4IY\x01\xa7n\v.\xfc\x8e\xf8_\xf2\xd9\xf7\xa34\x9cj=\xc23\x97\xb7\xd3%\xd8\xe3\xe0[My\x8e\nE\xb3\x92\xcf\xde\xc9\xcb\xde=\xd0\xaeY\xd6]\xb2\xe0G\xd3\xc6e\vF\xd5\xcb\x87\xbb\x9d\xf3=\xb3\xec\xcf\x8d!\x1d?\x15\xc3\x97\xe2\xae\xbe\x97\xf0\x9a\xa5i\xba\xa4`\x12IG\xfe\xbc4sB\x9c\xe3\xcc@n\xd1t\x18\x86\xf2>\xa9\xf7\xea~h\xe93\xbd\xa2\x1a+\xfc\x14\x19\xec\xb9\v\xab\xed)\x1f\x88\x84\xbc\xed\x05\xa84\xd2K\x04~\x1b\x86]\x90\xd5A5\xbb>\xf6\x02\x9d\xd1w\xb19\x113\x8f\xbf\x1b\xfdK\b\xf2\xde\xdcb\x99\xf0\xc0\x0f\xd3\xbc$\xb9\xd0\xa28T\x0f\x95\xf3#\xc2x\x1b4\x1b\xe7\x83\xd8\x93\n\xc9%{\xdee\xae\x0f\x13\xc5\xce\a\xac\xd3\x87=\\\xe1{V\xfb;\x95\x10I\x9d=\xca\xf8N|\xcb\x8d\xdcp\xa2\xec\x00', 0x80, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xd1, 0x32442) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000100)={&(0x7f0000005000/0x1000)=nil, 0x100, 0x3, 0x22}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0x3c, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x75}}}}}]}}]}}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x9, 0xfff, 0x2, 0x0, [{0x1, 0x10, 0x8, '\x00', 0x9}, {0x6, 0x6, 0x3, '\x00', 0x58}, {0x97, 0x1, 0x3, '\x00', 0x7}, {0x5, 0x1, 0x0, '\x00', 0x8c}, {0x80, 0x3, 0x81, '\x00', 0x1}, {0xcd, 0x7, 0x4, '\x00', 0x3}, {0x18, 0xd, 0x7, '\x00', 0x50}, {0x6, 0x1, 0x8, '\x00', 0x3}, {0x10, 0x8, 0x5, '\x00', 0x90}, {0xc8, 0x4, 0x5, '\x00', 0xd6}, {0x69, 0x1, 0x7, '\x00', 0x40}, {0x80, 0x3b, 0xe7}, {0x80, 0x10, 0x1}, {0x4, 0xf, 0x8, '\x00', 0x5}, {0x9, 0x6d, 0x6, '\x00', 0x5}, {0x0, 0x0, 0x1, '\x00', 0x4}, {0x5, 0x0, 0x66, '\x00', 0x9}, {0x0, 0xd, 0xb, '\x00', 0x4}, {0x8, 0xb3, 0x1, '\x00', 0x8}, {0x5, 0x80, 0x4, '\x00', 0xc0}, {0x6, 0x59, 0x6, '\x00', 0x74}, {0x6, 0x7, 0x55, '\x00', 0x7}, {0x5, 0x8, 0xc, '\x00', 0x9}, {0xc, 0xd, 0xff, '\x00', 0x16}]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r3, 0xae80, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x200800, 0x88) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.1.342'. [ 258.363407][ T6920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 259.925362][ T6946] tmpfs: Unknown parameter 'fd' [ 260.116231][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 260.125749][ T6955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.218750][ T6955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.428179][ T6319] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.608309][ T6319] usb 2-1: Using ep0 maxpacket: 32 [ 260.615542][ T6319] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 260.631245][ T6319] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 260.640447][ T6319] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 260.648673][ T6319] usb 2-1: Product: syz [ 260.652841][ T6319] usb 2-1: Manufacturer: syz [ 260.657427][ T6319] usb 2-1: SerialNumber: syz [ 260.664047][ T6319] usb 2-1: config 0 descriptor?? [ 260.671622][ T6957] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.939408][ T6309] usb 2-1: USB disconnect, device number 10 [ 261.325560][ T6980] mmap: syz.0.366 (6980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.343950][ T6980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'. [ 261.691077][ T6305] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 261.908324][ T6305] usb 1-1: Using ep0 maxpacket: 16 [ 261.958553][ T6305] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.994078][ T6305] usb 1-1: config 6 has an invalid interface number: 105 but max is 0 [ 262.016900][ T6305] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 262.056724][ T6305] usb 1-1: config 6 has no interface number 0 [ 262.064861][ T6305] usb 1-1: config 6 interface 105 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 262.085164][ T6305] usb 1-1: config 6 interface 105 has no altsetting 0 [ 262.103154][ T7002] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 262.110061][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.111232][ T6305] usb 1-1: New USB device found, idVendor=1410, idProduct=7006, bcdDevice=f0.c8 [ 262.138206][ T6305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.146515][ T6305] usb 1-1: Product: syz [ 262.162669][ T6305] usb 1-1: Manufacturer: syz [ 262.163395][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 262.167281][ T6305] usb 1-1: SerialNumber: syz [ 262.454162][ T7004] vhci_hcd: connection closed [ 262.457191][ T11] vhci_hcd: stop threads [ 262.458267][ T6319] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 262.479918][ T11] vhci_hcd: release socket [ 262.496089][ T11] vhci_hcd: disconnect device [ 262.881053][ T6305] option 1-1:6.105: GSM modem (1-port) converter detected [ 262.909297][ T6305] usb 1-1: USB disconnect, device number 7 [ 262.921089][ T6305] option 1-1:6.105: device disconnected [ 262.935635][ T6304] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 263.159169][ T6304] usb 4-1: Using ep0 maxpacket: 16 [ 263.184722][ T6304] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 263.194328][ T6304] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.206457][ T6304] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.219381][ T6304] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 263.228592][ T6304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.236613][ T6304] usb 4-1: Product: syz [ 263.241364][ T6304] usb 4-1: Manufacturer: syz [ 263.245985][ T6304] usb 4-1: SerialNumber: syz [ 263.253972][ T6304] r8152-cfgselector 4-1: config 0 descriptor?? [ 263.363336][ T7019] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 263.548388][ T6304] r8152-cfgselector 4-1: Needed 1 retries to read version [ 263.587000][ T6304] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 264.280639][ T6309] usb 4-1: USB disconnect, device number 6 [ 265.125647][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 265.125661][ T28] audit: type=1800 audit(1782527251.257:106): pid=7040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.386" name="bus" dev="ramfs" ino=12948 res=0 errno=0 [ 265.536401][ T7048] tipc: Started in network mode [ 265.542978][ T7048] tipc: Node identity 2ddfafccc9d436ad002e, cluster identity 4711 [ 267.615554][ T6999] Set syz1 is full, maxelem 65536 reached [ 267.668680][ T6319] vhci_hcd: vhci_device speed not set [ 268.147578][ T28] audit: type=1326 audit(1782527254.277:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7092 comm="syz.2.406" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x0 [ 268.258219][ T6304] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 268.520065][ T6304] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.546862][ T6309] IPVS: starting estimator thread 0... [ 268.577394][ T6304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.648406][ T7107] IPVS: using max 35 ests per chain, 84000 per kthread [ 268.707799][ T7111] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 268.729577][ T6304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.801589][ T7111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.825332][ T6304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.872300][ T6304] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 268.886266][ T6304] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 268.904343][ T6304] usb 2-1: Manufacturer: syz [ 268.938524][ T7113] bond1: (slave geneve2): making interface the new active one [ 268.946127][ T6319] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 268.950851][ T6304] usb 2-1: config 0 descriptor?? [ 268.978280][ T7113] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 269.181396][ T6319] usb 3-1: config 0 has no interfaces? [ 269.186933][ T6319] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.331490][ T6319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.416204][ T6319] usb 3-1: config 0 descriptor?? [ 269.420212][ T6304] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 269.440006][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 269.453102][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 269.475842][ T6304] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 269.524317][ T6304] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 269.654478][ T6304] usb 3-1: USB disconnect, device number 4 [ 270.314741][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 270.350947][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 270.460542][ T7137] kernel profiling enabled (shift: 9) [ 270.601291][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 270.628329][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.423'. [ 270.890324][ T6305] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 271.128707][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 271.261790][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 271.328419][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 271.339574][ T787] usb 1-1: config 252 has an invalid interface number: 118 but max is 0 [ 271.348482][ T787] usb 1-1: config 252 has no interface number 0 [ 271.354780][ T787] usb 1-1: config 252 interface 118 has no altsetting 0 [ 271.377154][ T787] usb 1-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=7b.24 [ 271.395062][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.417938][ T787] usb 1-1: Product: syz [ 271.428760][ T787] usb 1-1: Manufacturer: syz [ 271.433403][ T787] usb 1-1: SerialNumber: syz [ 271.603427][ T7176] input: syz0 as /devices/virtual/input/input8 [ 271.786829][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 271.872843][ T6304] usb 2-1: USB disconnect, device number 11 [ 272.668718][ T6319] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 272.885740][ T6319] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.894284][ T6319] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 272.919437][ T6319] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 272.952362][ T6319] usb 3-1: config 220 has no interface number 2 [ 272.968226][ T6319] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 273.008195][ T6319] usb 3-1: config 220 interface 0 has no altsetting 0 [ 273.018157][ T6319] usb 3-1: config 220 interface 76 has no altsetting 0 [ 273.025072][ T6319] usb 3-1: config 220 interface 1 has no altsetting 0 [ 273.056669][ T6319] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 273.073803][ T6319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.098112][ T6319] usb 3-1: Product: syz [ 273.102935][ T6319] usb 3-1: Manufacturer: syz [ 273.107690][ T6319] usb 3-1: SerialNumber: syz [ 273.364475][ T6319] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 273.378150][ T6319] usb 3-1: No valid video chain found. [ 273.387167][ T6319] usb 3-1: selecting invalid altsetting 0 [ 273.437519][ T6319] usb 3-1: selecting invalid altsetting 0 [ 273.458302][ T6319] usbtest: probe of 3-1:220.1 failed with error -22 [ 273.488500][ T6319] usb 3-1: USB disconnect, device number 5 [ 274.928348][ T7218] program syz.3.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.394776][ T28] audit: type=1326 audit(1782527261.507:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.439625][ T28] audit: type=1326 audit(1782527261.507:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.485038][ T28] audit: type=1326 audit(1782527261.507:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.597500][ T28] audit: type=1326 audit(1782527261.507:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.761276][ T28] audit: type=1326 audit(1782527261.507:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.812626][ T28] audit: type=1326 audit(1782527261.507:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.867325][ T28] audit: type=1326 audit(1782527261.507:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.916652][ T28] audit: type=1326 audit(1782527261.507:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.941157][ T28] audit: type=1326 audit(1782527261.517:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 275.965851][ T28] audit: type=1326 audit(1782527261.517:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.1.451" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 276.879805][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 277.318178][ T7270] netlink: 'syz.2.468': attribute type 4 has an invalid length. [ 277.774062][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 277.785220][ T7282] netlink: 'syz.1.472': attribute type 11 has an invalid length. [ 277.813703][ T7282] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.822732][ T7282] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.831466][ T7282] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.840178][ T7282] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.852127][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 277.864717][ T7282] netlink: 'syz.1.472': attribute type 11 has an invalid length. [ 278.398167][ T787] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 278.609715][ T787] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 278.668180][ T787] usb 2-1: config 0 has no interface number 1 [ 278.675872][ T787] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 278.685313][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.710766][ T787] usb 2-1: config 0 descriptor?? [ 279.006165][ T787] usb 2-1: Could not set interface, error -71 [ 279.039962][ T787] usb 2-1: USB disconnect, device number 12 [ 279.848500][ T7320] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 279.878152][ T7320] PKCS7: Only support pkcs7_signedData type [ 279.886917][ T7320] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 280.868141][ T6290] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 281.082724][ T6290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.103212][ T6290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.118997][ T6290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.135024][ T6290] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.145856][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.181814][ T7342] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 281.188899][ T6290] usb 2-1: config 0 descriptor?? [ 281.605897][ T6290] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 281.634867][ T6290] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 282.643084][ T7359] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.238905][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 283.277138][ T7377] kvm: pic: non byte write [ 283.438265][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 283.473134][ T787] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.490304][ T787] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 283.498725][ T787] usb 4-1: can't read configurations, error -71 [ 283.758410][ T6319] usb 2-1: USB disconnect, device number 13 [ 284.238172][ T6318] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 284.420078][ T6318] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.430997][ T6318] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 284.443551][ T6318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.458379][ T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 284.466197][ T6318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 284.483000][ T6318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 284.496717][ T6318] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.516453][ T6318] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.536401][ T6318] usb 3-1: Product: syz [ 284.541371][ T6318] usb 3-1: Manufacturer: syz [ 284.559920][ T6318] cdc_wdm 3-1:1.0: skipping garbage [ 284.565265][ T6318] cdc_wdm 3-1:1.0: skipping garbage [ 284.575189][ T6318] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 284.589911][ T6318] cdc_wdm 3-1:1.0: Unknown control protocol [ 284.668852][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 284.683551][ T787] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 284.695461][ T787] usb 4-1: config 0 has no interface number 0 [ 284.702439][ T787] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.715754][ T787] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.727591][ T787] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 284.741333][ T787] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 284.749613][ T787] usb 4-1: Product: syz [ 284.753799][ T787] usb 4-1: SerialNumber: syz [ 284.764005][ T787] usb 4-1: config 0 descriptor?? [ 284.772604][ T787] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 284.792135][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 284.792250][ T6319] usb 3-1: USB disconnect, device number 6 [ 284.798926][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 284.798955][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 284.819922][ T787] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 285.001283][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.001389][ T6318] usb 4-1: USB disconnect, device number 8 [ 285.008456][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 285.031921][ T6318] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 285.614391][ T7440] warning: `syz.2.526' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.868624][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 286.222661][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.235401][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.246011][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.275046][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.284271][ T5802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.291762][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.538506][ T6319] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 286.640914][ T7452] chnl_net:caif_netlink_parms(): no params data found [ 286.740399][ T6319] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 286.778698][ T6319] usb 3-1: config 0 has no interface number 1 [ 286.784892][ T6319] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 286.888202][ T6319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.905162][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.926794][ T7452] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.938850][ T7452] bridge_slave_0: entered allmulticast mode [ 286.939654][ T6319] usb 3-1: config 0 descriptor?? [ 286.953486][ T7452] bridge_slave_0: entered promiscuous mode [ 286.962575][ T7452] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.970178][ T7452] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.977466][ T7452] bridge_slave_1: entered allmulticast mode [ 286.985248][ T7452] bridge_slave_1: entered promiscuous mode [ 287.077503][ T7452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.111329][ T7452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.209024][ T7452] team0: Port device team_slave_0 added [ 287.246775][ T7452] team0: Port device team_slave_1 added [ 287.296334][ T6319] usb 3-1: Could not set interface, error -71 [ 287.321415][ T6319] usb 3-1: USB disconnect, device number 7 [ 287.379302][ T7452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.409473][ T7452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.521757][ T7452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.565628][ T7452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.608125][ T7452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.674446][ T7452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.759259][ T7452] hsr_slave_0: entered promiscuous mode [ 287.790062][ T7452] hsr_slave_1: entered promiscuous mode [ 287.805530][ T7452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.831174][ T7452] Cannot create hsr debugfs directory [ 288.229482][ T7452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.311266][ T7452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.359817][ T7452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.370518][ T5802] Bluetooth: hci4: command tx timeout [ 288.443179][ T7452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.616547][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 288.747323][ T7452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.844998][ T7452] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.877220][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.884446][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.991241][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.998440][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.197931][ T7452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.292370][ T7452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.305546][ T6309] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 289.542759][ T6309] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 289.567623][ T6309] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 289.589637][ T6309] usb 2-1: config 0 interface 0 has no altsetting 0 [ 289.600134][ T6309] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.610086][ T6309] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 289.613270][ T7452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.618767][ T6309] usb 2-1: Product: syz [ 289.634114][ T6309] usb 2-1: Manufacturer: syz [ 289.643597][ T6309] usb 2-1: SerialNumber: syz [ 289.675550][ T6309] usb 2-1: config 0 descriptor?? [ 289.716174][ T6309] usb 2-1: selecting invalid altsetting 0 [ 289.988868][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.014492][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.031519][ T6309] usb 2-1: USB disconnect, device number 14 [ 290.103856][ T7452] veth0_vlan: entered promiscuous mode [ 290.147369][ T7452] veth1_vlan: entered promiscuous mode [ 290.241656][ T7452] veth0_macvtap: entered promiscuous mode [ 290.262298][ T7452] veth1_macvtap: entered promiscuous mode [ 290.315457][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.337465][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.348373][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.359377][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.390912][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.440492][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.460900][ T5802] Bluetooth: hci4: command tx timeout [ 290.492397][ T7452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.538983][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.571114][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.591657][ T7452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.602709][ T7452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.639743][ T7452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.682084][ T7452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.711730][ T7452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.725576][ T7452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.737836][ T7452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.978407][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.994698][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.103003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.136992][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.348628][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'. [ 292.365169][ T7553] program syz.1.555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.538260][ T5802] Bluetooth: hci4: command tx timeout [ 292.727572][ T7568] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 292.775160][ T7568] bond1: entered promiscuous mode [ 292.785746][ T7568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.931050][ T7568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.948599][ T7568] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 292.977893][ T7568] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 293.000422][ T7568] bond1: (slave gre1): making interface the new active one [ 293.018165][ T7568] gre1: entered promiscuous mode [ 293.030912][ T7568] bond1: (slave gre1): Enslaving as an active interface with an up link [ 293.848175][ T6290] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 293.995743][ T7615] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 294.006845][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 294.048294][ T6290] usb 5-1: Using ep0 maxpacket: 32 [ 294.055674][ T6290] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 294.069110][ T6290] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 294.086055][ T6290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.098073][ T6290] usb 5-1: Product: syz [ 294.102277][ T6290] usb 5-1: Manufacturer: syz [ 294.106971][ T6290] usb 5-1: SerialNumber: syz [ 294.119810][ T6290] usb 5-1: config 0 descriptor?? [ 294.133417][ T6290] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 294.151959][ T6290] dvb-usb: bulk message failed: -22 (2/0) [ 294.172626][ T6290] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.184804][ T6290] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 294.195875][ T6290] usb 5-1: media controller created [ 294.202892][ T7621] netlink: 'syz.3.584': attribute type 1 has an invalid length. [ 294.239835][ T7620] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 294.263950][ T6290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.298605][ T6290] usb 5-1: selecting invalid altsetting 7 [ 294.304473][ T6290] cxusb: set interface failed [ 294.309545][ T6290] dvb-usb: bulk message failed: -22 (1/0) [ 294.346764][ T7599] dvb-usb: bulk message failed: -22 (4/0) [ 294.347183][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 294.439111][ T6290] DVB: Unable to find symbol lgdt330x_attach() [ 294.445334][ T6290] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 294.489526][ T7627] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.509539][ T7627] netlink: 56 bytes leftover after parsing attributes in process `syz.1.586'. [ 294.563016][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.588'. [ 294.588711][ T6290] rc_core: IR keymap rc-dvico-portable not found [ 294.595100][ T6290] Registered IR keymap rc-empty [ 294.608717][ T5802] Bluetooth: hci4: command tx timeout [ 294.640054][ T6290] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 294.660065][ T6290] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 294.674099][ T6290] dvb-usb: schedule remote query interval to 100 msecs. [ 294.681409][ T6290] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 294.701233][ T6290] usb 5-1: USB disconnect, device number 2 [ 294.885285][ T6290] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 295.473004][ T7627] ip6tnl1: entered allmulticast mode [ 295.509868][ T7650] syzkaller0: entered promiscuous mode [ 295.515395][ T7650] syzkaller0: entered allmulticast mode [ 295.768524][ T6290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 295.909533][ T1078] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.917669][ T1078] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.938401][ T6320] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.960010][ T6290] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.973270][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.986113][ T6290] usb 2-1: config 0 descriptor?? [ 296.124379][ T6320] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.141703][ T7668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.603'. [ 296.223740][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 296.223754][ T28] audit: type=1326 audit(1782527282.357:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.228857][ T6320] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.233552][ T28] audit: type=1326 audit(1782527282.357:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.287779][ T28] audit: type=1326 audit(1782527282.367:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.312931][ T7671] fuse: Unknown parameter '0xffffffffffffffff' [ 296.319289][ T28] audit: type=1326 audit(1782527282.367:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.348378][ T28] audit: type=1326 audit(1782527282.397:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.372821][ T28] audit: type=1326 audit(1782527282.397:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.405611][ T28] audit: type=1326 audit(1782527282.397:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.436837][ T28] audit: type=1326 audit(1782527282.417:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.472369][ T28] audit: type=1326 audit(1782527282.417:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.504053][ T28] audit: type=1326 audit(1782527282.417:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.604" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 296.504353][ T6290] [drm:udl_init] *ERROR* Selecting channel failed [ 296.585814][ T6290] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 296.604293][ T6290] [drm] Initialized udl on minor 2 [ 296.629388][ T6290] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.650445][ T6290] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 296.662517][ T6304] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.676853][ T6290] usb 2-1: USB disconnect, device number 15 [ 296.683732][ T6304] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 296.840748][ T7679] netlink: 44 bytes leftover after parsing attributes in process `syz.4.607'. [ 296.853889][ T7679] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.862131][ T7679] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.972196][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.609'. [ 297.057829][ T7685] capability: warning: `syz.2.611' uses 32-bit capabilities (legacy support in use) [ 297.305324][ T7693] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 297.386528][ T7693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.420415][ T7693] bond3: (slave bond4): making interface the new active one [ 297.460694][ T7693] bond3: (slave bond4): Enslaving as an active interface with an up link [ 297.494063][ T7696] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 297.525072][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 297.639081][ T7697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.017361][ T7704] IPVS: set_ctl: invalid protocol: 133 172.20.20.170:20000 [ 299.148226][ T6320] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 299.352716][ T6320] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 299.375076][ T6320] usb 4-1: config 0 has no interface number 0 [ 299.385218][ T6320] usb 4-1: config 0 interface 41 has no altsetting 0 [ 299.401424][ T6320] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 299.412203][ T6320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.420408][ T6320] usb 4-1: Product: syz [ 299.424866][ T6320] usb 4-1: Manufacturer: syz [ 299.429832][ T6320] usb 4-1: SerialNumber: syz [ 299.440110][ T6320] usb 4-1: config 0 descriptor?? [ 300.003662][ T7742] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 300.010216][ T7742] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 300.022218][ T7742] vhci_hcd vhci_hcd.0: Device attached [ 300.062112][ T7743] usbip_core: unknown command [ 300.080206][ T7743] vhci_hcd: unknown pdu 774857333 [ 300.087808][ T7743] usbip_core: unknown command [ 300.093678][ T13] vhci_hcd: stop threads [ 300.104884][ T13] vhci_hcd: release socket [ 300.109974][ T13] vhci_hcd: disconnect device [ 300.288258][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.307145][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.631'. [ 300.347001][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 300.718547][ T6319] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 300.910849][ T6319] usb 5-1: Using ep0 maxpacket: 32 [ 300.925937][ T6319] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 300.958129][ T6319] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 300.958159][ T6319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.958318][ T6319] usb 5-1: Product: syz [ 300.984880][ T6319] usb 5-1: Manufacturer: syz [ 300.989832][ T6319] usb 5-1: SerialNumber: syz [ 301.878493][ T6319] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 301.928899][ T6319] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 301.952621][ T6320] CoreChips: probe of 4-1:0.41 failed with error -71 [ 302.005963][ T6320] usb 4-1: USB disconnect, device number 9 [ 302.022594][ T6319] usb 5-1: USB disconnect, device number 3 [ 302.112223][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.607249][ T7796] use of bytesused == 0 is deprecated and will be removed in the future, [ 302.625925][ T7796] use the actual size instead. [ 303.243467][ T7823] netlink: 'syz.1.659': attribute type 1 has an invalid length. [ 303.398924][ T7823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.466037][ T7826] bond2: (slave geneve2): making interface the new active one [ 303.483554][ T7826] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 303.726030][ T7836] netlink: 'syz.2.665': attribute type 1 has an invalid length. [ 303.906925][ T7837] kvm: pic: non byte write [ 304.208188][ T6319] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 306.398240][ T6290] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 306.598220][ T6290] usb 4-1: Using ep0 maxpacket: 32 [ 306.656463][ T6290] usb 4-1: unable to get BOS descriptor or descriptor too short [ 306.699327][ T6290] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 306.712171][ T6290] usb 4-1: can't read configurations, error -71 [ 307.082921][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.676'. [ 307.123340][ T7878] fuse: Unknown parameter '€d' [ 307.161914][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.677'. [ 307.735338][ T7897] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 307.772721][ T7897] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 308.278113][ T6290] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 308.488242][ T6290] usb 5-1: Using ep0 maxpacket: 32 [ 308.497590][ T6290] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 308.524936][ T6290] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 308.544693][ T6290] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 308.564928][ T6290] usb 5-1: Product: syz [ 308.569321][ T6290] usb 5-1: Manufacturer: syz [ 308.573932][ T6290] usb 5-1: SerialNumber: syz [ 308.593477][ T6290] usb 5-1: config 0 descriptor?? [ 308.610585][ T7905] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 308.629566][ T6290] hub 5-1:0.0: bad descriptor, ignoring hub [ 308.637389][ T6290] hub: probe of 5-1:0.0 failed with error -5 [ 308.871715][ T7914] program syz.3.687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.909986][ T7905] pim6reg9: entered allmulticast mode [ 308.918575][ T7912] syzkaller0: entered promiscuous mode [ 308.937203][ T7912] syzkaller0: entered allmulticast mode [ 309.008217][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.448516][ T6290] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 309.640306][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.693'. [ 309.656765][ T6290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.673068][ T6290] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 309.684831][ T6290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 309.688542][ T6319] usb 5-1: USB disconnect, device number 4 [ 309.704560][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.748282][ T6304] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 309.763691][ T7925] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 309.783330][ T6290] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 309.962346][ T6304] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 309.973756][ T6304] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.002253][ T6304] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.027470][ T6304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.046673][ T6304] usb 3-1: config 0 descriptor?? [ 310.076836][ T6304] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 310.167823][ T6304] IPVS: starting estimator thread 0... [ 310.174014][ T7935] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 310.246796][ T7925] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000 [ 310.308428][ T7936] IPVS: using max 23 ests per chain, 55200 per kthread [ 310.329127][ T6304] usb 2-1: USB disconnect, device number 16 [ 310.995532][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 310.995546][ T28] audit: type=1326 audit(1782527297.127:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 311.078756][ T28] audit: type=1326 audit(1782527297.127:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 311.102805][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.146153][ T28] audit: type=1326 audit(1782527297.157:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 311.170121][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.177617][ T28] audit: type=1326 audit(1782527297.157:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 311.201523][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.208577][ T28] audit: type=1326 audit(1782527297.157:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 311.232462][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.239432][ T28] audit: type=1326 audit(1782527297.217:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587bf5d68e code=0x7ffc0000 [ 311.267433][ T28] audit: type=1326 audit(1782527297.257:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587bf5d68e code=0x7ffc0000 [ 311.293174][ T28] audit: type=1326 audit(1782527297.257:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587bf5d68e code=0x7ffc0000 [ 311.317097][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.323722][ T28] audit: type=1326 audit(1782527297.257:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587bf5d68e code=0x7ffc0000 [ 311.356605][ T28] audit: type=1326 audit(1782527297.257:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.3.702" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f587bf5d68e code=0x7ffc0000 [ 311.545010][ T7970] netlink: 'syz.4.704': attribute type 1 has an invalid length. [ 311.599875][ T7970] netlink: 'syz.4.704': attribute type 2 has an invalid length. [ 312.028630][ T6304] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 312.108158][ T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 312.233351][ T6304] usb 5-1: config 0 has an invalid interface number: 85 but max is 1 [ 312.241569][ T6290] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 312.249529][ T6304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.261477][ T6304] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 312.270412][ T6304] usb 5-1: config 0 has no interface number 0 [ 312.276519][ T6304] usb 5-1: too many endpoints for config 0 interface 85 altsetting 12: 211, using maximum allowed: 30 [ 312.287610][ T6304] usb 5-1: config 0 interface 85 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 312.300898][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 312.306085][ T6304] usb 5-1: config 0 interface 85 has no altsetting 0 [ 312.313347][ T6304] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 312.322569][ T6304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.332719][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.344758][ T6304] usb 5-1: config 0 descriptor?? [ 312.350152][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.360160][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.380151][ T787] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.389298][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.400533][ T787] usb 4-1: config 0 descriptor?? [ 312.476562][ T6290] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 312.487167][ T6290] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.496909][ T6320] usb 3-1: USB disconnect, device number 9 [ 312.500872][ T6290] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.534059][ T6290] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.545209][ T6290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.574842][ T6290] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 312.593627][ T6290] usb 2-1: invalid MIDI out EP 0 [ 312.797027][ T6290] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 312.863180][ T6290] usb 2-1: USB disconnect, device number 17 [ 312.876698][ T6304] usb 5-1: string descriptor 0 read error: -71 [ 312.901075][ T787] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input13 [ 312.914799][ T6304] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 312.928626][ T6304] dvb-usb: bulk message failed: -22 (3/0) [ 312.946975][ T6304] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 312.957604][ T6304] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 312.965836][ T6304] usb 5-1: media controller created [ 312.973121][ T6304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.992355][ T6304] dvb-usb: bulk message failed: -22 (6/0) [ 312.998706][ T6304] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 313.013631][ T6304] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 313.057214][ T787] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 313.078724][ T6304] dvb-usb: schedule remote query interval to 150 msecs. [ 313.099618][ T6304] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 313.116223][ T787] usb 4-1: USB disconnect, device number 12 [ 313.155005][ T6304] usb 5-1: USB disconnect, device number 5 [ 313.246647][ T7992] fido_id[7992]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 313.263153][ T6304] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 313.561296][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.716'. [ 313.622795][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.716'. [ 313.656674][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.716'. [ 314.883158][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.721'. [ 315.558270][ T6304] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 315.853487][ T6304] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.888954][ T6304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.910215][ T6304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.964448][ T6304] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 316.143167][ T6304] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 316.161366][ T6304] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 316.203791][ T6304] usb 3-1: Manufacturer: syz [ 316.215144][ T6304] usb 3-1: config 0 descriptor?? [ 316.656324][ T6304] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 316.677838][ T6304] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 316.742817][ T6304] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 317.337789][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.348365][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.178483][ T6304] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 318.399297][ T6320] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 318.612712][ T6320] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 318.622179][ T6320] usb 2-1: config 0 has no interface number 0 [ 318.633514][ T6320] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.648258][ T6320] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 318.657870][ T8121] netem: change failed [ 318.662071][ T6320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.670137][ T6320] usb 2-1: Product: syz [ 318.670989][ T8121] syzkaller0: entered promiscuous mode [ 318.674296][ T6320] usb 2-1: Manufacturer: syz [ 318.674313][ T6320] usb 2-1: SerialNumber: syz [ 318.676708][ T6320] usb 2-1: config 0 descriptor?? [ 318.686920][ T8121] syzkaller0: entered allmulticast mode [ 318.700487][ T6320] yurex 2-1:0.50: USB YUREX device now attached to Yurex #1 [ 318.709717][ T8121] tipc: Started in network mode [ 318.720675][ T8121] tipc: Node identity 1edc8c8b64ad, cluster identity 4711 [ 318.728650][ T8121] tipc: Enabled bearer , priority 0 [ 318.746811][ T8121] tipc: Resetting bearer [ 318.778169][ T6318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 318.803351][ T8120] tipc: Resetting bearer [ 318.840471][ T8120] tipc: Disabling bearer [ 318.969849][ T6290] usb 2-1: USB disconnect, device number 18 [ 318.996509][ T6290] yurex 2-1:0.50: USB YUREX #1 now disconnected [ 319.250471][ T5857] usb 3-1: USB disconnect, device number 10 [ 319.640217][ T8152] netlink: 172 bytes leftover after parsing attributes in process `syz.3.768'. [ 319.969780][ T8161] IPVS: Error connecting to the multicast addr [ 320.598242][ T6290] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 320.821982][ T6290] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.835191][ T6290] usb 4-1: config 0 has no interface number 0 [ 320.849548][ T6290] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 320.858850][ T6290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.867028][ T6290] usb 4-1: Product: syz [ 320.871392][ T6290] usb 4-1: Manufacturer: syz [ 320.876028][ T6290] usb 4-1: SerialNumber: syz [ 320.883258][ T6290] usb 4-1: config 0 descriptor?? [ 321.095261][ T6290] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 321.109525][ T6290] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.121295][ T6290] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 321.129493][ T6290] usb 4-1: media controller created [ 321.152528][ T6290] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.258123][ T6308] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 321.298122][ T6319] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 321.450733][ T6308] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 321.468509][ T6308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.484006][ T6318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 321.494424][ T6308] usb 2-1: config 0 descriptor?? [ 321.499992][ T6319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.511776][ T6318] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 321.528612][ T6318] usb 5-1: can't read configurations, error -71 [ 321.535912][ T6319] usb 3-1: config 0 has no interfaces? [ 321.554009][ T6319] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 321.568379][ T6319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.589154][ T6319] usb 3-1: config 0 descriptor?? [ 321.811643][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.828883][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.840872][ T6308] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 321.856915][ T5857] usb 3-1: USB disconnect, device number 11 [ 321.860119][ T6308] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 321.901223][ T6308] [drm:udl_init] *ERROR* Selecting channel failed [ 321.926967][ T6308] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 321.948319][ T6308] [drm] Initialized udl on minor 2 [ 321.955801][ T6308] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 321.968871][ T6308] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 321.977058][ T6319] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 321.995125][ T6319] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 322.004396][ T6308] usb 2-1: USB disconnect, device number 19 [ 322.290554][ T6290] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 322.353593][ T6290] usb 4-1: USB disconnect, device number 13 [ 322.516327][ T8199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 322.958705][ T6318] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 323.119572][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 323.194605][ T6318] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 323.218520][ T6318] usb 2-1: can't read configurations, error -71 [ 323.238802][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 323.238814][ T28] audit: type=1326 audit(1782527309.367:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 323.295964][ T28] audit: type=1326 audit(1782527309.377:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 323.320548][ T28] audit: type=1326 audit(1782527309.417:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 323.344431][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.374788][ T28] audit: type=1326 audit(1782527309.417:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 323.405975][ T28] audit: type=1326 audit(1782527309.417:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 323.528240][ T6308] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 323.721140][ T6308] usb 5-1: Using ep0 maxpacket: 16 [ 323.738888][ T6308] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.757788][ T6308] usb 5-1: config 0 has no interface number 0 [ 323.766610][ T6308] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 323.786223][ T6308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.816553][ T6308] usb 5-1: Product: syz [ 323.826658][ T6308] usb 5-1: Manufacturer: syz [ 323.836776][ T6308] usb 5-1: SerialNumber: syz [ 323.845922][ T6308] usb 5-1: config 0 descriptor?? [ 323.864847][ T6308] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 324.140187][ T8222] trusted_key: syz.4.800 sent an empty control message without MSG_MORE. [ 324.398585][ T6308] gspca_spca1528: reg_w err -110 [ 324.436752][ T6308] spca1528: probe of 5-1:0.1 failed with error -110 [ 324.513851][ T8222] netlink: 'syz.4.800': attribute type 1 has an invalid length. [ 324.531049][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 324.537164][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 324.543257][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 324.550482][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 324.694579][ T8270] program syz.1.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.995449][ T6290] usb 5-1: USB disconnect, device number 8 [ 325.558553][ T6290] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 325.658253][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.771042][ T6290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.783661][ T6290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.821897][ T6290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.868483][ T6290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.888131][ T5857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 325.901299][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.912722][ T6290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.924762][ T8308] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.935164][ T6290] usb 3-1: config 0 descriptor?? [ 325.943958][ T8308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 326.099378][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 326.106512][ T5857] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 326.129150][ T5857] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 326.140017][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.148555][ T5857] usb 5-1: Product: syz [ 326.153769][ T5857] usb 5-1: Manufacturer: syz [ 326.168700][ T5857] usb 5-1: SerialNumber: syz [ 326.341596][ T8308] syz.3.832 (8308) used greatest stack depth: 19816 bytes left [ 326.392501][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.418545][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432711][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432746][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432774][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432826][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432853][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432880][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.432907][ T6290] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 326.436051][ T6290] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 326.454003][ T6290] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 326.518875][ T8320] tap0: tun_chr_ioctl cmd 1074025677 [ 326.519108][ T8320] tap0: linktype set to 774 [ 326.527161][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.529162][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.611180][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.726535][ T8307] tap0: tun_chr_ioctl cmd 1074025677 [ 326.732274][ T8307] tap0: linktype set to 804 [ 326.771472][ T6290] usb 3-1: USB disconnect, device number 12 [ 326.897295][ T8327] syzkaller0: entered promiscuous mode [ 326.903137][ T8327] syzkaller0: entered allmulticast mode [ 326.929289][ T8327] tipc: Started in network mode [ 326.934336][ T8327] tipc: Node identity dec60ec9acc3, cluster identity 4711 [ 326.942673][ T8327] tipc: Enabled bearer , priority 0 [ 326.952947][ T8326] tipc: Resetting bearer [ 326.984307][ T8326] tipc: Disabling bearer [ 327.212192][ T8334] netlink: 176 bytes leftover after parsing attributes in process `syz.1.843'. [ 327.392242][ T5857] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 327.429762][ T5857] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 327.483752][ T5857] usb 5-1: USB disconnect, device number 9 [ 328.577437][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.2.863'. [ 328.684555][ T8391] program syz.2.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.218231][ T6305] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 330.421001][ T6305] usb 4-1: config 0 has no interfaces? [ 330.431349][ T6305] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 330.461552][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.506444][ T6305] usb 4-1: Product: syz [ 330.514250][ T6305] usb 4-1: Manufacturer: syz [ 330.528085][ T6305] usb 4-1: SerialNumber: syz [ 330.554548][ T6305] usb 4-1: config 0 descriptor?? [ 331.417712][ T6308] usb 4-1: USB disconnect, device number 14 [ 333.147829][ T8483] tipc: Can't bind to reserved service type 1 [ 333.568384][ T6304] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 333.758136][ T6304] usb 4-1: Using ep0 maxpacket: 8 [ 333.769325][ T6304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 333.778909][ T6304] usb 4-1: config 4 interface 0 has no altsetting 0 [ 333.790515][ T6304] usb 4-1: string descriptor 0 read error: -22 [ 333.797053][ T6304] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 333.806863][ T6304] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 333.827863][ T6304] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 333.841925][ T6304] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 333.853257][ T6304] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 333.861162][ T6304] usb 4-1: media controller created [ 333.911428][ T6304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.930553][ T8494] kvm: pic: level sensitive irq not supported [ 333.930889][ T8494] kvm: pic: non byte read [ 334.738495][ T6319] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 334.837941][ T8525] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.919631][ T6319] usb 3-1: Using ep0 maxpacket: 16 [ 334.933043][ T6319] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 334.943944][ T6319] usb 3-1: config 252 has no interface number 0 [ 334.960057][ T6319] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 28991, setting to 1024 [ 334.976604][ T6319] usb 3-1: config 252 interface 15 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 334.979819][ T6319] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 334.979848][ T6319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.979869][ T6319] usb 3-1: Product: syz [ 334.979885][ T6319] usb 3-1: Manufacturer: syz [ 334.979900][ T6319] usb 3-1: SerialNumber: syz [ 334.992136][ T8512] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 335.024396][ T6319] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 335.026892][ T6304] zl10353_read_register: readreg error (reg=127, ret==0) [ 335.208287][ T6304] usb 4-1: USB disconnect, device number 15 [ 335.255378][ T8512] syz.2.908: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 335.256384][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 335.320828][ T8534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.372168][ T8512] CPU: 0 PID: 8512 Comm: syz.2.908 Not tainted syzkaller #0 [ 335.379486][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.389568][ T8512] Call Trace: [ 335.392840][ T8512] [ 335.395779][ T8512] dump_stack_lvl+0x18c/0x250 [ 335.400489][ T8512] ? show_regs_print_info+0x20/0x20 [ 335.405703][ T8512] ? load_image+0x420/0x420 [ 335.405972][ T8536] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 335.410218][ T8512] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 335.410282][ T8512] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 335.410308][ T8512] warn_alloc+0x246/0x340 [ 335.436728][ T8512] ? zone_watermark_ok_safe+0x230/0x230 [ 335.442282][ T8512] ? __mutex_trylock_common+0x160/0x270 [ 335.447839][ T8512] __vmalloc_node_range+0x129/0x1320 [ 335.453151][ T8512] ? tomoyo_path_number_perm+0x217/0x5e0 [ 335.458776][ T8512] ? rcu_is_watching+0x15/0xb0 [ 335.463534][ T8512] ? trace_contention_end+0x39/0xe0 [ 335.468724][ T8512] ? __mutex_lock+0x30d/0xc80 [ 335.473395][ T8512] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 335.479032][ T8512] ? tomoyo_path_number_perm+0x217/0x5e0 [ 335.484676][ T8512] ? free_vm_area+0x50/0x50 [ 335.489178][ T8512] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 335.494203][ T8512] vmalloc+0x79/0x90 [ 335.498093][ T8512] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 335.503124][ T8512] dvb_dvr_do_ioctl+0x12e/0x220 [ 335.507981][ T8512] dvb_usercopy+0x195/0x2b0 [ 335.512510][ T8512] ? dvb_dvr_release+0x3e0/0x3e0 [ 335.517442][ T8512] ? dvb_generic_ioctl+0xb0/0xb0 [ 335.522380][ T8512] ? dvb_dvr_poll+0x230/0x230 [ 335.527068][ T8512] dvb_dvr_ioctl+0x29/0x30 [ 335.531494][ T8512] __se_sys_ioctl+0xfd/0x170 [ 335.536086][ T8512] do_syscall_64+0x55/0xb0 [ 335.540537][ T8512] ? clear_bhb_loop+0x40/0x90 [ 335.545483][ T8512] ? clear_bhb_loop+0x40/0x90 [ 335.550157][ T8512] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.556059][ T8512] RIP: 0033:0x7f5844b9ce59 [ 335.560468][ T8512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.580075][ T8512] RSP: 002b:00007f5845aeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.588595][ T8512] RAX: ffffffffffffffda RBX: 00007f5844e15fa0 RCX: 00007f5844b9ce59 [ 335.596566][ T8512] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000008 [ 335.604540][ T8512] RBP: 00007f5844c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 335.612516][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.620490][ T8512] R13: 00007f5844e16038 R14: 00007f5844e15fa0 R15: 00007ffec565b6c8 [ 335.628473][ T8512] [ 335.631508][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.654517][ T8539] usb usb8: usbfs: process 8539 (syz.2.908) did not claim interface 0 before use [ 335.669813][ T8512] Mem-Info: [ 335.673039][ T8512] active_anon:23291 inactive_anon:0 isolated_anon:0 [ 335.673039][ T8512] active_file:14724 inactive_file:40033 isolated_file:0 [ 335.673039][ T8512] unevictable:768 dirty:40 writeback:0 [ 335.673039][ T8512] slab_reclaimable:10642 slab_unreclaimable:98351 [ 335.673039][ T8512] mapped:32154 shmem:17833 pagetables:829 [ 335.673039][ T8512] sec_pagetables:0 bounce:0 [ 335.673039][ T8512] kernel_misc_reclaimable:0 [ 335.673039][ T8512] free:1299176 free_pcp:12414 free_cma:0 [ 335.723811][ T8512] Node 0 active_anon:93164kB inactive_anon:0kB active_file:58896kB inactive_file:159932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128616kB dirty:156kB writeback:0kB shmem:69796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12376kB pagetables:3316kB sec_pagetables:0kB all_unreclaimable? no [ 335.728045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 335.757474][ T8512] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 335.764537][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.788052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 335.810903][ T8512] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.839807][ T8512] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 335.845773][ T8512] Node 0 DMA32 free:1293856kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:93328kB inactive_anon:0kB active_file:58896kB inactive_file:159104kB unevictable:1536kB writepending:156kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:26452kB local_pcp:13148kB free_cma:0kB [ 335.911945][ T8512] lowmem_reserve[]: 0 0 0 0 0 [ 335.925214][ T8512] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 335.958748][ T8512] lowmem_reserve[]: 0 0 0 0 0 [ 335.963752][ T8512] Node 1 Normal free:3887488kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22752kB local_pcp:11616kB free_cma:0kB [ 336.038117][ T8512] lowmem_reserve[]: 0 0 0 0 0 [ 336.047052][ T8512] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.048589][ T1078] usb 3-1: Failed to submit usb control message: -110 [ 336.076798][ T8512] Node 0 DMA32: 6*4kB (E) 162*8kB (UM) 136*16kB (M) 131*32kB (UM) 73*64kB (UME) 36*128kB (UME) 23*256kB (UM) 15*512kB (M) 7*1024kB (UM) 1*2048kB (M) 306*4096kB (UM) = 1293128kB [ 336.122194][ T8512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 336.147944][ T8512] Node 1 Normal: 272*4kB (UME) 56*8kB (UME) 42*16kB (UME) 105*32kB (UME) 31*64kB (UME) 6*128kB (UM) 3*256kB (UME) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 946*4096kB (M) = 3887488kB [ 336.177479][ T1078] usb 3-1: unable to send the bmi data to the device: -110 [ 336.194736][ T1078] usb 3-1: unable to get target info from device [ 336.243138][ T1078] usb 3-1: could not get target info (-110) [ 336.252697][ T8512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.265713][ T1078] usb 3-1: could not probe fw (-110) [ 336.273011][ T8512] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 336.299418][ T8512] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 336.369410][ T8512] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 336.381385][ T8512] 72589 total pagecache pages [ 336.395654][ T8512] 0 pages in swap cache [ 336.405269][ T8512] Free swap = 124728kB [ 336.414508][ T8512] Total swap = 124996kB [ 336.425760][ T8512] 2097051 pages RAM [ 336.433612][ T8512] 0 pages HighMem/MovableOnly [ 336.442083][ T8512] 416931 pages reserved [ 336.449737][ T8512] 0 pages cma reserved [ 336.573747][ T6319] usb 3-1: USB disconnect, device number 13 [ 337.228179][ T6319] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 337.500555][ T6319] usb 4-1: Using ep0 maxpacket: 16 [ 337.525726][ T6319] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 337.549530][ T6319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.567112][ T6319] usb 4-1: config 0 descriptor?? [ 337.683920][ T6319] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 337.971743][ T6319] gspca_sonixj: reg_w1 err -71 [ 337.999688][ T6319] sonixj: probe of 4-1:0.0 failed with error -71 [ 338.038672][ T6319] usb 4-1: USB disconnect, device number 16 [ 338.868205][ T6319] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 339.048149][ T6319] usb 4-1: Using ep0 maxpacket: 32 [ 339.066574][ T6319] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.106213][ T6319] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 339.116067][ T6319] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 339.132795][ T6319] usb 4-1: Product: syz [ 339.144005][ T6319] usb 4-1: Manufacturer: syz [ 339.150056][ T6319] usb 4-1: SerialNumber: syz [ 339.162973][ T6319] usb 4-1: config 0 descriptor?? [ 339.171888][ T6319] hub 4-1:0.0: bad descriptor, ignoring hub [ 339.177931][ T6319] hub: probe of 4-1:0.0 failed with error -5 [ 339.345096][ T8605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.941'. [ 339.668144][ T6320] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.863332][ T6320] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 339.874180][ T6320] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 339.884149][ T6320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.893857][ T6320] usb 5-1: Product: syz [ 339.902611][ T6320] usb 5-1: Manufacturer: syz [ 339.907264][ T6320] usb 5-1: SerialNumber: syz [ 339.928546][ T6320] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 339.991435][ T6319] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 340.088821][ T6305] usb 4-1: USB disconnect, device number 17 [ 340.197124][ T8597] GUP no longer grows the stack in syz.3.938 (8597): 200000005000-200000008000 (200000004000) [ 340.225520][ T8597] CPU: 1 PID: 8597 Comm: syz.3.938 Not tainted syzkaller #0 [ 340.232869][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.234374][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.243024][ T8597] Call Trace: [ 340.243158][ T8597] [ 340.243169][ T8597] dump_stack_lvl+0x18c/0x250 [ 340.243205][ T8597] ? show_regs_print_info+0x20/0x20 [ 340.243230][ T8597] ? load_image+0x420/0x420 [ 340.243248][ T8597] ? find_vma+0x134/0x1b0 [ 340.243282][ T8597] fixup_user_fault+0x691/0x750 [ 340.243310][ T8597] fault_in_user_writeable+0x71/0xd0 [ 340.243328][ T8597] futex_lock_pi+0x276/0xa00 [ 340.243351][ T8597] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 340.296646][ T8597] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.301880][ T8597] do_futex+0x23d/0x3e0 [ 340.306044][ T8597] ? __ia32_sys_get_robust_list+0x110/0x110 [ 340.311966][ T8597] ? get_sigframe_size+0x20/0x20 [ 340.316920][ T8597] __se_sys_futex+0x3a9/0x440 [ 340.321601][ T8597] ? __x64_sys_futex+0xf0/0xf0 [ 340.326366][ T8597] ? __x64_sys_futex+0x21/0xf0 [ 340.331136][ T8597] do_syscall_64+0x55/0xb0 [ 340.335554][ T8597] ? clear_bhb_loop+0x40/0x90 [ 340.340248][ T8597] ? clear_bhb_loop+0x40/0x90 [ 340.344955][ T8597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.350862][ T8597] RIP: 0033:0x7f587bf9ce59 [ 340.355278][ T8597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.374993][ T8597] RSP: 002b:00007f587cd79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 340.383420][ T8597] RAX: ffffffffffffffda RBX: 00007f587c215fa0 RCX: 00007f587bf9ce59 [ 340.391399][ T8597] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 340.399370][ T8597] RBP: 00007f587c032e6f R08: 0000000000000000 R09: 0000000000000002 [ 340.407344][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.415310][ T8597] R13: 00007f587c216038 R14: 00007f587c215fa0 R15: 00007ffdf8052f08 [ 340.423299][ T8597] [ 340.437996][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.504517][ T6305] usb 5-1: USB disconnect, device number 10 [ 341.009980][ T6319] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 341.033287][ T6319] ath9k_htc: Failed to initialize the device [ 341.072202][ T6305] usb 5-1: ath9k_htc: USB layer deinitialized [ 341.788172][ T6319] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 342.017953][ T6319] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.051866][ T6319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 342.078245][ T6319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 342.089988][ T6319] usb 5-1: Product: syz [ 342.094185][ T6319] usb 5-1: Manufacturer: syz [ 342.120397][ T6319] usb 5-1: SerialNumber: syz [ 342.412083][ T6319] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 344.688403][ T5857] usb 5-1: USB disconnect, device number 11 [ 344.709172][ T5857] usblp0: removed [ 344.836010][ T8700] program syz.3.977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.952681][ T8706] program syz.1.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.146324][ T8712] program syz.1.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.558224][ T6318] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 345.759810][ T6318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.788337][ T6318] usb 2-1: config 0 has no interfaces? [ 345.793898][ T6318] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 345.831434][ T6318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.856475][ T6318] usb 2-1: config 0 descriptor?? [ 346.103175][ T8728] program syz.2.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.118914][ T6318] usb 2-1: USB disconnect, device number 22 [ 346.458336][ T6320] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 346.469861][ T8740] netlink: 27 bytes leftover after parsing attributes in process `syz.3.995'. [ 346.567893][ T8742] netlink: 'syz.4.994': attribute type 4 has an invalid length. [ 346.603970][ T8742] netlink: 'syz.4.994': attribute type 4 has an invalid length. [ 346.946192][ T8748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.997'. [ 347.302943][ T6320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 347.312942][ T6320] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 347.324543][ T6320] usb 3-1: can't read configurations, error -71 [ 348.208563][ T6304] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 348.711867][ T6304] usb 2-1: Using ep0 maxpacket: 8 [ 348.738437][ T6304] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 348.763985][ T6304] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.778426][ T6304] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.788988][ T6304] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.800833][ T6304] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.826115][ T6304] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.826149][ T6304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.832237][ T8775] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1006'. [ 349.045632][ T6304] usb 2-1: usb_control_msg returned -32 [ 349.052228][ T6304] usbtmc 2-1:16.0: can't read capabilities [ 349.668547][ T8778] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 349.700064][ T6304] usb 2-1: USB disconnect, device number 23 [ 349.878326][ T6320] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 350.088511][ T6320] usb 5-1: Using ep0 maxpacket: 16 [ 350.097332][ T6320] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 350.106552][ T6320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.114691][ T6320] usb 5-1: Product: syz [ 350.119197][ T6320] usb 5-1: Manufacturer: syz [ 350.124120][ T6320] usb 5-1: SerialNumber: syz [ 350.131278][ T6320] usb 5-1: config 0 descriptor?? [ 350.139794][ T6320] gspca_main: spca508-2.14.0 probing 041e:4018 [ 350.348210][ T6320] gspca_spca508: reg_read err -32 [ 350.764028][ T8794] netlink: 'syz.2.1010': attribute type 72 has an invalid length. [ 350.772897][ T8794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1010'. [ 350.858483][ T6320] gspca_spca508: reg_read err -110 [ 350.865308][ T6320] gspca_spca508: reg_read err -32 [ 350.876222][ T6320] gspca_spca508: reg_read err -32 [ 350.883146][ T6320] gspca_spca508: reg_read err -32 [ 350.893106][ T6320] gspca_spca508: reg write: error -32 [ 350.899593][ T6320] spca508: probe of 5-1:0.0 failed with error -32 [ 351.114215][ T8800] vcan0: tx address claim with different name [ 351.193560][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 351.879609][ T8811] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1016'. [ 352.096500][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'. [ 352.188111][ T6320] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 352.368421][ T6320] usb 4-1: Using ep0 maxpacket: 8 [ 352.376016][ T6320] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 352.384947][ T6320] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.395131][ T6320] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.405389][ T6320] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.415796][ T6320] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.429164][ T6320] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 352.439391][ T6320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.543281][ T6304] usb 5-1: USB disconnect, device number 12 [ 352.643022][ T8824] netlink: 'syz.4.1024': attribute type 72 has an invalid length. [ 352.651949][ T8824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1024'. [ 352.668243][ T6320] usb 4-1: usb_control_msg returned -32 [ 352.673887][ T6320] usbtmc 4-1:16.0: can't read capabilities [ 353.180610][ T8839] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 353.191816][ T6319] usb 4-1: USB disconnect, device number 18 [ 354.914078][ T8858] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1032'. [ 354.973087][ T8864] tipc: Started in network mode [ 354.983521][ T8864] tipc: Node identity 3a5df7c0faa9, cluster identity 4711 [ 355.007077][ T8864] tipc: Enabled bearer , priority 0 [ 355.038446][ T8864] syzkaller0: entered promiscuous mode [ 355.047198][ T8864] syzkaller0: entered allmulticast mode [ 355.068927][ T8864] tipc: Resetting bearer [ 355.092681][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'. [ 355.694320][ T8857] tipc: Resetting bearer [ 355.713139][ T8857] tipc: Disabling bearer [ 355.848559][ T8874] netlink: 'syz.3.1036': attribute type 72 has an invalid length. [ 355.856989][ T8874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1036'. [ 355.924805][ T5813] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 356.068129][ T6320] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 356.258573][ T6320] usb 3-1: Using ep0 maxpacket: 8 [ 356.273460][ T6320] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 356.286974][ T6320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.301615][ T6320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.314505][ T6320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.331524][ T6320] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.347727][ T6320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 356.364552][ T6320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.590288][ T6320] usb 3-1: usb_control_msg returned -32 [ 356.595936][ T6320] usbtmc 3-1:16.0: can't read capabilities [ 357.143180][ T8893] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 357.153236][ T6290] usb 3-1: USB disconnect, device number 16 [ 357.348105][ T6304] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 357.549273][ T6304] usb 2-1: Using ep0 maxpacket: 16 [ 357.573053][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 357.594724][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 357.625655][ T6304] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.646728][ T6304] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 357.664067][ T6304] usb 2-1: can't read configurations, error -71 [ 358.298371][ T8915] netlink: 'syz.4.1051': attribute type 72 has an invalid length. [ 358.306590][ T8915] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1051'. [ 358.318909][ T8916] tipc: Enabled bearer , priority 0 [ 358.339022][ T8916] syzkaller0: entered promiscuous mode [ 358.344624][ T8916] syzkaller0: entered allmulticast mode [ 358.386935][ T8916] tipc: Resetting bearer [ 358.456715][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1048'. [ 359.049749][ T8910] tipc: Resetting bearer [ 359.121324][ T8910] tipc: Disabling bearer [ 359.135759][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1053'. [ 360.044156][ T8942] netlink: 'syz.3.1060': attribute type 72 has an invalid length. [ 360.068091][ T8942] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1060'. [ 360.208210][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 360.318233][ T6320] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 360.508149][ T6320] usb 5-1: Using ep0 maxpacket: 8 [ 360.515978][ T6320] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 360.525107][ T6320] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.536041][ T6320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.546762][ T6320] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.557343][ T6320] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.570988][ T6320] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.580833][ T6320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.806068][ T6320] usb 5-1: usb_control_msg returned -32 [ 360.812991][ T6320] usbtmc 5-1:16.0: can't read capabilities [ 361.234567][ T8956] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 361.244363][ T6318] usb 5-1: USB disconnect, device number 13 [ 361.912880][ T8969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1071'. [ 361.939510][ T8968] tipc: Enabled bearer , priority 0 [ 361.969446][ T8968] syzkaller0: entered promiscuous mode [ 361.974969][ T8968] syzkaller0: entered allmulticast mode [ 361.984443][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'. [ 362.040030][ T8968] tipc: Resetting bearer [ 362.081465][ T8976] syzkaller0: entered promiscuous mode [ 362.087049][ T8976] syzkaller0: entered allmulticast mode [ 362.226747][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 362.404232][ T8987] syzkaller0: entered promiscuous mode [ 362.410082][ T8987] syzkaller0: entered allmulticast mode [ 362.633656][ T28] audit: type=1326 audit(1782527348.767:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 362.705285][ T8959] tipc: Resetting bearer [ 362.738977][ T28] audit: type=1326 audit(1782527348.767:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 362.787536][ T8959] tipc: Disabling bearer [ 362.807217][ T28] audit: type=1326 audit(1782527348.767:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 362.918097][ T28] audit: type=1326 audit(1782527348.767:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 362.980313][ T28] audit: type=1326 audit(1782527348.767:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 363.077907][ T28] audit: type=1326 audit(1782527348.767:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 363.146797][ T28] audit: type=1326 audit(1782527348.767:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 363.180894][ T28] audit: type=1326 audit(1782527348.767:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 363.216248][ T28] audit: type=1326 audit(1782527348.767:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 363.241364][ T28] audit: type=1326 audit(1782527348.767:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.1.1074" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feaa919ce59 code=0x7ffc0000 [ 363.418447][ T9012] program syz.4.1080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.449301][ T9010] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 363.685788][ T9017] syzkaller0: entered promiscuous mode [ 363.700079][ T9017] syzkaller0: entered allmulticast mode [ 364.146931][ T9025] syz.3.1085 (9025): /proc/9024/oom_adj is deprecated, please use /proc/9024/oom_score_adj instead. [ 364.766380][ T9036] tipc: Started in network mode [ 364.789344][ T9036] tipc: Node identity 26f99b1c5944, cluster identity 4711 [ 364.798596][ T9036] tipc: Enabled bearer , priority 0 [ 364.869114][ T9036] syzkaller0: entered promiscuous mode [ 364.874632][ T9036] syzkaller0: entered allmulticast mode [ 364.899954][ T9036] tipc: Resetting bearer [ 365.012962][ T9041] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 365.432692][ T9051] input: syz1 as /devices/virtual/input/input15 [ 365.479026][ T9030] tipc: Resetting bearer [ 365.676454][ T9030] tipc: Disabling bearer [ 366.428490][ T9066] program syz.1.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.477907][ T9050] syz.3.1094 (9050): drop_caches: 2 [ 367.251790][ T9081] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 367.774992][ T9095] netlink: 'syz.2.1115': attribute type 72 has an invalid length. [ 367.801869][ T9095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1115'. [ 368.149020][ T9108] input: syz1 as /devices/virtual/input/input16 [ 368.972116][ T9107] syz.1.1109 (9107): drop_caches: 2 [ 370.251146][ T9117] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 370.464545][ T9123] syzkaller0: entered promiscuous mode [ 370.471632][ T9123] syzkaller0: entered allmulticast mode [ 370.947491][ T9138] netlink: 'syz.4.1123': attribute type 72 has an invalid length. [ 370.955549][ T9138] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1123'. [ 371.939370][ T9146] input: syz1 as /devices/virtual/input/input17 [ 372.144492][ T9149] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 374.165376][ T9177] netlink: 'syz.4.1132': attribute type 72 has an invalid length. [ 374.188203][ T9177] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1132'. [ 374.375854][ T9186] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 374.486910][ T28] audit: type=1326 audit(1782527360.617:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.510962][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.558140][ T28] audit: type=1326 audit(1782527360.617:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.624028][ T28] audit: type=1326 audit(1782527360.617:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.654307][ T9191] syz.2.1136 (9191): drop_caches: 2 [ 374.665799][ T28] audit: type=1326 audit(1782527360.617:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.691492][ T9193] syzkaller0: entered promiscuous mode [ 374.701085][ T9193] syzkaller0: entered allmulticast mode [ 374.715578][ T28] audit: type=1326 audit(1782527360.667:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.764717][ T28] audit: type=1326 audit(1782527360.667:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.803120][ T28] audit: type=1326 audit(1782527360.667:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 374.827201][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.830792][ T9191] input: syz1 as /devices/virtual/input/input18 [ 375.106129][ T28] audit: type=1326 audit(1782527360.667:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 375.285203][ T28] audit: type=1326 audit(1782527360.667:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.1137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f587bf9ce59 code=0x7ffc0000 [ 375.309246][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.511615][ T9204] netlink: 'syz.3.1141': attribute type 33 has an invalid length. [ 375.550026][ T9204] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1141'. [ 375.658169][ T9204] `: renamed from team0 (while UP) [ 376.034331][ T9218] netlink: 'syz.2.1147': attribute type 72 has an invalid length. [ 376.064470][ T9222] syzkaller0: entered promiscuous mode [ 376.070378][ T9222] syzkaller0: entered allmulticast mode [ 376.080331][ T9218] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1147'. [ 376.567071][ T9240] syz.3.1152 (9240): drop_caches: 2 [ 376.633255][ T9238] input: syz1 as /devices/virtual/input/input19 [ 377.562801][ T9258] syzkaller0: entered promiscuous mode [ 377.569735][ T9258] syzkaller0: entered allmulticast mode [ 377.607069][ T9261] netlink: 'syz.2.1162': attribute type 72 has an invalid length. [ 377.615055][ T9261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1162'. [ 378.508976][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.516439][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.571146][ T9278] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 378.772447][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.781590][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.117054][ T9267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.154752][ T9267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.667149][ T9267] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.676201][ T9267] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.685315][ T9267] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.694264][ T9267] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.901503][ T9267] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.910536][ T9267] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.920116][ T9267] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.929363][ T9267] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.091061][ T9305] netlink: 'syz.3.1174': attribute type 72 has an invalid length. [ 380.108675][ T9305] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1174'. [ 380.176653][ T9313] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 381.767360][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.806510][ T9330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.874252][ T9352] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 382.341419][ T9330] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.351502][ T9330] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.360454][ T9330] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.369413][ T9330] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.656796][ T9364] netlink: 'syz.4.1193': attribute type 72 has an invalid length. [ 382.665475][ T9364] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1193'. [ 383.384304][ T9388] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 383.420808][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.428564][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.789895][ T9403] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 384.152746][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.217944][ T9381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.409152][ T9422] netlink: 'syz.3.1209': attribute type 72 has an invalid length. [ 384.434833][ T9422] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1209'. [ 384.777232][ T9381] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.789167][ T9381] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.808107][ T9381] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.817921][ T9381] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.006340][ T9436] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 385.588666][ T6318] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 385.622854][ T9458] syzkaller0: entered promiscuous mode [ 385.628918][ T9458] syzkaller0: entered allmulticast mode [ 385.788394][ T6318] usb 2-1: Using ep0 maxpacket: 8 [ 385.801139][ T6318] usb 2-1: config 0 has no interfaces? [ 385.818119][ T6318] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 385.827257][ T6318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.864979][ T6318] usb 2-1: config 0 descriptor?? [ 386.253314][ T9485] syzkaller0: entered promiscuous mode [ 386.259372][ T9485] syzkaller0: entered allmulticast mode [ 386.318738][ T5857] usb 2-1: USB disconnect, device number 26 [ 386.339484][ T9486] netlink: 'syz.4.1234': attribute type 72 has an invalid length. [ 386.356446][ T9486] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1234'. [ 386.869220][ T5857] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 387.048733][ T5857] usb 4-1: Using ep0 maxpacket: 8 [ 387.060260][ T5857] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 387.079506][ T5857] usb 4-1: config 179 has no interface number 0 [ 387.089129][ T5857] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 387.107686][ T5857] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 387.119484][ T5857] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 387.136859][ T5857] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 387.153875][ T5857] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 387.167736][ T5857] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 387.179245][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.196012][ T9498] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 387.375025][ T9509] syzkaller0: entered promiscuous mode [ 387.385449][ T9509] syzkaller0: entered allmulticast mode [ 387.635164][ T5839] usb 4-1: USB disconnect, device number 19 [ 387.635169][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 387.635292][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 388.215263][ T9530] syzkaller0: entered promiscuous mode [ 388.228397][ T9530] syzkaller0: entered allmulticast mode [ 388.293328][ T5839] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 388.390263][ T9540] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1256'. [ 388.498149][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 388.510070][ T5839] usb 5-1: config 0 has no interfaces? [ 388.515627][ T5839] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 388.533928][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.560943][ T5839] usb 5-1: config 0 descriptor?? [ 388.934640][ T6318] usb 5-1: USB disconnect, device number 14 [ 388.945557][ T9553] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 389.616930][ T9567] syzkaller0: entered promiscuous mode [ 389.628105][ T6305] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 389.628178][ T9567] syzkaller0: entered allmulticast mode [ 389.812435][ T6305] usb 2-1: Using ep0 maxpacket: 8 [ 389.836565][ T6305] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 389.852258][ T6305] usb 2-1: config 179 has no interface number 0 [ 389.868494][ T6305] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 389.888175][ T6305] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.903571][ T6305] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.922977][ T9575] netlink: 'syz.3.1271': attribute type 72 has an invalid length. [ 389.931393][ T6305] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 389.943565][ T9575] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1271'. [ 389.953053][ T6305] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 389.971531][ T6305] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.981124][ T6305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.993115][ T9563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 390.307861][ T6319] usb 2-1: USB disconnect, device number 27 [ 390.307904][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 390.323119][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 390.354797][ T9581] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 390.710794][ T9595] syzkaller0: entered promiscuous mode [ 390.724328][ T9595] syzkaller0: entered allmulticast mode [ 391.334608][ T9604] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 391.818683][ T9617] syzkaller0: entered promiscuous mode [ 391.824699][ T9617] syzkaller0: entered allmulticast mode [ 392.058172][ T6305] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 392.073625][ T9631] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 392.188167][ T6319] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 392.238299][ T6305] usb 2-1: Using ep0 maxpacket: 32 [ 392.368226][ T6319] usb 5-1: Using ep0 maxpacket: 8 [ 392.380619][ T6319] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 392.408376][ T6319] usb 5-1: config 179 has no interface number 0 [ 392.421459][ T6319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 392.448493][ T6319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 392.471312][ T6319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 392.489416][ T6319] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 392.501410][ T6319] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 392.523740][ T6319] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 392.543201][ T6319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.564894][ T9623] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 392.585099][ T6305] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.612136][ T6305] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 392.636754][ T6305] usb 2-1: can't read configurations, error -71 [ 392.927387][ T5857] usb 5-1: USB disconnect, device number 15 [ 392.927474][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 392.943088][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 393.481032][ T9653] syzkaller0: entered promiscuous mode [ 393.487793][ T9653] syzkaller0: entered allmulticast mode [ 393.833144][ T9663] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 394.388658][ T6305] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 394.568092][ T6305] usb 5-1: Using ep0 maxpacket: 32 [ 394.728127][ T6305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.744514][ T6305] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 394.752949][ T6305] usb 5-1: can't read configurations, error -71 [ 395.727783][ T9693] syzkaller0: entered promiscuous mode [ 395.733764][ T9693] syzkaller0: entered allmulticast mode [ 395.838181][ T5857] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 395.873124][ T9696] netlink: 'syz.3.1314': attribute type 72 has an invalid length. [ 395.881293][ T9696] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1314'. [ 395.928265][ T6313] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 396.038094][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 396.044637][ T5857] usb 3-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 396.057192][ T5857] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 396.066388][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.074460][ T5857] usb 3-1: Product: syz [ 396.078917][ T5857] usb 3-1: Manufacturer: syz [ 396.083630][ T5857] usb 3-1: SerialNumber: syz [ 396.090725][ T5857] usb 3-1: config 0 descriptor?? [ 396.108094][ T6313] usb 2-1: Using ep0 maxpacket: 8 [ 396.115230][ T6313] usb 2-1: config 0 has no interfaces? [ 396.120873][ T6313] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 396.131640][ T6313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.142088][ T6313] usb 2-1: config 0 descriptor?? [ 396.517852][ T6313] usb 2-1: USB disconnect, device number 30 [ 396.557371][ T5857] usb 3-1: USB disconnect, device number 17 [ 396.898164][ T6319] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 397.078888][ T6319] usb 4-1: Using ep0 maxpacket: 32 [ 398.192896][ T28] audit: type=1326 audit(1782527384.317:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.216900][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.259696][ T28] audit: type=1326 audit(1782527384.367:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.283771][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.319580][ T9728] syzkaller0: entered promiscuous mode [ 398.325080][ T9728] syzkaller0: entered allmulticast mode [ 398.349213][ T28] audit: type=1326 audit(1782527384.367:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.438781][ T28] audit: type=1326 audit(1782527384.367:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.526948][ T28] audit: type=1326 audit(1782527384.377:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.626963][ T28] audit: type=1326 audit(1782527384.377:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.650999][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.756753][ T28] audit: type=1326 audit(1782527384.377:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.843814][ T28] audit: type=1326 audit(1782527384.387:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.867716][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.944630][ T28] audit: type=1326 audit(1782527384.387:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 398.968630][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.041234][ T28] audit: type=1326 audit(1782527384.387:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9716 comm="syz.2.1323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5844b9ce59 code=0x7ffc0000 [ 399.065411][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.674201][ T6319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.693124][ T6319] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 399.744483][ T6319] usb 4-1: can't read configurations, error -71 [ 399.789896][ T9736] syzkaller0: entered promiscuous mode [ 399.795504][ T9736] syzkaller0: entered allmulticast mode [ 400.078108][ T5857] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 400.298375][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 400.319866][ T5857] usb 3-1: config 0 has no interfaces? [ 400.325398][ T5857] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 400.334750][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.345305][ T5857] usb 3-1: config 0 descriptor?? [ 400.378836][ T9751] syzkaller0: entered promiscuous mode [ 400.391734][ T9751] syzkaller0: entered allmulticast mode [ 400.716071][ T6313] usb 3-1: USB disconnect, device number 18 [ 400.908119][ T6318] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 401.088552][ T6318] usb 2-1: Using ep0 maxpacket: 32 [ 402.051319][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1343'. [ 402.258130][ T6313] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 402.460103][ T6313] usb 5-1: Using ep0 maxpacket: 8 [ 402.477793][ T6313] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 402.514665][ T6313] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 402.535278][ T6313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.553680][ T6313] usb 5-1: Product: syz [ 402.557979][ T6313] usb 5-1: Manufacturer: syz [ 402.562721][ T6313] usb 5-1: SerialNumber: syz [ 402.577259][ T6313] usb 5-1: config 0 descriptor?? [ 402.974856][ T6313] usb 5-1: USB disconnect, device number 18 [ 403.292342][ T9786] syzkaller0: entered promiscuous mode [ 403.307769][ T9786] syzkaller0: entered allmulticast mode [ 403.657300][ T6318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 403.696806][ T6318] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 403.705718][ T6318] usb 2-1: can't read configurations, error -71 [ 404.098201][ T6319] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 404.298308][ T6319] usb 5-1: Using ep0 maxpacket: 8 [ 404.310953][ T6319] usb 5-1: config 0 has no interfaces? [ 404.318166][ T6319] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 404.341798][ T6319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.408638][ T6319] usb 5-1: config 0 descriptor?? [ 404.681827][ T9811] syzkaller0: entered promiscuous mode [ 404.693223][ T9811] syzkaller0: entered allmulticast mode [ 404.918604][ T6319] usb 5-1: USB disconnect, device number 19 [ 405.516547][ T9821] syzkaller0: entered promiscuous mode [ 405.545529][ T9821] syzkaller0: entered allmulticast mode [ 406.049091][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 406.049176][ T28] audit: type=1326 audit(1782527392.187:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.123016][ T28] audit: type=1326 audit(1782527392.247:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.151127][ T28] audit: type=1326 audit(1782527392.257:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.181465][ T28] audit: type=1326 audit(1782527392.317:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.225937][ T28] audit: type=1326 audit(1782527392.317:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.259002][ T28] audit: type=1326 audit(1782527392.397:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.333994][ T28] audit: type=1326 audit(1782527392.397:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.400539][ T28] audit: type=1326 audit(1782527392.397:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.453066][ T28] audit: type=1326 audit(1782527392.417:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.498248][ T28] audit: type=1326 audit(1782527392.437:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9822 comm="syz.4.1356" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701d79ce59 code=0x7ffc0000 [ 406.710677][ T6319] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 406.918151][ T6319] usb 4-1: Using ep0 maxpacket: 32 [ 406.931294][ T6319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 406.954907][ T6319] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 407.057558][ T6319] usb 4-1: can't read configurations, error -71 [ 407.706813][ T9851] syz_tun: entered promiscuous mode [ 407.715384][ T9851] syz_tun: left promiscuous mode [ 407.820914][ T9853] syzkaller0: entered promiscuous mode [ 407.826558][ T9853] syzkaller0: entered allmulticast mode [ 407.843636][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1368'. [ 407.865884][ T9857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.918220][ T5839] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 408.118305][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 408.125382][ T5839] usb 2-1: config 0 has no interfaces? [ 408.134955][ T5839] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 408.145876][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.164087][ T5839] usb 2-1: config 0 descriptor?? [ 408.178378][ T6319] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 408.398251][ T6319] usb 4-1: Using ep0 maxpacket: 8 [ 408.408425][ T6319] usb 4-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 408.420799][ T6319] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 408.434471][ T6319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.453323][ T6319] usb 4-1: Product: syz [ 408.463874][ T6319] usb 4-1: Manufacturer: syz [ 408.477186][ T6319] usb 4-1: SerialNumber: syz [ 408.495390][ T6319] usb 4-1: config 0 descriptor?? [ 408.566024][ T6305] usb 2-1: USB disconnect, device number 33 [ 408.893117][ T6319] usb 4-1: USB disconnect, device number 23 [ 409.533227][ T9891] syzkaller0: entered promiscuous mode [ 409.548670][ T9891] syzkaller0: entered allmulticast mode [ 410.108171][ T6313] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 410.288621][ T6313] usb 2-1: Using ep0 maxpacket: 8 [ 410.298688][ T6313] usb 2-1: config 0 has no interfaces? [ 410.304400][ T6313] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 410.321643][ T6313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.349090][ T6313] usb 2-1: config 0 descriptor?? [ 410.598828][ T9922] syz_tun: entered promiscuous mode [ 410.619147][ T9922] syz_tun: left promiscuous mode [ 410.733000][ T6319] usb 2-1: USB disconnect, device number 34 [ 410.737868][ T9932] syzkaller0: entered promiscuous mode [ 410.752262][ T9932] syzkaller0: entered allmulticast mode [ 411.018192][ T5839] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 411.208960][ T5839] usb 4-1: Using ep0 maxpacket: 8 [ 411.219685][ T5839] usb 4-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 411.232535][ T5839] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 411.258316][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.273294][ T5839] usb 4-1: Product: syz [ 411.280918][ T5839] usb 4-1: Manufacturer: syz [ 411.288518][ T5839] usb 4-1: SerialNumber: syz [ 411.296654][ T5839] usb 4-1: config 0 descriptor?? [ 411.551525][ T9952] tipc: Cannot configure node identity twice [ 411.568847][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 411.931365][ T5839] usb 4-1: USB disconnect, device number 24 [ 412.408342][ T6313] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 412.418150][ T7183] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 412.558219][ T5839] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 412.598174][ T6313] usb 5-1: Using ep0 maxpacket: 8 [ 412.605919][ T6313] usb 5-1: config 0 has no interfaces? [ 412.611498][ T6313] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 412.620718][ T6313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.631347][ T6313] usb 5-1: config 0 descriptor?? [ 412.738333][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 412.813873][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 412.824945][ T5839] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 412.835832][ T5839] usb 2-1: can't read configurations, error -71 [ 412.915343][ T6313] usb 5-1: USB disconnect, device number 20 [ 421.008742][ T29] INFO: task syz.0.424:7148 blocked for more than 143 seconds. [ 421.016385][ T29] Not tainted syzkaller #0 [ 421.021425][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.030243][ T29] task:syz.0.424 state:D stack:24456 pid:7148 ppid:5801 flags:0x00004004 [ 421.039521][ T29] Call Trace: [ 421.043036][ T29] [ 421.046056][ T29] __schedule+0x15ae/0x4660 [ 421.050754][ T29] ? finish_task_switch+0x25d/0x8f0 [ 421.056048][ T29] ? read_lock_is_recursive+0x20/0x20 [ 421.061618][ T29] ? lock_chain_count+0x20/0x20 [ 421.066490][ T29] ? asan.module_dtor+0x20/0x20 [ 421.071398][ T29] ? __mutex_lock+0x66e/0xc80 [ 421.076097][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 421.081743][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 421.087917][ T29] schedule+0xbd/0x170 [ 421.092042][ T29] schedule_preempt_disabled+0x13/0x20 [ 421.097549][ T29] __mutex_lock+0x673/0xc80 [ 421.102190][ T29] ? __mutex_lock+0x4d2/0xc80 [ 421.106885][ T29] ? pipe_write+0xcc7/0x1b20 [ 421.111625][ T29] ? mutex_lock_nested+0x20/0x20 [ 421.116609][ T29] ? prepare_to_wait_event+0x434/0x470 [ 421.122131][ T29] pipe_write+0xcc7/0x1b20 [ 421.126591][ T29] ? pipe_read+0x1330/0x1330 [ 421.131242][ T29] ? wake_bit_function+0x200/0x200 [ 421.136364][ T29] ? common_file_perm+0x198/0x1f0 [ 421.141609][ T29] vfs_write+0x474/0x9a0 [ 421.145886][ T29] ? file_end_write+0x250/0x250 [ 421.150807][ T29] ? __fget_files+0x3fc/0x460 [ 421.155516][ T29] ? __fdget_pos+0x1d8/0x330 [ 421.160154][ T29] ? ksys_write+0x74/0x260 [ 421.164593][ T29] ksys_write+0x151/0x260 [ 421.168963][ T29] ? __ia32_sys_read+0x90/0x90 [ 421.173753][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 421.179114][ T29] do_syscall_64+0x55/0xb0 [ 421.183549][ T29] ? clear_bhb_loop+0x40/0x90 [ 421.188354][ T29] ? clear_bhb_loop+0x40/0x90 [ 421.193054][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.199127][ T29] RIP: 0033:0x7fda6c39ce59 [ 421.203601][ T29] RSP: 002b:00007fda6d182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.212122][ T29] RAX: ffffffffffffffda RBX: 00007fda6c615fa0 RCX: 00007fda6c39ce59 [ 421.220205][ T29] RDX: 00000000fffffecc RSI: 0000200000000000 RDI: 0000000000000008 [ 421.228556][ T29] RBP: 00007fda6c432e6f R08: 0000000000000000 R09: 0000000000000000 [ 421.236573][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.244631][ T29] R13: 00007fda6c616038 R14: 00007fda6c615fa0 R15: 00007fff4d2639e8 [ 421.252914][ T29] [ 421.255971][ T29] [ 421.255971][ T29] Showing all locks held in the system: [ 421.263827][ T29] 1 lock held by khungtaskd/29: [ 421.268721][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 421.278782][ T29] 2 locks held by kworker/u4:6/1078: [ 421.284111][ T29] 2 locks held by getty/5529: [ 421.288839][ T29] #0: ffff8880311710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 421.298688][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 421.308839][ T29] 1 lock held by syz.0.424/7148: [ 421.313781][ T29] #0: ffff888025c8cc68 (&pipe->mutex/1){+.+.}-{3:3}, at: pipe_write+0xcc7/0x1b20 [ 421.323098][ T29] 1 lock held by syz.0.424/7183: [ 421.328068][ T29] #0: ffff888025c8cc68 (&pipe->mutex/1){+.+.}-{3:3}, at: splice_to_socket+0x163/0x1270 [ 421.337877][ T29] [ 421.340256][ T29] ============================================= [ 421.340256][ T29] [ 421.348713][ T29] NMI backtrace for cpu 1 [ 421.353049][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 421.360246][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.370299][ T29] Call Trace: [ 421.373587][ T29] [ 421.376520][ T29] dump_stack_lvl+0x18c/0x250 [ 421.381196][ T29] ? __wake_up_klogd+0xd9/0x100 [ 421.386069][ T29] ? show_regs_print_info+0x20/0x20 [ 421.391265][ T29] ? load_image+0x420/0x420 [ 421.395774][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 421.400735][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 421.406889][ T29] ? load_image+0x420/0x420 [ 421.411385][ T29] ? wq_watchdog_touch+0xef/0x170 [ 421.416408][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 421.422496][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 421.428473][ T29] watchdog+0xf59/0xfa0 [ 421.432635][ T29] ? watchdog+0x1e1/0xfa0 [ 421.436965][ T29] kthread+0x2fa/0x390 [ 421.441025][ T29] ? hungtask_pm_notify+0x50/0x50 [ 421.446044][ T29] ? kthread_blkcg+0xd0/0xd0 [ 421.450625][ T29] ret_from_fork+0x48/0x80 [ 421.455040][ T29] ? kthread_blkcg+0xd0/0xd0 [ 421.459620][ T29] ret_from_fork_asm+0x11/0x20 [ 421.464412][ T29] [ 421.467620][ T29] Sending NMI from CPU 1 to CPUs 0: [ 421.472875][ C0] NMI backtrace for cpu 0 [ 421.472893][ C0] CPU: 0 PID: 1078 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 421.472908][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.472917][ C0] Workqueue: bat_events batadv_nc_worker [ 421.473026][ C0] RIP: 0010:kasan_check_range+0x4f/0x290 [ 421.473047][ C0] Code: 00 49 89 f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 ff 01 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 <49> ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d [ 421.473086][ C0] RSP: 0018:ffffc9000463f748 EFLAGS: 00000806 [ 421.473098][ C0] RAX: 0000000000000001 RBX: ffff888023e05a00 RCX: ffffffff8168c1b4 [ 421.473109][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911bc500 [ 421.473119][ C0] RBP: 0000000000000009 R08: ffffffff911bc508 R09: 000000000001ffff [ 421.473128][ C0] R10: dffffc0000000000 R11: fffffbfff22378a0 R12: 0000000000000200 [ 421.473138][ C0] R13: dffffc0000000000 R14: ffff888023e06530 R15: 1ffffffff22378a0 [ 421.473156][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 421.473169][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.473179][ C0] CR2: 00007fa5df7f8e50 CR3: 000000007aa40000 CR4: 00000000003506f0 [ 421.473192][ C0] Call Trace: [ 421.473197][ C0] [ 421.473205][ C0] mark_lock+0x94/0x320 [ 421.473224][ C0] __lock_acquire+0xd3e/0x7d80 [ 421.473249][ C0] ? __mod_timer+0x9b0/0xd60 [ 421.473269][ C0] ? verify_lock_unused+0x140/0x140 [ 421.473288][ C0] ? verify_lock_unused+0x140/0x140 [ 421.473309][ C0] lock_acquire+0x19e/0x420 [ 421.473324][ C0] ? batadv_nc_worker+0xd2/0x600 [ 421.473344][ C0] ? batadv_nc_worker+0xd2/0x600 [ 421.473361][ C0] ? read_lock_is_recursive+0x20/0x20 [ 421.473377][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 421.473393][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 421.473416][ C0] ? batadv_nc_worker+0xd2/0x600 [ 421.473433][ C0] batadv_nc_worker+0xef/0x600 [ 421.473449][ C0] ? batadv_nc_worker+0xd2/0x600 [ 421.473466][ C0] ? process_scheduled_works+0x975/0x1600 [ 421.473485][ C0] process_scheduled_works+0xa60/0x1600 [ 421.473513][ C0] ? worker_attach_to_pool+0x370/0x370 [ 421.473532][ C0] ? assign_work+0x3cc/0x5d0 [ 421.473550][ C0] worker_thread+0xa5e/0xfe0 [ 421.473577][ C0] kthread+0x2fa/0x390 [ 421.473590][ C0] ? pr_cont_work+0x550/0x550 [ 421.473606][ C0] ? kthread_blkcg+0xd0/0xd0 [ 421.473620][ C0] ret_from_fork+0x48/0x80 [ 421.473637][ C0] ? kthread_blkcg+0xd0/0xd0 [ 421.473651][ C0] ret_from_fork_asm+0x11/0x20 [ 421.473675][ C0] [ 421.474017][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 421.734452][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 421.741644][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.751693][ T29] Call Trace: [ 421.754966][ T29] [ 421.757894][ T29] dump_stack_lvl+0x18c/0x250 [ 421.762582][ T29] ? show_regs_print_info+0x20/0x20 [ 421.767782][ T29] ? load_image+0x420/0x420 [ 421.772284][ T29] panic+0x2ca/0x720 [ 421.776179][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 421.780680][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 421.786335][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 421.791703][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 421.797855][ T29] watchdog+0xf98/0xfa0 [ 421.802008][ T29] ? watchdog+0x1e1/0xfa0 [ 421.806340][ T29] kthread+0x2fa/0x390 [ 421.810404][ T29] ? hungtask_pm_notify+0x50/0x50 [ 421.815445][ T29] ? kthread_blkcg+0xd0/0xd0 [ 421.820047][ T29] ret_from_fork+0x48/0x80 [ 421.824467][ T29] ? kthread_blkcg+0xd0/0xd0 [ 421.829062][ T29] ret_from_fork_asm+0x11/0x20 [ 421.833845][ T29] [ 421.836971][ T29] Kernel Offset: disabled [ 421.841285][ T29] Rebooting in 86400 seconds..