last executing test programs: 10m59.066026685s ago: executing program 1 (id=2419): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) io_setup(0x1, &(0x7f00000004c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 10m55.808839274s ago: executing program 1 (id=2424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='prev_state.', 0xb) 10m50.60823737s ago: executing program 1 (id=2438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m50.496710587s ago: executing program 1 (id=2439): r0 = semget$private(0x0, 0x7, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)=ANY=[], 0x2b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newtfilter={0x34, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'bridge0\x00'}) sendto$packet(r7, 0x0, 0x0, 0x200000c4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x30a, 0x4, 0x4000]) 10m48.643559757s ago: executing program 1 (id=2441): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b985", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000940)=""/4111, 0x100f}, {&(0x7f0000001a40)=""/4082, 0xff2}, {&(0x7f0000002e80)=""/192, 0xc0}, {&(0x7f0000001980)=""/61, 0x3d}, {&(0x7f0000000700)=""/210, 0xd2}], 0x5}, 0x20) 10m47.427515999s ago: executing program 1 (id=2446): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) execve(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 10m31.526678575s ago: executing program 32 (id=2446): r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) execve(0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 10.332225228s ago: executing program 2 (id=4494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) 7.99117847s ago: executing program 0 (id=4501): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket(0x2, 0x3, 0xff) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e4"], 0x18) brk(0x5d555ede6000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000002100010026bd7000fedbdf25"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x100, 0x4) mount$tmpfs(0x0, 0x0, 0x0, 0x2210081, &(0x7f0000001940)=ANY=[@ANYBLOB=',']) socket$inet_smc(0x2b, 0x1, 0x0) 7.707609235s ago: executing program 2 (id=4502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85}, 0x50) 6.868668317s ago: executing program 0 (id=4504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r5, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "e1ffe2030000000000000019064000", "1d382e23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, 0x0, 0x0, 0x12, 0x0, 0x0) writev(r5, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 6.266529803s ago: executing program 2 (id=4507): unshare(0x28000600) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f00000002c0)) 6.022765035s ago: executing program 3 (id=4509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 5.301839178s ago: executing program 4 (id=4510): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200), 0x0, 0x40, 0x4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.284066631s ago: executing program 5 (id=4511): socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.151102597s ago: executing program 2 (id=4512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x10, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d33864195c5c22f}, 0x60400c0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000002d6400000000000045040300010000001704000001000a00b7040000ff010000720af2fe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) 5.071192495s ago: executing program 4 (id=4513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pause() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000f7c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000dd3000/0x4000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a7, 0x1c891, 0x4, 0x22a}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000260001031dbd7002f4dbdf2520000000050067008be900"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0xff) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000140)={&(0x7f00002c5000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 5.016875547s ago: executing program 5 (id=4514): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfa1, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf93, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf7f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000004000)=""/4095, 0xfff}], 0x1) 4.994638546s ago: executing program 3 (id=4515): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket(0x2, 0x3, 0xff) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e4"], 0x18) brk(0x5d555ede6000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000002100010026bd7000fedbdf25"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x100, 0x4) mount$tmpfs(0x0, 0x0, 0x0, 0x2210081, &(0x7f0000001940)=ANY=[@ANYBLOB=',']) socket$inet_smc(0x2b, 0x1, 0x0) 4.789866235s ago: executing program 5 (id=4516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) read$msr(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r2, &(0x7f0000000800)='file *evio.c +', 0xe) 3.825166829s ago: executing program 4 (id=4517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85}, 0x50) 3.720045524s ago: executing program 3 (id=4518): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 3.367381006s ago: executing program 5 (id=4519): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc004080) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) memfd_create(0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r9, &(0x7f0000004900)={0x2020}, 0x2081) close(0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.882870786s ago: executing program 0 (id=4520): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40d80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.880813992s ago: executing program 3 (id=4521): fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getpeername$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$security_ima(&(0x7f0000000480)='./file7\x00', 0x0, 0x0, 0x0, 0x1) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfc, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x2, 0x0, 0x18}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x400, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x7, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x1000, 0x80000001, 0xffff0000, 0x3f92, 0x9000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x8, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) 2.671921142s ago: executing program 0 (id=4522): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0xb000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000680)="c6b01e0665ae34e0c4b29ee0296b6cd737ec67eece695ca73cb2de00fed8344737524543275fdccf599251b4e5e121f82e12ddd6fea8c19ab6106bbf019b81732d21b50740d235827a73a77a7e7bdeb6fa390f518cb1ef46e48b1b4ef2bab07848402e4e9e2ce1e632256f09623df1c79619c48a7e5e7fd691f145e5a072a26e1d2d609a30057dc549688e0ac753a148fe2bb1fc122fd3d99d85d30dfd3dc9abbf4466c1caa9b8d2185cfc98ed76c4194fbe660ba5171327dfef876d95e2e05253a8204fcd6dd81135e1616cb3d8606cb788fd788c7f449ae44f0bdf1951c77563c91bf9106e1a32b5e30bc90520727848fbef99ca14ab0788adb7290aa875941a4b54556a52d2c1b82f0007f74490384ae94d05b64a5f7aa86630c0a66988b755647c046f70c02fa05b1e812baf94a1a52724b895b7fce7667665b12f46f79a72a22f0b20b01e2344958359acb4e6987c52a4d4ab0d67b39ede8419caad57b70b5ed93c62e251ff8b298dfa6671dc4bb63c0f5b962b6ec210813fa7fce6902993faa5f76982392f4273403c50f5e4f24fb0667e5f5de840b72e284d624f431cf5b4dc2ba0118814f2e156dea668739c4ee4bde20980e67c12537031171cbecf98cfae2dfaf37565bd69776f9791a53053df377042ba076e2526adc00eba4b56ff84b3efec775547a504af385fb0c519263d9aec05191bb89a9ef8b931b9f68eb4c2bc186d58d108c7659f5dc29aa6f32f6707faf3c139b5f14e36eca8f076c7b5e897adade990126b5f61fa64600d69210a85ea8810b16240ab9ef3a8238e7833a1b5c2586829fd20084413206ce570a9f9ba689a7348434b91cd784bd724ac489b580a83e0ed2b663dbead8436848fa4734ca7a5be898db2692a8cd29ab9149efc8037bb73fac754623624891edfbf3c71d0a39f2b1cef40ad3241d8d168111305b7a75095e062b35ea8a6c841063d55040668dc90586ca00e2f489856e0bcdc7d325b0eeb6719a2815cd26f09e355e85c5a2c8b7aca0757034f17e23a00c25db47a6775bf8051d6b3307513b0034982b081c61ec050f2cc7911ad76285b845d8dff6496bdeb34159736e630f5d3454c1acd612f8180b0f74ed33440a2ecf99c50b6d468ccd26f9652baeac4095c2e50b261232df2837562773e7b4c2cd670323c049658a24367464c75a3141b9cd674223a80d60470b1aad7324ebb9601ffbcfe4f24ba6c3401724c99c4bcdc0f6e9696a00f54e25a959296fd65170ceddaf42078bc1865ee2ae9d0ea563b673c5e3cc2b415eeb75a613db913656a80b851616b7cf153be4f6185c306dff5be6ae564b8d963b4b7487e413877725420f8129b2f40684b2d90e3962e0896ba75a297f8ecd8c9867cad779ae12959b9ff32764f8e54c3afc5a90c7a973fa00cc62d4f73c432d9c45e00387ffe0093c456ccf8fe5edc21d7a7d443d32257b716eac4aa681a6f08e57c3afe8886c94e02efc56b14fb47c855a4e73e1a6fbe6bc5e5d340d9d3c0f98f703af7954413c9a40f605bb203a14d9b8239297912af9d2b1145fcaecd2909af745bde053e05a65d0aa95098303aa8d9a80d37174935f4e861893166c3f842e5f422264fa93841b532a4c5572e434df8e5f5c6f4f49162c524750fe47a0a00cdc9c82fd588c49379c9df6ffff2850d7e18b47b6a82cc34d250f1624b1bd416649c019af2533b52b61a6bb380bdc25d43a2e3aebc00e6fca9d8b09d85e8d7e627d5bb424dc0badb31738a40937823933c814401d9d006b37898be6ee71f31f4eeccb5eabaadd8177175d841542a6b826ea4c1b49727a5c9d4ca9422fd04c7b8b22f137551036af00ef7a6a1279b757ef44c96dc7fe5583857e544adc86e28d3421fac3e416a87a0a5c5a830f4533a35b90fc110abc6b92679a759e20c33c9c00eeb7505a28bbf26c58796a28aad32bfc79ba971763c24369c314ff66a669269295a580486eb7e7597d55b25811d98600eb864b9790a93fc4a1160f477b852713f7b5a583d336fde8e9b94a84be91063a310310e7b4a2cd9ae15a053923a725b11efc95f539dd188cad44fad609a408f83999d74e68b17f82ec688024921cc163f9e387545ba65fd0996b2a4bdfda4ef4b16ffa4123716f6426dd2c603488e124b97e382bbed36703331ea1fda641085b23d2d3badc08cced6db5b3cf92e8e203ab72202ec0e9af9e9cddd30513d6d13e64213a9a35a9a2565b18e9e8d0064fcfba1c330bda93f12378a5c933c1c32d799eb2b27d6800a9467d3141bf5262dfe93ba47400fac597d7d469f5741e855a167e32e4928f943d5108a32febcf9b6173c029931f73f8a2725619c64f2b22ee70e119873744456435b6a1535f9411727d148b0f9fd8cd3370cab6d13f81906edf378a4d46aedd09bf0d398437675f3bfd8ffee364c81f189e358653984cce24b031e26e1a98892b9e95405b67158dd2683a5c0ed1d1ecdcc2bd28bdf308c6ec4fc35642d69d61c2b217ea5971fc8fe71b91345d52cd7cb8fc022ddd2b888550d2aff124d05882108c12593363bae7a7522b4d8208ee91343e8428edbf9bb8bd1c31e65df02d20b44d2996a6219282494e8a184606a5e35cb99f0f22217b194a07d40a39d01c45cb7aaf6f844b36e1121a44ed6e5d4af987c093f14694660a99ca2546ede68b4752d4811699c5c09a108d17b58804c92ea52cdb62c5a993278aa64d2de19165077e20c690f65d31a857007bb50dadefbe5fc09039b0a883377d03792595bc0b6b34ddf668d7947c2d914d8697e475f2a139522867622f0a834ba5a8170657271b88dbb334ed09f16360ca55c23adcc27fe298f457a86d40ab9ebdee75e39f7b11b18de8cc7039882feae3f568da160d9b5abc7b627f1802f2ca282ea21c12058b179a560766f0c2be466fcf35f65ebd610ecdc10d2f3d17b3dfd0ec028beaca5e2420a7144d7fdc5d2cb6ffb94aa9968cf14da853e2860bd186faae7459797805478396bb6f56aa5c3df3760c35e8a373590e89515d2a8c3f3c35fd18983a6617d6f57657b0d97d481e453c5575aed03ae5efb2542bbdac91c884ae425fcdae7b850035b55ba5afe2e744c27029cc25562af6c68fd4b8105f21f5c33e2265ae8904dcf1e1e9030b6320b8a7fd26807193430947fbdcf629c6441f707b2a641a30023205585331ca6c070bcf4b368a4fd98ddee57974082cefd451d3ed098f2236b5994a57a73c8eb328a348ee15bc6cbe928c34ba0c01c9e6ff127e42bf88f3074a57f60f99e6673ef04a171216e4211e294d10b9afa3cee77e78523d508ee7d90f940e2c7434caea2c1a2cead46dd79720e15965174646b8ace01d429fe81b693f193801d5df05e2fd183f0bd726f6310159a163d6f7ebfb2eddf4aaec8e7ac40f6b57bcb51812239157837f1186db9a566b2e64175c923a54402b9a55a2df84780f865885be4fe5e0429cf448f5a10b35140f57e6d6bef9eabb4efc403601e0d0da565adb0b99326966e3318b7d5f3649a8ce48765f1da53d45ff95d3b1d7c477c42fd1c1ad804a536bc4f88ff392bf5cdda4caf1e65945124439b0dcab81cdfa547fdbc6a5b083f05006d18ae94d720755d2faf03a63fbc691c8deaa1127919c88e50c5e782f6b2485ba52b8b22a2c6972bf582e9469b2e4a8612d693e0fb9e9dc720db3a1073fb1d44a9d0a230eda6203fba689b4e059a81a90108a5f7f991519adc99e9f7631aca258f7589d736625ba8bb729d8d1d01b2bba4b1ddca20dcb67611864a9a6226afe13eb0999ff7981d06876e9ccdbf2048d5a0f59ebd50fcafd7f7be3e3a9bee154097643ec2fd0d2206378de819fc6e09ec6f66dc0faf88ecbdf6ebe8122fced60c774e4f3b95aef5a2bb385574ac578568f8b7bf195363bcff08f11f3973bea79ab7534b3ecbdb42a285b8f6e4f48cef1ae14b62e6f27bf8283006091d94089d4b4537cf201bcc4c0e45493e704d279c38e39473962425f0937cc0e0bad84a47e8eff6f2bb46aaad484c202884e738aa4f0d4c6c2e22c6e7ecb0299f90060ceb3e3a7a7a9178d88df55e615e080eb8195b1442c3c59c473ac5b92e31878090cf108b5dcf70e021549d3a9db688665441ae508704ba4cdce1bba159d9117d21a323dd13f4eeadb4aec1100bc239114aacd2b7479e162ff1d8ffcecbbb4b6f80c31783e6d317305e1145296c23a9c469efe96995e6f556eea0a323947e4749cdf1f9a9e2d63f20c52303fa6569a8c51dae20bb4035fb7b8b64716d0db978adc2cfbc59102479beb915a3407dbb42dfb8c1603f118144854cd4a82ae09cf542f9b6bf5f70a6739943bceea69d72f8bc40bd8d104998ee2d2872b1bbf502d296e395cf509a6967fbbeb1d41be1b1ba0dadaa40462a136f03c3edaa6467f82c291df4f9d70c869823efa1339ccf8e34e12b4f874b043397711e208bb2c9bc664813b98674c3d69be511a46a75bdd47143e9ad5dfa2c6f4989a9b0a5622120ad3aaeb0e7dadba9a781e407d73e8ba07540c7a8b5f971f3ef8d4a7cce9d4a1b35342e8e56a359788cbd4f3093686919c0e5f12ac51f29ddcca982f9eddf126386c48e8e7e5ff36c1c57b1975b15c1229b48fb8996aa87adf61cd63b34894500cbcf74feecd054df2d939992ebdf0ada7899f5986fb2f8ce75756e910c617eb85631f5f858c57ed47e51a8520b3513fa98644ce626253c8056fc8600b3da8fb0a1c7924c35dc5f852d9d23ca2dea1069af291c4b8d8610b3bdcab8beb9c63a1b2479b44861949169df4a466672635b4bedb81938d6453af378131c18d23aa5ec223c7f7695bf1b244e63bd2c65d4f139098de54b9c1be759fac0d5a5212a5577adbb8ad29d53ece8b6f337f1fdc58ba607e5e4febd334609cc6e68d0b800dd1ca7812c06e23074026cc81a3fdb2ffc532aed4d89a398661f14d3f815eac199f09951b501b522ee9abeeefe1f338b959ac9db053ddf0664aeb9f9386d38b4efd29fbdeb1e66a99f755aabca984b404b7e11167b47b5346f6b0f1e6c9960b79b5549f95c0c1c56860ffed386b3ba7884287dc020de62edab732a6df14b75a0b35a436656459008fc7ca01b2089fb19433776be75b30775125b01b90194383aa3891772f8d9a59dab897277e05bfe37817dfbdd3a15887315d5ef2b1eee915300508ee76fd89747ecae8cbcd00bbf6fad9ea962fa0d87df570a5276d56fe75bd6c3d0ed23b49c37844e55b971aac002dc0f845b66ca18c8675beb79e1e15564beb7cf25daded5cabade2dbc0f9c6c878e11fed2d0b351e7630b738ae9a6f1a4ec629b3da7d4fd666e01052678638aa7960b3483fe12fce2923823679fa48255ab43d5788bed17bab00b2f9d0010abc45564136765a118d79d8e03a4289935955c81b23fa4d2ea0fadfb285f4f0001c9d15b3b3b23212c453353b981cc7493cddc0bec0c4e9f3d565ac8cbdc044c6037c24fa33eefecf017b5f3987756541340190f06ebbd62845c553fee9a4bed7443151c220d0a688c9e6b20ffe008edbc7defd7aef0d593da06479327977e2a24a44d98b5dacd95fed3c742aa13bc83e54f204e663baf2fe9e76485a775410359f8c486ecec39b03baceb41190d772b70fb1e018839a3c85eaa3147a632e05445b0afac70e85db02410bd32f249d5e2d71274b14e7d4966726d0cb16e31b64f7ae3def6f0808943efe5c069c1dbcb998ddf1e44c6be559c66e9cb482c5b589c6a0dfbb328ba7648205ec47c7a986eb91088e0fce53f6d48d18dd909571de403c931e9866fffc9486a512ec2cf217439c29bba6badf13cd9441bdff142b7a000ff2868a5e6f2492da6a10413c1044a3d014f09620c8f5d56968f8c0f9e630fa2955ebf2a2582327397f4c7655e5b33aba40f985f167f1927be12ad6af48594c36641a56c97cece3881857a720118e2f4cad8fe91ff0b205d9dfa4f685dca9db89c2987960ddbefb7a5fb42653ea9097a3dfd82dcf8e5c6df4ee7365db9fa687662f17819dec34e2b3b737f2073c52071a745013e93dfc0f4f710be4aeec355955184b11d14488ad045c9775e2844a09eaa51a6afe41335257b7433162333858c9b6aefa39f2d896e64cd44b6c20d3cad0028c4cbd802994c12da3df1398a34da419f9adeceb6f2bf2f34984d9340c3d6a8b59484c416d4c6aed95233e84784fee158a6eeefac0338bbd6530358e15b2356ab6b3e1e71df61e856ad34b1c214f50156b31dc97230762d331e8fb4c6fc4438f1e07169ca541d8244f0f0c4ad5b3575766bd49a39a0466cf26667ebc1fa2791424c9278e66e0c8fdc4e464f0565422b8d27a2d0eef8107452ede8dfb41fb0f9b6398e81cb3e7313fb3b310089967dbd5319a4e9034d527db908363dc1e725f352c92609b45728328307a6b7f1ef4515f5ddb6196074bec8bf53695dab463ae472d31759c37874b8a94e1fd46947fa976fd7939b1dc471d266b64d239b5ef587ba6b78dc42f5e7189515ebe9a261815eb0d435b335b3bd5dd00d303b0f6c0bedb650e85c171c652c3ce5077e4a8f3eb986ab84054d5ac3ab6f42140eb3e012de009d6dad44486921861f7f5eb17ec530525e94f995ba00bfacd327cc1f7b247ee152995c36ba0103073d75ad99cac57621774f713212bf6eb106bf1138e61dd130e118c5d613e5624be3a81e8cc1f950fae83384c21414ae94f00f4a9943679235ef33312e448e9f01628c4bee57b40fb8e05e10b43ed568db60998c34353b8c56b22f24022a0c652b24fcbbd2854d6798be61f5d8ecd8aeadf609bf99e6ba1d1486ddc139bd11b91827b133fa64e3636b08e1f3497a1e70fb0f8cc8dde485f71a4bd07862fd125809c36f478c11c1e7ffd34a3c2a6e305b98b688b10a1309c65fef6714742aaace1c1afbf391a4be909fd46431e7e8622fa49a0e4b1fe93a8f5f3590983b73d537df85664794407c7ccda33c9a36b3ac37663de28d9b5e7feef51d369792e1cddbfd9e0cb101f9bdc318c0214f4ff6ea369c54d0b6716f727b0aa53c6545f9c198c1e5ee069637c776771ed0c4c90fcfbbb54f3c8a7aaf18a5bb3806a46323fc6a5bc8a1d25e8f44bd4552b9a561a472c2be91165348338fa5ef2a4a2965d1c11a58cb2446e869abb1f82a4c69c54996fecb9210bdb6f91790b32b374863e47cb5fdf3460f24dc114745b656cbb9493264a601066553aa5e999cf98aac32bc8e19ab2c0f165f5ba1d811bf34d3c6b57bcc613f01312eb20413b126ddfe9353a1b4633f6e79a14f29fea41608c88932f269218577a73acb883063b72d28aa5ba00b7dc46f78931981a967f3d1ae5dad463bed2da901a58ac736e845807f8f1ecb424c522784ef1dbc30c32ad16b4a503e9de82dda1b1d0de77314011c386cb522261ca4d31b45af29f9278fab89c009a531dbd5f4a2e7a815c713e5cc150c323056db35aded083fe06a0350319b5f64e3a93e8395c04e820e2510dfafef6063a879ff333fb01d0eaab01d3e9c7d3c243f732018dd5d2d053adb9310f0227caaabe2e274b09c7fb0491178e7aff95c789210a50c3ddf528c6f473779e7841048e933c6334cf5bd07b91779fb0a3eeb0725697a45b9444c9ae8f78a40e337fdd21ba6f15dfbd3b67c199dd2131bb6eb6c024eaa6cfe08605b6d3d8481d741859aeb0b91d2b9710b1d2ff43944ab76a3c8cb9b1b0a8c4d5c18119bf4376b34ab70064fff5c7435126772c70a3281abeec07963f8d4033198f8e31c1f2a3f4595f51e5ab7e4216bc0dc9d864778330321cee4c7c12af0f305803f892fb728e7fd954185b6411c88e36324e36b4f7f02c8b96a9793bdc3484c882ed68839e7c47d2c3fe0484b3597ba0b4526e6322effe54b9945ced0e9b0208f89b55659a4e276febd01580f1f7395f57cb2fa64d5b9314c6661311efe2b4c9855054a7e8b131c59e3eed946df9b6f964ab599f01f4928830aa8c5dd8695294cada841c4256f10ad227d349f8ca1adf74ce022d6aaa88094d1e639011bb1cdce0ccdc8095b7f9b6721ff41f07b23e571a3b2f4da4d918bb8ff920c98380c1c69b7ccedc3f0dd3331e177c82b21eca8fdf0225b280a32e9263c678f008ea3e7177b23eee83115fe8f75dda3674ea480c1f6883228f2c878885e40e02f8b5b37480c013e75a1dd5fc1da628b30a2830d8629a67c0165859443d12eb25f42c212aa990d29ebcf0f2094fbb7e9ba42b26509b8f10059a43114bcc9270e226753a5a17e5928026b9bb40871b5e9a1eb2f604989b04402e364eb1b2f98d64cb2061babbd8f97c679e1ec62a24196df0c066b2c0258557b1aeb77000221716e062d1e7dbc5a9449e07facd1fc09db048ea3a3d3fdcae7dd4161945020429512fcbaa7e8d3e0f112f927522c76b35ae99e9a6217df84b47803b8f82d77c60c7fd0cdb054b8da2bdc5e5eda75ecc6c5598df513d68031c7f802dce5589a5cbd816f6d8691f57a633e60070504cd2ec48ad4442000b44d36099e1d8201dd1f49a26fae00edff7b0a0a6a78636493f01299a09678663d4545e9eb44a52b5df56c187dfe9b1e221ddde83511f59a92d08b2795552a8472a440ab97bdd09af8f38cedecdaab4925d81c409e39263217810c2f8e272f4328c5d25b068c6998d033dfda95f0afa0d2b8686de9e0fa2ca1e6daf3d59569408e29df17c8429a56fa35fe5a27598f99028b913d409817b6e14a6ca706c03863a4a28dc348c6ca4516cadac5b5ae332c8853248bc0b76051517952b58592af239bcd44c6cb2a73b98da8d25915ea32b71c2903408b2011db1c510deb1a4064fa0952ca4a2587e1e51db1a44beeb642c07fc2f5ed67128907d6cffb49231d65d37117510de7e09cd6eb062fdf3ca1132cce7d5792893985a3001f10c5c65420a39ff355589cf53162f6a0884ba5bd002f332a0936c61f7587a226208e0426fc8c417d46e81a1f37320122d119cb7d6ca5a8608c72c0954c45779b5ada916c9ca1d257000f0817c18572f7b0978ac6703b44663a7438654e44fa5c64815da277d8464fb9cdf37d23cb5b53461cb5e740034eb714af27e9d6960ee3f0400c8d62478b03e5356e5454e1deef6dd3faab62b6bdcca4f85efccf3cfb006cc5f516f7bcddcd5507f0abd38fe927c504bba13d6cb33393bea8b78d15fa2487df608016350f72a51e2b032013fd8ec0131839bd20559d9babcad259deeff9b632ef918a3f8b66a0364ffc63aa4a6ce1f803ca0638b3632a4a34390c128a46f0cd7a9eb9f2b182f55a4a8167fd6a0c9ee19376a8d97dcbcfb4b7766b1d29bcf91641b8938160fa230c13ac7810e35fa88ffc8bb7f206a4bba6f01f240560c5ada65eeb7e21f2df6a2a8f43972a65c13dca89925a9c1ddd616a886c7b55758590512e032dad818a5026b8dd90ac396775e180f9c19af62437efdee817b69ce77bdb72df6cb3a88e63ac6cf783ce899ad0dd1bb7d7881fa743846f95866b63ea1efcfb29ee8b7c9028ab84c8959f6fdada02b6a4b6ca75453a3fe8ead77576c31a9a9a25e1cc95934b5c00430e874bf87eae38ef1919c1a0afe5b643b9015e6a35c6d4519c62c2e260e37194186fa9c9bf6ce022be1293aff260eeaf4db4239c21668ab2eea105f729f575a8f29aba5c9f05b8ad56d51cb5c2807a5b5d834e77f8b921f770b12b4815f53c985b89cecd08e8cd8479124356e88b1f9cb34fdfdea9cbac615e290a58b1a3878cf60f0b90a5e94871184c9e4a71f46314e697497686031ea935fa8f7335fd60b9cf71f5fed1350e2e3360d88bc116462e6433d259f679087d8502173d0d520e161b18d86e014658de85151434002441b83dfb6ae4746249b859a9df1fb64c9b311bf9621382a9c26b6533f2b7056010d20c90fcd35c38a42e7dfd1a2f132dbc0bb633c8bce0d082db292f84aa427245d7d91c6b3c398a3c9b36a41ca6d61e3a0a2598f1cc3e2f7236075a2e67dabfe040d11370168eb482d8df9bdfe9b7e20bc23e37dce8a1dd07c71fa2d499b5d2ad03bdedbe413bff85cee36548c2d4ed839b6f5b110e8b10f2df17c54fc6f4dfc795764a838500f77957c30479e48d37878246febbc0d6ac96b299118c34a2e6dc949f8056fb5e20880164cace93a4bc75ca1151a4e8571979c782b3c55f28ec74ccd6f82eef1413eea2af945bfb97d4c3be3e47937ae9f205bf6f8ca6d3e4fd72321b7cde85156031d70077f47e5f9067d8e3a3bca7affef5a4547686418a3fb81687907ff365b0acef18e6bd42ddbd3ea17e45f871b5dc3165c87422511ef116d4c2531a439753b0ef8ed1bee756ae6ac9a663b63c1955421323564c602a46b4c17688830fc8395961c284eb57125f8776e040ed4b18455839a254e11a289fcde337b4faf6833c02e994b53620f6b615bc8a09e63df074ef9fe8a406f7a88b313d9dcdc546d45f618f41daa7afaa6574e005201342f1e01a386956b46b447be6d4366a9add27605f84549f09b62a188ecf2f59ddf50116cdded7818090141f17d34e5fc99ca27911e978aefcdb556485cf55a5c536d7e19768b5f3ea4386b671760d1e263c45965364e979e458766c8a6842260c846f5dd249239ec16673c2a54e702c1943abcda82a9ee3e9bb3feaf887877c8e502974dfe050f0717f5924eca3d5519feeebbd5ab667dfb12fa32d0731ec9bc21b89f0323504a205bf0b9867a8c410472b9f630d9bbc027603acc577cfbad99c05b98ba5be94b43bf0b723329406dc144983bc73d637bc83f447e5ab83170071dbc705172b19186078923b8deed8f6451fc82c0f2543054add16e29656d68e990376479669ea7042826e8ba645f37636a2f774b8f9d348406b4e503e250b12523cba2f287f272938bf88d71b4cbded9b19f586e5b1441f43547e98bb872e5f6e54ad955829aec775f0bb1cfafc1ad92ac52e51385a6c2fd7777a0e39b875c9defce9db49ed7676ad873e530029e999226aa4f85f3613f1326623e88db69f1415715d25952bde634311a8b3b6cf7fb66ca36318168f74abec08531ce22beb68cb89e0f07dc9420db3962d156023adcb20d77bbbc832adf921644f72714a4b81b8f729940761124344004265dbfe5f3acd01b6667bbda452f619aef6c5b0daff4eca26b4223c4a590ea2e55eb96dd73143092e78f5a5fdd7ffb727fd0534518f325f750a3f327c90657423caa30cde599e623dcfa858eed6c754e1f6018686e0c14ee84fae5b4eb563680a1b3475da0609d678bc18bc345d492e759e94a655a32b8b8de425cd554a17ebdfafd65854f3a642b40f259a0356771f562ffc001c2e1c1ca64889a2b1209b1cf360e2702210a6065d48609d8c7f2dd89fcd232f83c68f238072d736b7948246863abcdb1669b1b8ea6e0f0ed9db3f98762d830c7445ec4384fb80cc835eee72bfc493f04911a5111f3355674327652a02b77ea349ba4f90354d04ebd06f609427f4c1e27764c464c4d2bfa545fcff83ea3bed637bee8af6759546cbae16d14f3e9a999b0279ed3987816b8a1cfc89b2cfed90a608994dcdf960adf94803960b4f8fa5ca4499bad2c282a6fc35f293123a9b99", 0x2000, &(0x7f00000037c0)={&(0x7f0000002680)={0x50, 0x0, 0x101, {0x7, 0x2d, 0x5, 0x840, 0x9, 0x100, 0x1000, 0x3, 0x0, 0x0, 0x80, 0x9}}, &(0x7f0000002700)={0x18, 0x0, 0x1, {0x40}}, 0x0, &(0x7f0000002780)={0x18, 0x0, 0x2, {0x2}}, &(0x7f00000027c0)={0x18, 0x0, 0x1, {0x7fff}}, &(0x7f0000002840)={0x28, 0xfffffffffffffffe, 0xa6, {{0x3, 0x5}}}, &(0x7f0000002880)={0x60, 0x0, 0x0, {{0xfff, 0x9, 0x5, 0x9, 0x7, 0x0, 0x2, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)={0xa0, 0x0, 0xfffffffffffffff0, {{0x3, 0x0, 0x0, 0x6, 0x4, 0x0, {0x0, 0x0, 0x80000001, 0x380000000000000, 0x6, 0xfffffffffffffff7, 0x6, 0x9, 0x6, 0x4000, 0x4, 0x0, 0x0, 0x0, 0xdb}}, {0x0, 0x10}}}, 0x0, &(0x7f0000003680)={0x130, 0x0, 0x1d3, {0x4, 0x11d, 0x0, '\x00', {0x200, 0x8, 0x4, 0x8, r1, 0x0, 0x6000, '\x00', 0x9, 0xff, 0x0, 0x9, {0xb6f, 0x62f96d6e}, {0x75, 0x5}, {0x6, 0x1}, {0x100000000, 0x2f}, 0x0, 0xfffffffc, 0xb, 0xb449}}}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0}) 2.455841781s ago: executing program 4 (id=4523): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r1, &(0x7f0000000200), 0x0, 0x40, 0x4, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.715225789s ago: executing program 3 (id=4524): socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.66430333s ago: executing program 0 (id=4525): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000f7c000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000dd3000/0x4000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0xd, &(0x7f0000000040)={0x0, 0x24c8a7, 0x1c891, 0x4, 0x22a}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000260001031dbd7002f4dbdf2520000000050067008be900"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x6, 0x2, 0x7, 0xb, 0x44, "8c00000000fffa00000000ffff00000400", 0x40fff, 0x4}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0xff) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000140)={&(0x7f00002c5000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 1.311124084s ago: executing program 5 (id=4528): syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket(0x2, 0x3, 0xff) syz_emit_vhci(&(0x7f0000004140)=ANY=[@ANYBLOB="041315050100e4"], 0x18) brk(0x5d555ede6000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c0000002100010026bd7000fedbdf25"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x100, 0x4) mount$tmpfs(0x0, 0x0, 0x0, 0x2210081, &(0x7f0000001940)=ANY=[@ANYBLOB=',']) socket$inet_smc(0x2b, 0x1, 0x0) 1.264388993s ago: executing program 0 (id=4529): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0xaa3a6000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4d}]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.099811896s ago: executing program 3 (id=4530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080), 0x0) accept$alg(r3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r5, &(0x7f0000001380)=""/179, 0xb3, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "e1ffe2030000000000000019064000", "1d382e23", "ecba06893bcdc493"}, 0x28) recvfrom(r5, 0x0, 0x0, 0x12, 0x0, 0x0) writev(r5, &(0x7f0000001540)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1.034302166s ago: executing program 2 (id=4531): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) 61.051783ms ago: executing program 5 (id=4532): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x8) r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) capset(0x0, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x0, 0xf, 0xa, {0xa, 0x3, "5fd8db5a5e468084"}}, 0x0, 0x0, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="20012f000000caff8cae4335bb27217d87bbc9bf7277a252b2be018a7512cab1702b5915f34f"], 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}], 0x48}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000004c0)={0x28, 0x0, r5, 0x0, &(0x7f0000342000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r5, 0x0, &(0x7f0000346000/0x4000)=nil, 0x4000, 0x4}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'s526\x00', [0x100, 0x5, 0x2, 0xc, 0xe, 0x5, 0x59, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=4533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85}, 0x50) kernel console output (not intermixed with test programs): 835.972252][T15654] loop2: p2 start 1702059890 is beyond EOD, truncated [ 836.039783][T15336] veth0_vlan: entered promiscuous mode [ 836.080691][T15336] veth1_vlan: entered promiscuous mode [ 836.221992][T15336] veth0_macvtap: entered promiscuous mode [ 836.279461][T15336] veth1_macvtap: entered promiscuous mode [ 836.341670][T15336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.376584][T15336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.453672][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.453764][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.453795][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.453832][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.725359][ T7898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.725397][ T7898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.846259][T15664] binder: 15663:15664 ioctl c0306201 0 returned -14 [ 836.887641][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.887681][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.043014][ T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 837.143405][ T30] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 837.173047][ T25] usb 5-1: device descriptor read/64, error -71 [ 837.304049][ T30] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 837.314417][ T30] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 837.314468][ T30] usb 3-1: config 0 has no interface number 0 [ 837.314509][ T30] usb 3-1: config 0 interface 55 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 837.314541][ T30] usb 3-1: config 0 interface 55 has no altsetting 0 [ 837.356972][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.357014][ T30] usb 3-1: Product: syz [ 837.357044][ T30] usb 3-1: Manufacturer: syz [ 837.357054][ T30] usb 3-1: SerialNumber: syz [ 837.382762][ T30] usb 3-1: config 0 descriptor?? [ 837.413020][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 837.569553][ T25] usb 5-1: device descriptor read/64, error -71 [ 837.632481][ T30] usb 3-1: f81604_read: reg: 105 failed: -EPIPE [ 837.632514][ T30] f81604 3-1:0.55: Setting termination of CH#0 failed: -EPIPE [ 837.632559][ T30] f81604 3-1:0.55: probe with driver f81604 failed with error -32 [ 837.683913][ T25] usb usb5-port1: attempt power cycle [ 838.163264][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 838.186202][ T25] usb 5-1: device descriptor read/8, error -71 [ 838.932948][ T25] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 838.963684][ T25] usb 5-1: device descriptor read/8, error -71 [ 839.171813][ T25] usb usb5-port1: unable to enumerate USB device [ 840.094547][ T5717] usb 3-1: USB disconnect, device number 15 [ 840.958601][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.978805][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.990710][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.019917][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.028055][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.127913][T15730] binder: 15729:15730 ioctl c0306201 0 returned -14 [ 841.618253][ T6412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.802193][ T6412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.166370][ T6412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.271546][ T6412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.142989][T14586] Bluetooth: hci0: command tx timeout [ 843.517819][ T5738] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 843.893013][ T5738] usb 4-1: device descriptor read/64, error -71 [ 843.945095][T15759] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3058'. [ 844.143147][ T5738] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 844.227050][ T5716] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 844.292963][ T5738] usb 4-1: device descriptor read/64, error -71 [ 844.355495][ T7902] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.398219][ T5716] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 844.402097][ T5716] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 844.402122][ T5716] usb 5-1: config 0 has no interface number 0 [ 844.402166][ T5716] usb 5-1: config 0 interface 55 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 844.402193][ T5716] usb 5-1: config 0 interface 55 has no altsetting 0 [ 844.407830][ T5738] usb usb4-port1: attempt power cycle [ 844.419741][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.419769][ T5716] usb 5-1: Product: syz [ 844.419782][ T5716] usb 5-1: Manufacturer: syz [ 844.419796][ T5716] usb 5-1: SerialNumber: syz [ 844.431394][ T5716] usb 5-1: config 0 descriptor?? [ 844.671154][ T6412] bridge_slave_1: left allmulticast mode [ 844.671226][ T6412] bridge_slave_1: left promiscuous mode [ 844.671443][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.702416][ T5716] usb 5-1: f81604_read: reg: 105 failed: -EPIPE [ 844.702471][ T5716] f81604 5-1:0.55: Setting termination of CH#0 failed: -EPIPE [ 844.702512][ T5716] f81604 5-1:0.55: probe with driver f81604 failed with error -32 [ 844.721660][ T6412] bridge_slave_0: left allmulticast mode [ 844.721686][ T6412] bridge_slave_0: left promiscuous mode [ 844.721881][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.803094][ T5738] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 844.823636][ T5738] usb 4-1: device descriptor read/8, error -71 [ 845.062930][ T5738] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 845.117183][ T5738] usb 4-1: device descriptor read/8, error -71 [ 845.225156][ T5738] usb usb4-port1: unable to enumerate USB device [ 845.233894][T14586] Bluetooth: hci0: command tx timeout [ 845.755311][ T6412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.814027][ T6412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.832092][ T6412] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 846.028763][ T6412] bond0 (unregistering): Released all slaves [ 846.093214][ T7902] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.199184][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 846.216300][ T1117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.216359][ T1117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.333166][ T6412] tipc: Left network mode [ 847.088526][ T5756] usb 5-1: USB disconnect, device number 25 [ 847.302953][T14586] Bluetooth: hci0: command tx timeout [ 848.258599][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'. [ 849.383145][T14586] Bluetooth: hci0: command tx timeout [ 849.636947][T15850] loop2: detected capacity change from 0 to 3 [ 849.637486][T15850] Dev loop2: unable to read RDB block 3 [ 849.637518][T15850] loop2: AHDI p1 p2 p3 [ 849.637532][T15850] loop2: partition table partially beyond EOD, truncated [ 849.637653][T15850] loop2: p1 start 1601398130 is beyond EOD, truncated [ 849.637668][T15850] loop2: p2 start 1702059890 is beyond EOD, truncated [ 849.898613][ T6412] hsr_slave_0: left promiscuous mode [ 849.909020][ T6412] hsr_slave_1: left promiscuous mode [ 849.925743][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.925784][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.929899][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.929919][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.980423][ T6412] veth1_macvtap: left promiscuous mode [ 849.986172][ T6412] veth0_macvtap: left promiscuous mode [ 849.986281][ T6412] veth1_vlan: left promiscuous mode [ 849.986343][ T6412] veth0_vlan: left promiscuous mode [ 851.153479][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 851.663453][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 851.672061][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 851.685468][ T25] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.696796][ T25] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.696856][ T25] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 851.696890][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 851.696931][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.756928][ T25] usb 4-1: config 0 descriptor?? [ 852.416374][ T25] usb 4-1: USB disconnect, device number 14 [ 852.577388][ T6412] team0 (unregistering): Port device team_slave_1 removed [ 852.617865][ T6412] team0 (unregistering): Port device team_slave_0 removed [ 853.361815][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 853.612632][T15886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 854.446739][T15723] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.446852][T15723] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.446988][T15723] bridge_slave_0: entered allmulticast mode [ 854.453766][T15723] bridge_slave_0: entered promiscuous mode [ 854.460507][T15723] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.460606][T15723] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.460767][T15723] bridge_slave_1: entered allmulticast mode [ 854.554840][T15723] bridge_slave_1: entered promiscuous mode [ 854.857204][T15723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.868452][T15723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.167961][T15723] team0: Port device team_slave_0 added [ 856.407589][T15723] team0: Port device team_slave_1 added [ 856.813891][T15723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.813923][T15723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.819021][T15723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.849157][T15723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.849175][T15723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.849202][T15723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.859169][ T6412] IPVS: stop unused estimator thread 0... [ 856.913900][T14586] Bluetooth: hci2: command 0x0406 tx timeout [ 857.228957][T15723] hsr_slave_0: entered promiscuous mode [ 857.241465][T15723] hsr_slave_1: entered promiscuous mode [ 857.245302][T15723] debugfs: 'hsr0' already exists in 'hsr' [ 857.245323][T15723] Cannot create hsr debugfs directory [ 858.261924][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 858.622788][T15723] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.799369][ T108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.309582][T15723] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.710650][ T108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.080922][T15723] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.527870][ T108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.152351][T15723] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.459149][ T108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.714202][ T6412] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.238305][T16029] loop2: detected capacity change from 0 to 3 [ 866.303989][T16029] Dev loop2: unable to read RDB block 3 [ 866.304030][T16029] loop2: AHDI p1 p2 p3 [ 866.304063][T16029] loop2: partition table partially beyond EOD, truncated [ 866.304214][T16029] loop2: p1 start 1601398130 is beyond EOD, truncated [ 866.304230][T16029] loop2: p2 start 1702059890 is beyond EOD, truncated [ 866.562393][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'. [ 866.562433][T16032] netlink: 'syz.3.3113': attribute type 10 has an invalid length. [ 866.562458][T16032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3113'. [ 867.594876][ T1013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.711063][T16032] geneve2: entered promiscuous mode [ 867.721824][T16032] geneve2: entered allmulticast mode [ 868.777406][ T31] audit: type=1800 audit(1786555040.755:108): pid=16044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3115" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 868.777839][T16044] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 868.777884][T16044] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 868.777934][T16044] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 868.807719][T15119] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.808436][T15119] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.177907][ T108] bridge_slave_1: left allmulticast mode [ 869.177942][ T108] bridge_slave_1: left promiscuous mode [ 869.193341][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.220018][ T108] bridge_slave_0: left allmulticast mode [ 869.230079][ T108] bridge_slave_0: left promiscuous mode [ 869.237107][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.369510][T16052] loop3: detected capacity change from 0 to 2048 [ 869.459736][T16052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.159104][ T108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.185165][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.193314][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.226679][ T108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.260169][T14584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.260470][ T108] bond0 (unregistering): Released all slaves [ 870.416307][T15723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 870.503327][T15723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.510896][ T108] tipc: Left network mode [ 870.517857][T15723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 870.577993][T15723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.592588][T15723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.625274][T15723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.634781][T15723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 870.669460][T15723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.846613][ T108] hsr_slave_0: left promiscuous mode [ 871.897045][ T108] hsr_slave_1: left promiscuous mode [ 871.898454][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.898476][ T108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.919138][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.919183][ T108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.977000][ T108] veth1_macvtap: left promiscuous mode [ 871.993258][ T108] veth0_macvtap: left promiscuous mode [ 872.001274][ T108] veth1_vlan: left promiscuous mode [ 872.006788][ T108] veth0_vlan: left promiscuous mode [ 872.443331][ T31] audit: type=1326 audit(1786555044.425:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.471955][ T31] audit: type=1326 audit(1786555044.445:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.525234][ T31] audit: type=1326 audit(1786555044.485:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.525291][ T31] audit: type=1326 audit(1786555044.485:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.553298][ T31] audit: type=1326 audit(1786555044.535:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.555888][ T31] audit: type=1326 audit(1786555044.535:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.555917][ T31] audit: type=1326 audit(1786555044.535:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.561995][ T31] audit: type=1326 audit(1786555044.535:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.562040][ T31] audit: type=1326 audit(1786555044.535:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.5.3127" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 872.636042][ T5738] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 872.832977][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 872.840234][ T5738] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 872.856812][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.856858][ T5738] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 872.856916][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.892439][ T5738] usb 4-1: config 0 descriptor?? [ 873.625478][ T5738] kye 0003:0458:5016.0010: control desc unexpectedly large [ 873.681223][ T5738] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0010/input/input26 [ 873.714801][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 874.487757][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 874.512204][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 874.529690][ T25] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.529741][ T25] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.529789][ T25] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 874.529817][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 874.529851][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.651224][ T5738] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0010/input/input27 [ 874.694332][ T25] usb 6-1: config 0 descriptor?? [ 874.847318][ T5738] kye 0003:0458:5016.0010: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 875.077545][ T108] team0 (unregistering): Port device team_slave_1 removed [ 875.159061][ T25] hid (null): bogus close delimiter [ 875.163641][T12360] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 875.271358][ T108] team0 (unregistering): Port device team_slave_0 removed [ 875.332757][ T25] usb 6-1: USB disconnect, device number 6 [ 876.123830][ T5756] usb 4-1: USB disconnect, device number 15 [ 876.252725][T15723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.290721][T15723] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.314845][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.314985][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.373460][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.373553][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.559460][T16144] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3137'. [ 877.188843][ T25] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 877.359552][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 877.369999][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.380502][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 877.390345][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 877.401055][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 877.415801][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.868732][ T25] gud 5-1:1.0: probe with driver gud failed with error -121 [ 878.086118][ T25] usb 5-1: USB disconnect, device number 26 [ 878.508675][T15723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.658839][T15723] veth0_vlan: entered promiscuous mode [ 878.704887][T15723] veth1_vlan: entered promiscuous mode [ 878.967962][T15723] veth0_macvtap: entered promiscuous mode [ 878.984326][T15723] veth1_macvtap: entered promiscuous mode [ 879.556232][T15723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.561519][T15723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.567492][ T5738] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 879.620882][ T108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.620958][ T108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.620990][ T108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.660091][ T7652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.732905][ T5738] usb 6-1: Using ep0 maxpacket: 16 [ 879.733625][ T5738] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 879.737967][ T5738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.737997][ T5738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.738032][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.765239][ T5738] usb 6-1: config 0 descriptor?? [ 880.122096][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.122136][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.246519][ T5738] kye 0003:0458:5016.0012: control desc unexpectedly large [ 880.299062][ T5738] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0012/input/input28 [ 880.330233][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.330276][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.460440][ T5738] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0012/input/input29 [ 880.745366][ T5738] kye 0003:0458:5016.0012: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 880.791601][ T5738] usb 6-1: USB disconnect, device number 7 [ 881.140321][T16210] fido_id[16210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 883.657217][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'. [ 884.017276][ T6412] IPVS: starting estimator thread 0... [ 884.066542][T16262] netlink: 'syz.4.3160': attribute type 3 has an invalid length. [ 884.123266][T16261] IPVS: using max 30 ests per chain, 72000 per kthread [ 885.223620][ T5716] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 885.373344][ T5716] usb 1-1: Using ep0 maxpacket: 16 [ 885.382342][ T5716] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 885.400942][ T5716] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.400995][ T5716] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.401038][ T5716] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 885.401068][ T5716] usb 1-1: config 0 interface 0 has no altsetting 0 [ 885.401104][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.459204][ T5716] usb 1-1: config 0 descriptor?? [ 885.894945][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 885.904232][ T5716] usbhid 1-1:0.0: can't add hid device: -71 [ 885.904347][ T5716] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 885.928420][ T5716] usb 1-1: USB disconnect, device number 26 [ 888.963421][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 892.163098][ T5756] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 892.184492][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801c7b5000: rx timeout, send abort [ 892.184857][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801c7b5000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 892.293620][ T5756] usb 6-1: device descriptor read/64, error -71 [ 892.331962][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 892.533846][ T5756] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 892.675449][ T5756] usb 6-1: device descriptor read/64, error -71 [ 892.798367][ T5756] usb usb6-port1: attempt power cycle [ 893.192941][ T5756] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 893.305428][ T5756] usb 6-1: device descriptor read/8, error -71 [ 893.546405][ T5756] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 893.574112][ T5756] usb 6-1: device descriptor read/8, error -71 [ 893.693237][ T5756] usb usb6-port1: unable to enumerate USB device [ 895.777196][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 896.514582][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807edef400: rx timeout, send abort [ 896.514821][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807edef400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 896.625487][T16450] loop2: detected capacity change from 0 to 3 [ 896.739510][T16450] Dev loop2: unable to read RDB block 3 [ 896.739560][T16450] loop2: AHDI p1 p2 p3 [ 896.739592][T16450] loop2: partition table partially beyond EOD, truncated [ 896.739785][T16450] loop2: p1 start 1601398130 is beyond EOD, truncated [ 896.739813][T16450] loop2: p2 start 1702059890 is beyond EOD, truncated [ 898.691091][T16465] input: syz1 as /devices/virtual/input/input30 [ 899.381138][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 899.563098][ T5716] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 899.713072][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 899.724426][ T5716] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 899.748991][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.760377][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.774625][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 899.786837][ T5716] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 899.799115][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 899.928190][ T5716] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 899.937997][ T5716] usb 4-1: Manufacturer: syz [ 899.984570][ T5716] usb 4-1: config 0 descriptor?? [ 900.565579][ T5716] rc_core: IR keymap rc-hauppauge not found [ 900.571637][ T5716] Registered IR keymap rc-empty [ 900.577720][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.603031][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.635398][ T5716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 900.653072][ T5738] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 900.666496][ T5716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 900.736517][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.892923][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 900.893623][ T5738] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 900.894611][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.894638][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.894672][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.899389][ T5738] usb 3-1: config 0 descriptor?? [ 900.959943][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.973079][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 900.994336][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.017241][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.033054][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.053080][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 901.600320][ T5738] usbhid 3-1:0.0: can't add hid device: -71 [ 901.600444][ T5738] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 901.637066][ T5738] usb 3-1: USB disconnect, device number 16 [ 902.037806][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 902.050126][T14385] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 902.068423][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 902.135971][ T5716] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 902.200243][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058cb7800: rx timeout, send abort [ 902.200471][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058cb7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 902.303627][T14385] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.317292][T14385] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 902.317337][T14385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.317371][T14385] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 902.317395][T14385] usb 5-1: config 1 has no interface number 0 [ 902.317436][T14385] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 902.371257][T14385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.371302][T14385] usb 5-1: Product: syz [ 902.371332][T14385] usb 5-1: Manufacturer: syz [ 902.371350][T14385] usb 5-1: SerialNumber: syz [ 902.409827][T14385] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 904.453528][T14385] usb 5-1: USB disconnect, device number 27 [ 904.467602][T16511] loop2: detected capacity change from 0 to 2048 [ 904.476980][ T5716] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 904.477029][ T5716] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 904.584197][ T5716] usb 4-1: USB disconnect, device number 16 [ 904.608445][T16511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.985402][T15723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.213597][T14385] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 905.372988][T14385] usb 6-1: Using ep0 maxpacket: 16 [ 905.381013][T14385] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 905.395898][T14385] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.395949][T14385] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.395978][T14385] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 905.396009][T14385] usb 6-1: config 0 interface 0 has no altsetting 0 [ 905.396046][T14385] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.470666][T14385] usb 6-1: config 0 descriptor?? [ 906.761836][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058fd9c00: rx timeout, send abort [ 906.762467][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058fd9c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 907.499302][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 907.611640][T14385] usbhid 6-1:0.0: can't add hid device: -71 [ 907.619614][T14385] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 907.635987][T14385] usb 6-1: USB disconnect, device number 12 [ 910.224690][ T31] audit: type=1326 audit(1786555081.335:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16568 comm="syz.0.3240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 910.224765][ T31] audit: type=1326 audit(1786555081.335:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16568 comm="syz.0.3240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 910.224819][ T31] audit: type=1326 audit(1786555081.335:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16568 comm="syz.0.3240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 910.224862][ T31] audit: type=1326 audit(1786555081.335:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16568 comm="syz.0.3240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 910.224905][ T31] audit: type=1326 audit(1786555081.335:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16568 comm="syz.0.3240" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 910.739957][T16578] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3244'. [ 910.740004][T16578] openvswitch: netlink: Message has 4 unknown bytes. [ 915.551792][T16615] loop2: detected capacity change from 0 to 3 [ 915.559736][T16615] Dev loop2: unable to read RDB block 3 [ 915.559767][T16615] loop2: AHDI p1 p2 p3 [ 915.559780][T16615] loop2: partition table partially beyond EOD, truncated [ 915.559909][T16615] loop2: p1 start 1601398130 is beyond EOD, truncated [ 915.559921][T16615] loop2: p2 start 1702059890 is beyond EOD, truncated [ 917.165512][ T31] audit: type=1326 audit(1786555088.545:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.4.3253" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 917.165582][ T31] audit: type=1326 audit(1786555088.555:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.4.3253" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 917.165641][ T31] audit: type=1326 audit(1786555088.555:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.4.3253" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 917.165682][ T31] audit: type=1326 audit(1786555088.565:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.4.3253" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 917.165721][ T31] audit: type=1326 audit(1786555088.565:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16622 comm="syz.4.3253" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 918.885310][ T5738] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 919.073038][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 919.081926][ T5738] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 919.096205][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.096264][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.096321][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.129462][ T5738] usb 1-1: config 0 descriptor?? [ 919.596365][T16645] input: syz1 as /devices/virtual/input/input32 [ 919.624398][T16644] syz.2.3258 (16644): drop_caches: 2 [ 920.083693][ T5738] usbhid 1-1:0.0: can't add hid device: -71 [ 920.083809][ T5738] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 920.101534][ T5738] usb 1-1: USB disconnect, device number 27 [ 923.848859][ T31] audit: type=1326 audit(1786555095.185:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16684 comm="syz.5.3264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 923.848931][ T31] audit: type=1326 audit(1786555095.185:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16684 comm="syz.5.3264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 923.848986][ T31] audit: type=1326 audit(1786555095.185:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16684 comm="syz.5.3264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 923.849024][ T31] audit: type=1326 audit(1786555095.185:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16684 comm="syz.5.3264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 923.849063][ T31] audit: type=1326 audit(1786555095.185:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16684 comm="syz.5.3264" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 926.334977][T16725] loop2: detected capacity change from 0 to 3 [ 926.344268][T16725] Dev loop2: unable to read RDB block 3 [ 926.344316][T16725] loop2: AHDI p1 p2 p3 [ 926.344334][T16725] loop2: partition table partially beyond EOD, truncated [ 926.344547][T16725] loop2: p1 start 1601398130 is beyond EOD, truncated [ 926.344566][T16725] loop2: p2 start 1702059890 is beyond EOD, truncated [ 926.563342][ T4984] Dev loop2: unable to read RDB block 3 [ 926.570266][ T4984] loop2: AHDI p1 p2 p3 [ 926.575439][ T4984] loop2: partition table partially beyond EOD, truncated [ 926.583378][ T4984] loop2: p1 start 1601398130 is beyond EOD, truncated [ 926.591596][ T4984] loop2: p2 start 1702059890 is beyond EOD, truncated [ 927.218865][ T31] audit: type=1326 audit(1786555099.045:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.4.3277" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 927.218942][ T31] audit: type=1326 audit(1786555099.055:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.4.3277" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 927.219003][ T31] audit: type=1326 audit(1786555099.065:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.4.3277" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 927.220283][ T31] audit: type=1326 audit(1786555099.065:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.4.3277" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 927.220333][ T31] audit: type=1326 audit(1786555099.065:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16730 comm="syz.4.3277" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 931.637926][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.638004][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.620342][T16799] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3294'. [ 933.632222][T16799] openvswitch: netlink: Message has 4 unknown bytes. [ 933.703014][T14586] Bluetooth: hci3: command 0x0406 tx timeout [ 935.575618][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 935.813216][ T5756] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 935.963906][ T5756] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 935.978387][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.978429][ T5756] usb 3-1: Product: syz [ 936.087104][ T5756] usb 3-1: Manufacturer: syz [ 936.094171][ T5756] usb 3-1: SerialNumber: syz [ 936.601838][ T5628] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 937.129242][ T5756] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 937.129308][ T5756] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 937.272587][T16844] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3307'. [ 937.282960][T16844] openvswitch: netlink: Message has 4 unknown bytes. [ 937.758455][ T5756] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 937.758537][ T5756] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 937.868937][ T5756] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 937.908375][ T5756] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 937.940772][ T5756] usb 3-1: USB disconnect, device number 17 [ 937.986802][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3314'. [ 938.053263][ T5716] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 938.207261][ T5716] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 938.218921][ T5716] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 938.218953][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.219351][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 938.219373][ T5716] usb 1-1: config 1 has no interface number 0 [ 938.219410][ T5716] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 938.245286][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.245313][ T5716] usb 1-1: Product: syz [ 938.245327][ T5716] usb 1-1: Manufacturer: syz [ 938.245340][ T5716] usb 1-1: SerialNumber: syz [ 938.258262][ T5716] cdc_wdm 1-1:1.128: skipping garbage [ 938.258290][ T5716] cdc_wdm 1-1:1.128: probe with driver cdc_wdm failed with error -22 [ 938.566607][ T5738] usb 1-1: USB disconnect, device number 28 [ 939.507936][ T5716] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 939.624126][T16880] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3321'. [ 939.624183][T16880] openvswitch: netlink: Message has 4 unknown bytes. [ 939.702999][ T5716] usb 6-1: Using ep0 maxpacket: 32 [ 939.711280][ T5716] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 939.713539][ T5716] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 939.713564][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.713581][ T5716] usb 6-1: config 0 has no interface number 0 [ 939.713617][ T5716] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 939.720180][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.720204][ T5716] usb 6-1: Product: syz [ 939.720218][ T5716] usb 6-1: Manufacturer: syz [ 939.720232][ T5716] usb 6-1: SerialNumber: syz [ 939.724684][ T5716] usb 6-1: config 0 descriptor?? [ 939.776923][ T5716] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 939.777003][ T5716] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 939.968205][ T5716] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 940.224955][ T5716] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 940.539353][ T5716] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 940.554831][ T5716] usb 6-1: USB disconnect, device number 13 [ 940.565986][ T5716] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 940.706572][T16894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.250825][T16925] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3335'. [ 943.250871][T16925] openvswitch: netlink: Message has 512 unknown bytes. [ 944.563045][ T5756] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 944.945814][ T5756] usb 3-1: Using ep0 maxpacket: 16 [ 944.947233][ T5756] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 944.966645][ T5756] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.966700][ T5756] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.966722][ T5756] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 944.966744][ T5756] usb 3-1: config 0 interface 0 has no altsetting 0 [ 944.966775][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.066348][ T5756] usb 3-1: config 0 descriptor?? [ 946.209112][ T5756] usbhid 3-1:0.0: can't add hid device: -71 [ 946.209243][ T5756] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 946.287868][ T5756] usb 3-1: USB disconnect, device number 18 [ 952.144369][T17032] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3371'. [ 952.156889][T17032] openvswitch: netlink: Message has 512 unknown bytes. [ 959.269170][T17116] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3398'. [ 959.269218][T17116] openvswitch: netlink: Message has 512 unknown bytes. [ 959.593030][ T5738] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 959.744156][ T5738] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.757457][ T5738] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 959.757510][ T5738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.757543][ T5738] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 959.757567][ T5738] usb 3-1: config 1 has no interface number 0 [ 959.757608][ T5738] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 959.820611][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.820658][ T5738] usb 3-1: Product: syz [ 959.820688][ T5738] usb 3-1: Manufacturer: syz [ 959.820706][ T5738] usb 3-1: SerialNumber: syz [ 959.867761][ T5738] cdc_wdm 3-1:1.128: skipping garbage [ 959.867809][ T5738] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 960.072066][ T5738] usb 3-1: USB disconnect, device number 19 [ 961.202384][T17145] block nbd0: not configured, cannot reconfigure [ 963.262966][T12359] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 963.417683][T12359] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 963.423145][T12359] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 963.423171][T12359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.423188][T12359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 963.423207][T12359] usb 5-1: config 1 has no interface number 0 [ 963.423244][T12359] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 963.461459][T12359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.461486][T12359] usb 5-1: Product: syz [ 963.461500][T12359] usb 5-1: Manufacturer: syz [ 963.461515][T12359] usb 5-1: SerialNumber: syz [ 963.481857][T12359] cdc_wdm 5-1:1.128: skipping garbage [ 963.481879][T12359] cdc_wdm 5-1:1.128: skipping garbage [ 963.481900][T12359] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 963.683998][ T5738] usb 5-1: USB disconnect, device number 28 [ 964.064534][T17182] loop2: detected capacity change from 0 to 2048 [ 964.094460][T17182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.206377][T15723] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.829736][ T966] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 965.984590][ T966] usb 6-1: Using ep0 maxpacket: 16 [ 965.991435][ T966] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 966.001946][ T966] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.001999][ T966] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.002043][ T966] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 966.002081][ T966] usb 6-1: config 0 interface 0 has no altsetting 0 [ 966.002113][ T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.057426][ T966] usb 6-1: config 0 descriptor?? [ 966.213038][T14385] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 966.363790][T14385] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 966.374985][T14385] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.375078][T14385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 966.375110][T14385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 966.413367][T14385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.413410][T14385] usb 3-1: Product: syz [ 966.413470][T14385] usb 3-1: Manufacturer: syz [ 966.413490][T14385] usb 3-1: SerialNumber: syz [ 966.438471][T14385] usb 3-1: config 0 descriptor?? [ 966.446249][T17211] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 966.553128][T14385] rc_core: IR keymap rc-streamzap not found [ 966.563045][T14385] Registered IR keymap rc-empty [ 966.569756][T14385] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 966.587975][T14385] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 966.671958][ T966] usbhid 6-1:0.0: can't add hid device: -71 [ 966.672166][ T966] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 966.690502][ T966] usb 6-1: USB disconnect, device number 14 [ 968.130696][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3441'. [ 970.699332][T12359] usb 3-1: USB disconnect, device number 20 [ 972.597144][T17291] loop3: detected capacity change from 0 to 2048 [ 972.625622][T17291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.495397][T14584] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.485841][T17328] netlink: 'syz.3.3466': attribute type 10 has an invalid length. [ 974.494823][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3466'. [ 974.506084][T17328] dummy0: entered promiscuous mode [ 975.466300][T17333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3469'. [ 978.444799][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3485'. [ 984.943211][ T5628] Bluetooth: hci0: command 0x0406 tx timeout [ 985.025294][T17499] syz.0.3521 (17499): drop_caches: 2 [ 985.098321][T17499] input: syz1 as /devices/virtual/input/input34 [ 985.624000][ T1872] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 985.762922][ T1872] usb 4-1: device descriptor read/64, error -71 [ 986.004297][ T1872] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 986.147810][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3529'. [ 986.173166][ T1872] usb 4-1: device descriptor read/64, error -71 [ 986.284817][ T1872] usb usb4-port1: attempt power cycle [ 986.786236][T17529] binder: 17527:17529 ioctl c0306201 0 returned -14 [ 986.797347][ T1872] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 986.813923][ T1872] usb 4-1: device descriptor read/8, error -71 [ 987.522945][ T1872] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 987.543618][ T1872] usb 4-1: device descriptor read/8, error -71 [ 987.762925][ T1872] usb usb4-port1: unable to enumerate USB device [ 987.904307][T17560] syz.4.3541 (17560): drop_caches: 2 [ 987.918664][T17560] input: syz1 as /devices/virtual/input/input35 [ 988.038444][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 989.752936][T12360] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 989.913795][T12360] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 989.924133][T12360] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 989.924176][T12360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.924214][T12360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 989.924239][T12360] usb 4-1: config 1 has no interface number 0 [ 989.924280][T12360] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 989.944891][T12359] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 989.945169][ T5756] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 989.975680][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3560'. [ 990.008678][T12360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.018336][T12360] usb 4-1: Product: syz [ 990.022717][T12360] usb 4-1: Manufacturer: syz [ 991.127131][T12360] usb 4-1: SerialNumber: syz [ 991.151536][T12360] cdc_wdm 4-1:1.128: skipping garbage [ 991.159503][T12360] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 991.185029][T12359] usb 3-1: device descriptor read/64, error -71 [ 991.213685][ T5756] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 991.224280][ T5756] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.224320][ T5756] usb 6-1: config 0 has no interfaces? [ 991.224362][ T5756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.250200][ T5756] usb 6-1: config 0 descriptor?? [ 991.366407][ T966] usb 4-1: USB disconnect, device number 21 [ 991.432982][T12359] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 991.507431][ T1872] usb 6-1: USB disconnect, device number 15 [ 991.583194][T12359] usb 3-1: device descriptor read/64, error -71 [ 991.695306][T12359] usb usb3-port1: attempt power cycle [ 992.603153][T12359] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 992.633794][T12359] usb 3-1: device descriptor read/8, error -71 [ 992.865406][T17641] syz.5.3571 (17641): drop_caches: 2 [ 992.892610][T17641] input: syz1 as /devices/virtual/input/input36 [ 992.967744][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 993.068383][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.068459][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.549362][T17659] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3582'. [ 993.549420][T17659] openvswitch: netlink: Message has 512 unknown bytes. [ 996.304874][ T31] audit: type=1326 audit(1786555167.735:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17669 comm="syz.2.3586" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd855d9e0d9 code=0x7ffc0000 [ 996.304947][ T31] audit: type=1326 audit(1786555167.735:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17669 comm="syz.2.3586" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd855d9e0d9 code=0x7ffc0000 [ 996.304998][ T31] audit: type=1326 audit(1786555167.745:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17669 comm="syz.2.3586" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd855d9e0d9 code=0x7ffc0000 [ 996.305036][ T31] audit: type=1326 audit(1786555167.745:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17669 comm="syz.2.3586" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd855d9e0d9 code=0x7ffc0000 [ 996.305072][ T31] audit: type=1326 audit(1786555167.745:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17669 comm="syz.2.3586" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd855d9e0d9 code=0x7ffc0000 [ 996.973020][ T1872] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 997.123684][ T1872] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 997.124779][ T1872] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 997.124827][ T1872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.143450][ T1872] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 998.288575][ T1872] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 998.289659][ T1872] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 998.375137][ T1872] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 998.389861][ T1872] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 998.410335][ T1872] usb 1-1: USB disconnect, device number 29 [ 998.532735][T14586] Bluetooth: hci0: unexpected event for opcode 0x040d [ 999.715826][ T31] audit: type=1326 audit(1786555171.145:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17709 comm="syz.4.3599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 999.715906][ T31] audit: type=1326 audit(1786555171.145:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17709 comm="syz.4.3599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 999.715961][ T31] audit: type=1326 audit(1786555171.155:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17709 comm="syz.4.3599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 999.715994][ T31] audit: type=1326 audit(1786555171.155:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17709 comm="syz.4.3599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 999.716035][ T31] audit: type=1326 audit(1786555171.155:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17709 comm="syz.4.3599" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d5b9e0d9 code=0x7ffc0000 [ 1000.292227][T17719] syz.2.3603 (17719): drop_caches: 2 [ 1000.302444][T17719] input: syz1 as /devices/virtual/input/input37 [ 1000.730099][T17728] loop2: detected capacity change from 0 to 3 [ 1000.785577][T17728] Dev loop2: unable to read RDB block 3 [ 1000.785701][T17728] loop2: AHDI p1 p2 p3 [ 1000.785920][T17728] loop2: partition table partially beyond EOD, truncated [ 1000.788578][T17728] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1000.788683][T17728] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1004.707930][ T31] audit: type=1326 audit(1786555176.135:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17747 comm="syz.0.3612" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1004.708011][ T31] audit: type=1326 audit(1786555176.135:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17747 comm="syz.0.3612" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1004.708072][ T31] audit: type=1326 audit(1786555176.145:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17747 comm="syz.0.3612" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1004.708114][ T31] audit: type=1326 audit(1786555176.145:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17747 comm="syz.0.3612" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1004.708157][ T31] audit: type=1326 audit(1786555176.145:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17747 comm="syz.0.3612" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1005.449860][T17754] syz.3.3616 (17754): drop_caches: 2 [ 1005.453625][T17754] input: syz1 as /devices/virtual/input/input38 [ 1005.673508][T17759] input: syz1 as /devices/virtual/input/input39 [ 1009.674062][T14385] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1009.837913][T14385] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1009.850573][T14385] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.850613][T14385] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1009.873217][T14385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.873256][T14385] usb 5-1: Product: syz [ 1009.873283][T14385] usb 5-1: Manufacturer: syz [ 1009.873300][T14385] usb 5-1: SerialNumber: syz [ 1009.910641][T14385] usb 5-1: 0:2 : does not exist [ 1009.926460][T14385] usb 5-1: unit 9 not found! [ 1010.364361][T17801] syz.3.3627 (17801): drop_caches: 2 [ 1010.369709][T17801] input: syz1 as /devices/virtual/input/input40 [ 1010.826087][T14385] usb 5-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1010.848509][T14385] usb 5-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1010.856334][ T1872] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1010.982925][T14385] usb 5-1: USB disconnect, device number 29 [ 1011.018584][ T1872] usb 3-1: Using ep0 maxpacket: 16 [ 1011.027329][ T1872] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1011.042185][ T1872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.042229][ T1872] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1011.042270][ T1872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.071136][ T1872] usb 3-1: config 0 descriptor?? [ 1011.162148][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.673224][T14385] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1012.243650][ T1872] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1012.342905][T14385] usb 1-1: Using ep0 maxpacket: 16 [ 1012.911979][T14385] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1012.913784][T14385] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.913830][T14385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.913856][T14385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1012.913876][T14385] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1012.913898][T14385] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.915762][T14385] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1012.915785][T14385] usb 1-1: Manufacturer: syz [ 1012.941888][T14385] usb 1-1: config 0 descriptor?? [ 1012.988087][ T1872] usb 6-1: Using ep0 maxpacket: 16 [ 1012.991046][ T1872] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1012.992353][ T1872] usb 6-1: config 251 has an invalid interface number: 48 but max is 1 [ 1012.992377][ T1872] usb 6-1: config 251 has an invalid interface number: 55 but max is 1 [ 1012.992397][ T1872] usb 6-1: config 251 has no interface number 0 [ 1012.992413][ T1872] usb 6-1: config 251 has no interface number 1 [ 1012.992460][ T1872] usb 6-1: config 251 interface 48 has no altsetting 0 [ 1012.992477][ T1872] usb 6-1: config 251 interface 55 has no altsetting 0 [ 1013.008039][ T1872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.008089][ T1872] usb 6-1: Product: syz [ 1013.008104][ T1872] usb 6-1: Manufacturer: syz [ 1013.008118][ T1872] usb 6-1: SerialNumber: syz [ 1013.180251][T17803] usb 3-1: USB disconnect, device number 25 [ 1013.273288][T14385] rc_core: IR keymap rc-hauppauge not found [ 1013.275233][T14385] Registered IR keymap rc-empty [ 1013.275362][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.293012][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.315517][T14385] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1013.352750][T14385] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 1013.366588][ T1872] qmi_wwan 6-1:251.48: More than one union descriptor, skipping ... [ 1013.375986][ T1872] qmi_wwan 6-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1013.387651][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.405634][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.429037][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.447545][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.450040][ T1872] usb 6-1: USB disconnect, device number 16 [ 1013.464625][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.483044][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.504798][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.524911][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.547599][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.572002][T14385] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1013.588583][T14385] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1013.588611][T14385] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1014.198100][T12360] usb 1-1: USB disconnect, device number 30 [ 1017.160390][ T1872] kernel read not supported for file /vcs (pid: 1872 comm: kworker/1:3) [ 1019.267710][T17864] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.3647'. [ 1019.267762][T17864] openvswitch: netlink: Message has 512 unknown bytes. [ 1019.561214][T17872] capability: warning: `syz.0.3650' uses 32-bit capabilities (legacy support in use) [ 1019.589331][T17872] program syz.0.3650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.984432][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1020.494819][T17896] Bluetooth: MGMT ver 1.23 [ 1021.575330][T17916] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1021.575378][T17916] openvswitch: netlink: Message has 512 unknown bytes. [ 1024.597991][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3664'. [ 1025.182562][T17955] dummy0: left promiscuous mode [ 1025.203814][T17955] geneve2: left promiscuous mode [ 1026.060881][T17963] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.3675'. [ 1026.072037][T17963] openvswitch: netlink: Message has 512 unknown bytes. [ 1027.345706][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1029.179405][T17996] netlink: 212128 bytes leftover after parsing attributes in process `syz.4.3687'. [ 1029.179459][T17996] openvswitch: netlink: Message has 4 unknown bytes. [ 1029.306422][T17997] loop2: detected capacity change from 0 to 3 [ 1029.314841][T17997] Dev loop2: unable to read RDB block 3 [ 1029.314892][T17997] loop2: AHDI p1 p2 p3 [ 1029.314910][T17997] loop2: partition table partially beyond EOD, truncated [ 1029.315069][T17997] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1029.315086][T17997] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1031.162073][T18029] netlink: 212128 bytes leftover after parsing attributes in process `syz.4.3700'. [ 1031.162137][T18029] openvswitch: netlink: Message has 4 unknown bytes. [ 1033.130472][T18067] netlink: 212128 bytes leftover after parsing attributes in process `syz.5.3712'. [ 1033.130523][T18067] openvswitch: netlink: Message has 4 unknown bytes. [ 1034.495720][T14586] Bluetooth: hci4: unexpected event 0x06 length: 10 > 3 [ 1034.935801][T18102] netlink: 212128 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1034.952329][T18102] openvswitch: netlink: Message has 4 unknown bytes. [ 1036.537614][T18134] netlink: 212128 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1036.537660][T18134] openvswitch: netlink: Message has 4 unknown bytes. [ 1040.466879][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1040.602952][ T25] usb 1-1: device descriptor read/64, error -71 [ 1040.842919][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1040.973048][ T25] usb 1-1: device descriptor read/64, error -71 [ 1041.083315][ T25] usb usb1-port1: attempt power cycle [ 1041.464685][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1041.485201][ T25] usb 1-1: device descriptor read/8, error -71 [ 1041.724666][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1041.757456][ T25] usb 1-1: device descriptor read/8, error -71 [ 1041.873398][ T25] usb usb1-port1: unable to enumerate USB device [ 1045.754256][ T1872] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1045.783248][T12360] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1047.034887][ T1872] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1047.044214][ T1872] usb 3-1: no configurations [ 1047.049095][ T1872] usb 3-1: can't read configurations, error -22 [ 1047.052930][T12360] usb 6-1: Using ep0 maxpacket: 8 [ 1047.054921][T12360] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1047.056839][T12360] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.056905][T12360] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1047.056930][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1047.056955][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1047.056984][T12360] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 1047.057006][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1047.057030][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1047.057054][T12360] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.059017][T12360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.059038][T12360] usb 6-1: Product: syz [ 1047.059051][T12360] usb 6-1: Manufacturer: syz [ 1047.059065][T12360] usb 6-1: SerialNumber: syz [ 1047.067399][T12360] usb 6-1: config 0 descriptor?? [ 1047.069454][T18244] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1047.091096][T12360] ati_remote 6-1:0.0: Initializing ati_remote hardware failed. [ 1047.098662][T12360] ati_remote 6-1:0.0: probe with driver ati_remote failed with error -5 [ 1047.382402][ T1872] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1047.434228][T12360] usb 6-1: USB disconnect, device number 17 [ 1048.971477][ T1872] usb 3-1: device descriptor read/all, error -71 [ 1048.978255][ T1872] usb usb3-port1: attempt power cycle [ 1050.229298][T18284] input: syz1 as /devices/virtual/input/input43 [ 1051.913141][ T5716] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1052.103731][ T5716] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1052.104897][ T5716] usb 4-1: config 9 interface 0 has no altsetting 0 [ 1052.107908][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.107931][ T5716] usb 4-1: Product: syz [ 1052.107945][ T5716] usb 4-1: Manufacturer: syz [ 1052.107959][ T5716] usb 4-1: SerialNumber: syz [ 1052.388339][T18287] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 1052.501166][T18311] netlink: 'syz.3.3783': attribute type 10 has an invalid length. [ 1052.501192][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1052.651679][T18287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.751944][T18309] bond1: (slave dummy0): making interface the new active one [ 1052.768060][T18309] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1052.795074][T18311] dummy0: entered promiscuous mode [ 1052.822797][T18311] bond1: (slave dummy0): Releasing active interface [ 1053.045193][ T5716] snd-usb-caiaq 4-1:9.0: can't set alt interface. [ 1053.045252][ T5716] usb 4-1: unable to init card! (ret=-5) [ 1053.045942][ T5716] snd-usb-caiaq 4-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1053.073765][ T5716] usb 4-1: USB disconnect, device number 22 [ 1054.463074][T12359] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1054.505371][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.505442][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.618462][T12359] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1054.628749][T12359] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.628785][T12359] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1054.672475][T12359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.672528][T12359] usb 3-1: Product: syz [ 1054.672554][T12359] usb 3-1: Manufacturer: syz [ 1054.672566][T12359] usb 3-1: SerialNumber: syz [ 1054.724801][T12359] usb 3-1: 0:2 : does not exist [ 1054.724902][T12359] usb 3-1: unit 9 not found! [ 1054.958703][T12359] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1054.969983][T12359] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1055.290092][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1055.310128][T12359] usb 3-1: USB disconnect, device number 29 [ 1055.812714][T18337] netlink: 212128 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1055.812764][T18337] openvswitch: netlink: Message has 4 unknown bytes. [ 1056.304966][T18345] loop2: detected capacity change from 0 to 3 [ 1056.311926][T18345] Dev loop2: unable to read RDB block 3 [ 1056.311985][T18345] loop2: AHDI p1 p2 p3 [ 1056.312008][T18345] loop2: partition table partially beyond EOD, truncated [ 1056.312188][T18345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1056.312214][T18345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1057.616120][T18358] Invalid logical block size (-32767) [ 1058.452754][T18369] input: syz1 as /devices/virtual/input/input44 [ 1058.882406][T18373] netlink: 212128 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1058.882445][T18373] openvswitch: netlink: Message has 4 unknown bytes. [ 1063.251623][T18409] program syz.0.3839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.623294][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1063.773893][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1063.777597][ T25] usb 6-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 1063.778602][ T25] usb 6-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.780659][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.780682][ T25] usb 6-1: Product: syz [ 1063.780696][ T25] usb 6-1: Manufacturer: syz [ 1063.780710][ T25] usb 6-1: SerialNumber: syz [ 1064.072384][ T25] kvaser_usb 6-1:53.0: error -ENODEV: Cannot get usb endpoint(s) [ 1064.124590][ T25] usb 6-1: USB disconnect, device number 18 [ 1066.315816][T18439] program syz.3.3851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.810904][T18472] program syz.4.3864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1069.386562][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3866'. [ 1069.424240][T18480] nbd: socks must be embedded in a SOCK_ITEM attr [ 1069.424489][T18480] block nbd0: shutting down sockets [ 1069.821938][T18486] syz.0.3867 (18486): drop_caches: 2 [ 1069.842131][T18486] input: syz1 as /devices/virtual/input/input45 [ 1070.856261][T18495] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1071.302745][T18505] program syz.0.3876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1079.614467][T18606] Invalid ELF header magic: != ELF [ 1083.660873][T18651] input: syz1 as /devices/virtual/input/input46 [ 1085.748179][ T31] audit: type=1326 audit(1786555257.165:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.3926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1085.748241][ T31] audit: type=1326 audit(1786555257.165:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.3926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1085.748320][ T31] audit: type=1326 audit(1786555257.175:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.3926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1085.748357][ T31] audit: type=1326 audit(1786555257.175:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.3926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1085.748394][ T31] audit: type=1326 audit(1786555257.175:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18659 comm="syz.0.3926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1584f9e0d9 code=0x7ffc0000 [ 1086.253392][T12360] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1086.782936][T12360] usb 5-1: Using ep0 maxpacket: 8 [ 1086.792892][T12360] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1086.803645][T12360] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.813991][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.878077][T18674] sg_write: data in/out 4252/136 bytes for SCSI command 0x0-- guessing data in; [ 1086.878077][T18674] program syz.2.3927 not setting count and/or reply_len properly [ 1086.980730][T12360] usb 5-1: config 0 descriptor?? [ 1087.011191][T12360] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1087.233686][T12360] gspca_vc032x: reg_r err -71 [ 1087.238688][T12360] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 1087.272162][T12360] usb 5-1: USB disconnect, device number 30 [ 1088.060638][T17803] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1088.098663][T18698] input: syz1 as /devices/virtual/input/input47 [ 1088.758209][T17803] usb 6-1: Using ep0 maxpacket: 16 [ 1088.823490][T17803] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1088.834890][T17803] usb 6-1: config 251 has an invalid interface number: 48 but max is 0 [ 1088.834929][T17803] usb 6-1: config 251 has no interface number 0 [ 1088.834973][T17803] usb 6-1: config 251 interface 48 has no altsetting 0 [ 1089.571629][T17803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.571672][T17803] usb 6-1: Product: syz [ 1089.571699][T17803] usb 6-1: Manufacturer: syz [ 1089.571716][T17803] usb 6-1: SerialNumber: syz [ 1090.309706][T17803] qmi_wwan 6-1:251.48: bogus CDC Union: master=0, slave=1 [ 1090.319533][T17803] qmi_wwan 6-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1090.341651][T17803] usb 6-1: USB disconnect, device number 19 [ 1091.466471][ T106] IPVS: starting estimator thread 0... [ 1092.122965][T18725] IPVS: using max 55 ests per chain, 132000 per kthread [ 1094.241005][T18743] input: syz1 as /devices/virtual/input/input48 [ 1095.754368][T18755] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1095.774035][T18755] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1097.895399][T17119] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1098.113115][T17119] usb 6-1: Using ep0 maxpacket: 16 [ 1098.119985][T17119] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1098.130751][T17119] usb 6-1: config 251 has an invalid interface number: 48 but max is 0 [ 1098.139997][T17119] usb 6-1: config 251 has no interface number 0 [ 1098.146973][T17119] usb 6-1: config 251 interface 48 has no altsetting 0 [ 1098.156875][T17119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.167955][T17119] usb 6-1: Product: syz [ 1098.172474][T17119] usb 6-1: Manufacturer: syz [ 1098.177369][T17119] usb 6-1: SerialNumber: syz [ 1098.442490][T17119] qmi_wwan 6-1:251.48: bogus CDC Union: master=0, slave=1 [ 1098.456779][T17119] qmi_wwan 6-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1098.485068][T17119] usb 6-1: USB disconnect, device number 20 [ 1098.601834][ T5716] kernel write not supported for file /admmidi2 (pid: 5716 comm: kworker/0:3) [ 1099.442946][T14385] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1099.594195][T14385] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1099.595424][T14385] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.595446][T14385] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1099.597758][T14385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.597779][T14385] usb 6-1: Product: syz [ 1099.597793][T14385] usb 6-1: Manufacturer: syz [ 1099.597807][T14385] usb 6-1: SerialNumber: syz [ 1099.631113][T14385] usb 6-1: 0:2 : does not exist [ 1099.631181][T14385] usb 6-1: unit 9 not found! [ 1100.224712][T14385] usb 6-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1100.232251][T14385] usb 6-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1101.611626][T14385] usb 6-1: USB disconnect, device number 21 [ 1102.073640][T18830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3982'. [ 1102.561353][T18837] input: syz1 as /devices/virtual/input/input49 [ 1105.013427][T17119] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1105.176287][T17119] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1105.187844][T17119] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.187894][T17119] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.210867][T17119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.219263][T17119] usb 1-1: Product: syz [ 1105.224541][T17119] usb 1-1: Manufacturer: syz [ 1105.237317][T17119] usb 1-1: SerialNumber: syz [ 1105.404466][T18869] input: syz1 as /devices/virtual/input/input50 [ 1105.596945][T18872] input: syz1 as /devices/virtual/input/input51 [ 1105.920872][T17119] usb 1-1: 0:2 : does not exist [ 1105.926349][T17119] usb 1-1: unit 9 not found! [ 1106.139954][T17119] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1106.155274][T17119] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1107.530272][T17119] usb 1-1: USB disconnect, device number 35 [ 1107.714347][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4003'. [ 1107.804368][ T1872] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1107.838404][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1107.973099][ T1872] usb 6-1: Using ep0 maxpacket: 16 [ 1107.985670][ T1872] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ff.d1 [ 1107.998167][ T1872] usb 6-1: config 251 has an invalid interface number: 48 but max is 0 [ 1108.006823][ T1872] usb 6-1: config 251 has no interface number 0 [ 1108.014638][ T1872] usb 6-1: config 251 interface 48 has no altsetting 0 [ 1108.024210][ T1872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.032326][ T1872] usb 6-1: Product: syz [ 1108.036683][ T1872] usb 6-1: Manufacturer: syz [ 1108.041395][ T1872] usb 6-1: SerialNumber: syz [ 1108.276217][ T1872] qmi_wwan 6-1:251.48: bogus CDC Union: master=0, slave=0 [ 1108.284907][ T1872] qmi_wwan 6-1:251.48: probe with driver qmi_wwan failed with error -22 [ 1108.301392][ T1872] usb 6-1: USB disconnect, device number 22 [ 1108.583779][T17119] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1108.753023][T17119] usb 3-1: Using ep0 maxpacket: 16 [ 1108.760518][T17119] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1108.774490][T17119] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.786878][T17119] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.797341][T17119] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1108.809838][T17119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.825237][T18905] tipc: Started in network mode [ 1108.825291][T18905] tipc: Node identity 5aba80df466b, cluster identity 4711 [ 1108.825427][T18905] tipc: Enabled bearer , priority 0 [ 1108.826103][T18905] syzkaller0: entered promiscuous mode [ 1108.826120][T18905] syzkaller0: entered allmulticast mode [ 1108.861652][T17119] usb 3-1: config 0 descriptor?? [ 1108.876074][T18904] tipc: Resetting bearer [ 1108.969682][T18904] tipc: Disabling bearer [ 1109.379406][T17119] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1109.432986][ T1872] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1109.513314][T17119] nzxt-smart2 0003:1E71:2009.0013: init_device failed: -38 [ 1109.527079][T17119] nzxt-smart2 0003:1E71:2009.0013: probe with driver nzxt-smart2 failed with error -38 [ 1109.584614][ T1872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.594974][ T1872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.595080][ T1872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.618130][ T1872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.626639][ T1872] usb 6-1: Product: syz [ 1109.626660][ T1872] usb 6-1: Manufacturer: syz [ 1109.626674][ T1872] usb 6-1: SerialNumber: syz [ 1109.671965][ T1872] usb 6-1: 0:2 : does not exist [ 1109.677140][ T1872] usb 6-1: unit 9 not found! [ 1109.871238][ T1872] usb 6-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1109.898050][ T1872] usb 6-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1109.971266][ T1872] usb 6-1: USB disconnect, device number 23 [ 1110.034998][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.110943][T14385] usb 3-1: USB disconnect, device number 30 [ 1110.812947][T17119] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1110.973103][T17119] usb 6-1: Using ep0 maxpacket: 16 [ 1110.978643][T17119] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1110.978866][T17119] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1110.979970][T17119] usb 6-1: config 1 has an invalid interface number: 151 but max is 0 [ 1110.979992][T17119] usb 6-1: config 1 has no interface number 0 [ 1110.980019][T17119] usb 6-1: config 1 interface 151 has no altsetting 0 [ 1110.984133][T17119] usb 6-1: string descriptor 0 read error: -22 [ 1110.984265][T17119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.000765][T17119] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1112.583763][T17119] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 1112.583978][T17119] pac7311 6-1:1.151: probe with driver pac7311 failed with error -110 [ 1112.639436][T14385] usb 6-1: USB disconnect, device number 24 [ 1113.054631][T17119] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1113.063076][T12359] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1113.223680][T12359] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1113.234430][T17119] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1113.246457][T17119] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.258257][T17119] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1113.271009][T17119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.280665][T17119] usb 1-1: Product: syz [ 1113.281322][T12359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.281350][T12359] usb 3-1: Product: syz [ 1113.281367][T12359] usb 3-1: Manufacturer: syz [ 1113.281384][T12359] usb 3-1: SerialNumber: syz [ 1113.308786][T17119] usb 1-1: Manufacturer: syz [ 1113.308838][T17119] usb 1-1: SerialNumber: syz [ 1113.321032][T12359] usb 3-1: config 0 descriptor?? [ 1113.340646][T17119] usb 1-1: 0:2 : does not exist [ 1113.345841][T17119] usb 1-1: unit 9 not found! [ 1113.537310][T12359] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1113.550229][T17119] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1113.563832][T17119] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1113.725462][T12360] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1113.865208][T17119] usb 1-1: USB disconnect, device number 36 [ 1113.893130][T18978] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1113.920048][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.993532][T12360] usb 6-1: Using ep0 maxpacket: 16 [ 1113.994433][T12360] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1113.995719][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.995747][T12360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.995784][T12360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.999025][T12360] usb 6-1: config 0 descriptor?? [ 1114.198283][ T5628] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 1114.453577][T18993] input: syz1 as /devices/virtual/input/input52 [ 1114.988362][T12360] usbhid 6-1:0.0: can't add hid device: -71 [ 1114.988526][T12360] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1115.018015][T12360] usb 6-1: USB disconnect, device number 25 [ 1116.075499][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.075572][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.304617][T12359] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1116.320693][T12359] usb 3-1: USB disconnect, device number 31 [ 1119.022928][ T1872] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1119.180332][ T1872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.191587][ T1872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.191628][ T1872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1119.213873][ T1872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.213914][ T1872] usb 6-1: Product: syz [ 1119.213943][ T1872] usb 6-1: Manufacturer: syz [ 1119.213960][ T1872] usb 6-1: SerialNumber: syz [ 1119.264133][ T1872] usb 6-1: 0:2 : does not exist [ 1119.269295][ T1872] usb 6-1: unit 9 not found! [ 1119.478009][T19028] program syz.4.4047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.494374][ T1872] usb 6-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1119.522412][ T1872] usb 6-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1119.614097][T19033] input: syz1 as /devices/virtual/input/input53 [ 1120.128035][ T1872] usb 6-1: USB disconnect, device number 26 [ 1120.253988][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1120.460687][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1120.472058][T19041] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1120.482976][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4058'. [ 1121.511106][T19062] program syz.5.4066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1121.971360][T19074] input: syz1 as /devices/virtual/input/input54 [ 1122.483023][ T5738] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1122.683639][ T5738] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1122.684795][ T5738] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.684818][ T5738] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1122.686799][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.686821][ T5738] usb 1-1: Product: syz [ 1122.686834][ T5738] usb 1-1: Manufacturer: syz [ 1122.686848][ T5738] usb 1-1: SerialNumber: syz [ 1122.790519][ T5738] usb 1-1: 0:2 : does not exist [ 1122.790602][ T5738] usb 1-1: unit 9 not found! [ 1122.864060][T17119] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1122.965998][ T5738] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1122.987429][ T5738] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1123.032940][T17119] usb 3-1: Using ep0 maxpacket: 16 [ 1123.044627][ T1872] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1123.061512][T17119] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1123.061581][T17119] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1123.079798][T17119] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1123.079853][T17119] usb 3-1: can't read configurations, error -71 [ 1123.122758][ T5738] usb 1-1: USB disconnect, device number 37 [ 1123.193238][ T1872] usb 4-1: Using ep0 maxpacket: 16 [ 1123.199053][ T1872] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1123.201164][ T1872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.201193][ T1872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.201229][ T1872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.237235][ T1872] usb 4-1: config 0 descriptor?? [ 1123.246624][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1123.338265][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1123.659709][ T1872] usbhid 4-1:0.0: can't add hid device: -71 [ 1123.659830][ T1872] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1123.674876][ T1872] usb 4-1: USB disconnect, device number 23 [ 1123.729808][T19096] program syz.5.4080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1124.464094][T19117] input: syz1 as /devices/virtual/input/input55 [ 1125.206986][T19126] program syz.5.4094 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1125.213055][T14385] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1125.367885][T14385] usb 5-1: Using ep0 maxpacket: 16 [ 1125.426794][T14385] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1125.426852][T14385] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1125.427692][T14385] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1125.427723][T14385] usb 5-1: can't read configurations, error -71 [ 1125.775093][T19143] netlink: 'syz.5.4102': attribute type 16 has an invalid length. [ 1125.899151][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4102'. [ 1127.391435][T19162] program syz.5.4108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1127.632115][T19166] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1127.659349][T19166] CIFS mount error: No usable UNC path provided in device string! [ 1127.659349][T19166] [ 1127.670153][T19166] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1128.713048][ T5738] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1128.867430][ T5738] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1128.871497][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1128.871527][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1128.871550][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1128.871572][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1128.871594][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1128.871616][ T5738] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1128.876326][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1128.876351][ T5738] usb 3-1: Product: syz [ 1128.876364][ T5738] usb 3-1: Manufacturer: syz [ 1128.883327][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.883453][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.883570][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.883665][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.883779][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.883893][T19166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1128.910422][ T5738] usb 3-1: USB2VGA dongle found at address 34 [ 1129.176229][T19166] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 1129.204621][ T5738] usb 3-1: Allocated 8 output buffers [ 1129.226895][ T5738] usb 3-1: Failed to early initialize device [ 1129.433213][T14385] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1129.584934][T14385] usb 6-1: Using ep0 maxpacket: 16 [ 1129.621639][T14385] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1129.621708][T14385] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1129.622604][T14385] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1129.622636][T14385] usb 6-1: can't read configurations, error -71 [ 1130.264049][T17803] usb 3-1: USB disconnect, device number 34 [ 1134.342999][T17803] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1134.496734][T17803] usb 5-1: Using ep0 maxpacket: 16 [ 1134.498773][T17803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1134.498818][T17803] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1134.499745][T17803] usb 5-1: config 1 has an invalid interface number: 151 but max is 0 [ 1134.499766][T17803] usb 5-1: config 1 has no interface number 0 [ 1134.499792][T17803] usb 5-1: config 1 interface 151 has no altsetting 0 [ 1134.504048][T17803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.504071][T17803] usb 5-1: Product: syz [ 1134.504085][T17803] usb 5-1: Manufacturer: syz [ 1134.504100][T17803] usb 5-1: SerialNumber: syz [ 1134.683939][T14385] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1134.759236][T17803] gspca_main: pac7311-2.14.0 probing 093a:260e [ 1134.761834][T17803] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1134.761913][T17803] pac7311 5-1:1.151: probe with driver pac7311 failed with error -71 [ 1134.771838][T17803] usb 5-1: USB disconnect, device number 33 [ 1134.837456][T14385] usb 4-1: Using ep0 maxpacket: 32 [ 1134.842470][T14385] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1134.846737][T14385] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.846763][T14385] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1134.857112][T14385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.857138][T14385] usb 4-1: Product: syz [ 1134.857152][T14385] usb 4-1: Manufacturer: syz [ 1134.857166][T14385] usb 4-1: SerialNumber: syz [ 1134.867294][T14385] usb 4-1: config 0 descriptor?? [ 1135.942411][T12359] usb 4-1: USB disconnect, device number 24 [ 1138.753592][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4147'. [ 1143.589254][T19297] 9p: Bad value for 'rfdno' [ 1144.802280][T19323] ip6gre1: entered promiscuous mode [ 1144.802318][T19323] ip6gre1: entered allmulticast mode [ 1147.511321][T19350] input: syz1 as /devices/virtual/input/input56 [ 1147.524196][T19349] syz.3.4176 (19349): drop_caches: 2 [ 1153.219748][T19402] syz.0.4195 (19402): drop_caches: 2 [ 1153.237391][T19402] input: syz1 as /devices/virtual/input/input57 [ 1158.200389][T19440] 9p: Bad value for 'rfdno' [ 1160.959441][T19469] input: syz1 as /devices/virtual/input/input58 [ 1167.162935][ T5716] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1167.324187][ T5716] usb 1-1: Using ep0 maxpacket: 16 [ 1167.334133][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1167.334198][ T5716] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1167.352462][ T5716] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.362784][ T5716] usb 1-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1167.387545][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.397051][ T5716] usb 1-1: Product: syz [ 1167.397100][ T5716] usb 1-1: Manufacturer: syz [ 1167.397119][ T5716] usb 1-1: SerialNumber: syz [ 1167.819478][ T5716] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1167.831303][ T5716] snd-usb-audio 1-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 1168.148937][ T5716] usb 1-1: USB disconnect, device number 38 [ 1168.291931][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1169.809696][T19564] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4248'. [ 1170.287411][T19569] Invalid argument reading file caps for ./file0 [ 1172.693182][T19596] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1174.380858][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1174.380939][T19608] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1174.534618][ T1872] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1174.696356][ T1872] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1174.701129][ T1872] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 1174.704784][ T1872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.704808][ T1872] usb 6-1: Product: syz [ 1174.704821][ T1872] usb 6-1: Manufacturer: syz [ 1174.704835][ T1872] usb 6-1: SerialNumber: syz [ 1174.715975][ T1872] usb 6-1: config 0 descriptor?? [ 1176.494511][ T1872] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 1176.494550][ T1872] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1176.494601][ T1872] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 1176.514924][ T1872] usb 6-1: USB disconnect, device number 29 [ 1177.395131][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.395214][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.082460][T19682] netlink: 'syz.4.4281': attribute type 16 has an invalid length. [ 1184.082502][T19682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4281'. [ 1189.323066][T12359] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1189.483060][T12359] usb 3-1: Using ep0 maxpacket: 16 [ 1191.139484][T19759] netlink: 'syz.0.4319': attribute type 17 has an invalid length. [ 1192.509086][T12359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1192.517213][T12359] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 1192.527326][T12359] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1192.535048][T12359] usb 3-1: can't read configurations, error -71 [ 1196.214297][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1196.238801][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1196.247395][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1196.255747][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1196.264637][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.359241][T19839] 9p: Bad value for 'wfdno' [ 1198.343403][T14586] Bluetooth: hci1: command tx timeout [ 1198.640143][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.414145][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.390992][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.424557][T14586] Bluetooth: hci1: command tx timeout [ 1200.527663][T19886] netlink: 'syz.2.4362': attribute type 16 has an invalid length. [ 1200.527697][T19886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4362'. [ 1200.651282][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.554357][ T7899] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.722559][T15119] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.503105][T14586] Bluetooth: hci1: command tx timeout [ 1202.660360][T19901] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4367'. [ 1203.100245][ T12] bridge_slave_1: left allmulticast mode [ 1203.106277][ T12] bridge_slave_1: left promiscuous mode [ 1203.112531][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.190830][ T12] bridge_slave_0: left allmulticast mode [ 1203.197911][ T12] bridge_slave_0: left promiscuous mode [ 1203.204192][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.355632][T19931] netlink: 'syz.5.4375': attribute type 16 has an invalid length. [ 1203.366749][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4375'. [ 1203.375861][ T1872] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1203.533008][ T1872] usb 3-1: Using ep0 maxpacket: 16 [ 1203.539055][ T1872] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1203.549613][ T1872] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1203.549651][ T1872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1203.581883][ T1872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.581913][ T1872] usb 3-1: Product: syz [ 1203.581938][ T1872] usb 3-1: Manufacturer: syz [ 1203.581954][ T1872] usb 3-1: SerialNumber: syz [ 1203.614365][ T1872] usb 3-1: config 0 descriptor?? [ 1203.634063][ T1872] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1203.644259][ T1872] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1204.250620][ T1872] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1204.260410][ T1872] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1204.376373][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.399265][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.420113][ T12] bond0 (unregistering): Released all slaves [ 1204.506776][ T1013] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.517987][ T1013] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.588334][T14586] Bluetooth: hci1: command tx timeout [ 1204.797159][ T12] tipc: Left network mode [ 1204.799624][T19828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.799724][T19828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.799867][T19828] bridge_slave_0: entered allmulticast mode [ 1204.808612][T19828] bridge_slave_0: entered promiscuous mode [ 1204.818982][T19828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.819080][T19828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.819236][T19828] bridge_slave_1: entered allmulticast mode [ 1204.829435][T19828] bridge_slave_1: entered promiscuous mode [ 1204.938489][ T1872] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1204.968880][ T1872] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1205.076397][T19828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.195147][T19828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.212607][ T1872] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1205.221135][ T1872] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1205.230796][ T1872] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1205.239004][ T1872] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1205.265653][ T1872] usb 3-1: USB disconnect, device number 37 [ 1205.311162][T19952] 9p: Bad value for 'wfdno' [ 1205.318154][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1207.078312][T19973] input: syz1 as /devices/virtual/input/input59 [ 1207.503388][T19965] udc dummy_udc.0: failed to start g1: -4 [ 1207.513712][T19965] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 1207.542145][T19965] UDC core: g1: couldn't find an available UDC or it's busy [ 1207.707802][T19828] team0: Port device team_slave_0 added [ 1207.768410][T19828] team0: Port device team_slave_1 added [ 1207.924727][T19980] netlink: 'syz.3.4388': attribute type 16 has an invalid length. [ 1207.924761][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4388'. [ 1208.121583][ T12] hsr_slave_0: left promiscuous mode [ 1208.135486][ T12] hsr_slave_1: left promiscuous mode [ 1208.136093][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.136123][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.181459][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.181501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.269493][ T12] veth1_macvtap: left promiscuous mode [ 1208.276755][ T12] veth0_macvtap: left promiscuous mode [ 1208.286971][ T12] veth1_vlan: left promiscuous mode [ 1208.292396][ T12] veth0_vlan: left promiscuous mode [ 1211.579884][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1211.648772][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1212.169987][T20033] netlink: 'syz.3.4402': attribute type 16 has an invalid length. [ 1212.170029][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1212.292690][T19828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.302217][T19828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.302252][T19828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.385059][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1212.394367][T19828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.402186][T19828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.402208][T19828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.605683][T19828] hsr_slave_0: entered promiscuous mode [ 1213.616991][T19828] hsr_slave_1: entered promiscuous mode [ 1213.625090][T19828] debugfs: 'hsr0' already exists in 'hsr' [ 1213.632449][T19828] Cannot create hsr debugfs directory [ 1215.441897][T20064] input: syz1 as /devices/virtual/input/input60 [ 1218.379331][T19828] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.678901][T19828] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.249620][T19828] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.702218][T19828] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.448881][T20116] input: syz1 as /devices/virtual/input/input61 [ 1222.445556][T19828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1222.480463][T19828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.493058][T19828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1222.528815][T19828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.538200][T19828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1222.580344][T19828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1222.590147][T19828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1222.623134][T19828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.423754][T19828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.491387][T19828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.512488][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.512602][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.561047][T15119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.561170][T15119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.798730][T20154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1227.276269][T20174] netlink: 'syz.0.4433': attribute type 17 has an invalid length. [ 1227.284544][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4433'. [ 1228.432553][T20191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4436'. [ 1228.727616][T19828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.162961][T20205] syz.0.4439 (20205): drop_caches: 2 [ 1230.196993][T20227] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1230.221670][T20227] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1230.881488][T19828] veth0_vlan: entered promiscuous mode [ 1230.927729][T19828] veth1_vlan: entered promiscuous mode [ 1231.053937][T19828] veth0_macvtap: entered promiscuous mode [ 1231.067317][T20234] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 1231.067317][T20234] program syz.0.4444 not setting count and/or reply_len properly [ 1231.102260][T19828] veth1_macvtap: entered promiscuous mode [ 1231.167929][T19828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.346739][T19828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.515085][ T6346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.515992][ T6346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.516035][ T6346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.596164][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.828670][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.828713][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.740667][ T7898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.740713][ T7898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.793022][T20269] syz.0.4451 (20269): drop_caches: 2 [ 1235.940706][T20286] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1237.832008][T20296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1238.868076][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.868156][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.349261][ T31] audit: type=1326 audit(1786555415.325:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.5.4481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 1243.373075][ T31] audit: type=1326 audit(1786555415.325:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.5.4481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 1243.373488][ T31] audit: type=1326 audit(1786555415.355:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20376 comm="syz.5.4481" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 1250.003128][ T31] audit: type=1326 audit(1786555421.985:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.5.4498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 1250.003366][ T31] audit: type=1326 audit(1786555421.985:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.5.4498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 1250.012265][ T31] audit: type=1326 audit(1786555421.985:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20432 comm="syz.5.4498" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f203119e0d9 code=0x7ffc0000 [ 1250.433482][T17119] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1250.492987][ T5716] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1250.585492][T17119] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1250.586457][T17119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.586502][T17119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1250.586527][T17119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1250.596427][T17119] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1250.596451][T17119] usb 5-1: Manufacturer: syz [ 1250.601178][T17119] usb 5-1: config 0 descriptor?? [ 1250.658329][ T5716] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1250.671006][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.671056][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.671090][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.678886][ T5716] usb 4-1: config 0 descriptor?? [ 1250.948531][ T5738] usb 5-1: USB disconnect, device number 34 [ 1251.525068][ T5716] arvo 0003:1E7D:30D4.0014: item fetching failed at offset 4/7 [ 1251.525733][ T5716] arvo 0003:1E7D:30D4.0014: parse failed [ 1251.715852][ T5716] arvo 0003:1E7D:30D4.0014: probe with driver arvo failed with error -22 [ 1251.783265][ T966] usb 4-1: USB disconnect, device number 25 [ 1252.634881][T20463] input: syz1 as /devices/virtual/input/input64 [ 1253.673090][ T31] audit: type=1326 audit(1786555425.635:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.4.4513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b80f9e0d9 code=0x7ffc0000 [ 1253.673159][ T31] audit: type=1326 audit(1786555425.635:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.4.4513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b80f9e0d9 code=0x7ffc0000 [ 1253.673217][ T31] audit: type=1326 audit(1786555425.635:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.4.4513" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f3b80f9e0d9 code=0x7ffc0000 [ 1256.205524][T20508] input: syz1 as /devices/virtual/input/input65 [ 1256.769522][T20500] pimreg: entered allmulticast mode [ 1257.358428][ T31] audit: type=1326 audit(1786555429.335:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.4.4527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b80f9e0d9 code=0x7ffc0000 [ 1257.360229][ T31] audit: type=1326 audit(1786555429.335:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.4.4527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b80f9e0d9 code=0x7ffc0000 [ 1257.364396][ T31] audit: type=1326 audit(1786555429.345:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.4.4527" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f3b80f9e0d9 code=0x7ffc0000 [ 1258.588386][T20532] ================================================================== [ 1258.588405][T20532] BUG: KASAN: slab-use-after-free in pn_bind+0x106/0xb20 ** replaying previous printk message ** [ 1258.588405][T20532] BUG: KASAN: slab-use-after-free in pn_bind+0x106/0xb20 [ 1258.588615][T20532] Write of size 8 at addr ffff88807d3d4800 by task syz.2.4531/20532 [ 1258.588636][T20532] [ 1258.588657][T20532] CPU: 1 UID: 0 PID: 20532 Comm: syz.2.4531 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.588691][T20532] Tainted: [L]=SOFTLOCKUP [ 1258.588700][T20532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1258.588720][T20532] Call Trace: [ 1258.588731][T20532] [ 1258.588740][T20532] dump_stack_lvl+0xe8/0x150 [ 1258.588812][T20532] print_address_description+0x55/0x1e0 [ 1258.588849][T20532] ? pn_bind+0x106/0xb20 [ 1258.588876][T20532] print_report+0x58/0x70 [ 1258.588900][T20532] kasan_report+0x117/0x150 [ 1258.588953][T20532] ? pn_bind+0x106/0xb20 [ 1258.588983][T20532] pn_bind+0x106/0xb20 [ 1258.589012][T20532] usb_add_function+0x2e1/0x9f0 [ 1258.589070][T20532] ? check_remote_wakeup_config+0x58/0x1c0 [ 1258.589097][T20532] configfs_composite_bind+0xde0/0x1410 [ 1258.589152][T20532] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1258.589176][T20532] gadget_bind_driver+0x2ca/0x9e0 [ 1258.589225][T20532] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1258.589244][T20532] really_probe+0x254/0xae0 [ 1258.589339][T20532] __driver_probe_device+0x1e8/0x360 [ 1258.589364][T20532] driver_probe_device+0x4f/0x240 [ 1258.589389][T20532] __driver_attach+0x339/0x600 [ 1258.589414][T20532] bus_for_each_dev+0x23b/0x2c0 [ 1258.589470][T20532] ? __pfx___driver_attach+0x10/0x10 [ 1258.589491][T20532] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1258.589518][T20532] ? do_raw_spin_unlock+0xf5/0x200 [ 1258.589569][T20532] bus_add_driver+0x345/0x670 [ 1258.589599][T20532] driver_register+0x23a/0x320 [ 1258.589625][T20532] usb_gadget_register_driver_owner+0xf9/0x270 [ 1258.589655][T20532] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1258.589674][T20532] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1258.589704][T20532] configfs_write_iter+0x337/0x430 [ 1258.589751][T20532] vfs_write+0x612/0xba0 [ 1258.589782][T20532] ? __pfx_vfs_write+0x10/0x10 [ 1258.589807][T20532] ? __fget_files+0x2a/0x420 [ 1258.589844][T20532] ksys_write+0x150/0x270 [ 1258.589866][T20532] ? __pfx_ksys_write+0x10/0x10 [ 1258.589890][T20532] do_syscall_64+0x166/0x520 [ 1258.590052][T20532] ? trace_irq_disable+0x3b/0x140 [ 1258.590091][T20532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.590131][T20532] ? clear_bhb_loop+0x70/0xc0 [ 1258.590153][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.590173][T20532] RIP: 0033:0x7fd855d9e0d9 [ 1258.590195][T20532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.590213][T20532] RSP: 002b:00007fd856c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.590235][T20532] RAX: ffffffffffffffda RBX: 00007fd856025fa0 RCX: 00007fd855d9e0d9 [ 1258.590250][T20532] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003 [ 1258.590263][T20532] RBP: 00007fd855e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1258.590276][T20532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.590290][T20532] R13: 00007fd856026038 R14: 00007fd856025fa0 R15: 00007ffc452f6978 [ 1258.590314][T20532] [ 1258.590320][T20532] [ 1258.590325][T20532] Allocated by task 20516: [ 1258.590334][T20532] kasan_save_track+0x3e/0x80 [ 1258.590358][T20532] __kasan_kmalloc+0x93/0xb0 [ 1258.590380][T20532] __kvmalloc_node_noprof+0x50f/0x820 [ 1258.590413][T20532] futex_hash_allocate+0x481/0xf00 [ 1258.590445][T20532] copy_process+0x2923/0x43e0 [ 1258.590483][T20532] kernel_clone+0x2d7/0x940 [ 1258.590507][T20532] __se_sys_clone3+0x33c/0x360 [ 1258.590529][T20532] do_syscall_64+0x166/0x520 [ 1258.590546][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.590564][T20532] [ 1258.590569][T20532] Freed by task 20519: [ 1258.590578][T20532] kasan_save_track+0x3e/0x80 [ 1258.590599][T20532] kasan_save_free_info+0x40/0x50 [ 1258.590616][T20532] __kasan_slab_free+0x5c/0x80 [ 1258.590638][T20532] kfree+0x1c5/0x650 [ 1258.590654][T20532] __mmput+0x37a/0x420 [ 1258.590673][T20532] exit_mm+0x221/0x2d0 [ 1258.590702][T20532] do_exit+0x6cd/0x2360 [ 1258.590716][T20532] do_group_exit+0x22d/0x2f0 [ 1258.590732][T20532] get_signal+0x121b/0x12c0 [ 1258.590754][T20532] arch_do_signal_or_restart+0xbb/0x860 [ 1258.590789][T20532] exit_to_user_mode_loop+0x10e/0x770 [ 1258.590813][T20532] do_syscall_64+0x328/0x520 [ 1258.590829][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.590847][T20532] [ 1258.590853][T20532] The buggy address belongs to the object at ffff88807d3d4000 [ 1258.590853][T20532] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1258.590871][T20532] The buggy address is located 2048 bytes inside of [ 1258.590871][T20532] freed 4096-byte region [ffff88807d3d4000, ffff88807d3d5000) [ 1258.590892][T20532] [ 1258.590897][T20532] The buggy address belongs to the physical page: [ 1258.590912][T20532] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3d0 [ 1258.590931][T20532] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1258.590947][T20532] memcg:ffff8880630ec8c1 [ 1258.590955][T20532] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1258.590979][T20532] page_type: f5(slab) [ 1258.590997][T20532] raw: 00fff00000000040 ffff88801b00f500 dead000000000100 dead000000000122 [ 1258.591013][T20532] raw: 0000000000000000 0000000200040004 00000000f5000000 ffff8880630ec8c1 [ 1258.591029][T20532] head: 00fff00000000040 ffff88801b00f500 dead000000000100 dead000000000122 [ 1258.591044][T20532] head: 0000000000000000 0000000200040004 00000000f5000000 ffff8880630ec8c1 [ 1258.591059][T20532] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1258.591074][T20532] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1258.591082][T20532] page dumped because: kasan: bad access detected [ 1258.591090][T20532] page_owner tracks the page as allocated [ 1258.591096][T20532] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4994, tgid 4994 (udevd), ts 28618139990 [ 1258.591124][T20532] post_alloc_hook+0x1f9/0x250 [ 1258.591143][T20532] get_page_from_freelist+0x2209/0x2280 [ 1258.591167][T20532] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1258.591189][T20532] allocate_slab+0x7d/0x620 [ 1258.591215][T20532] refill_objects+0x2d5/0x350 [ 1258.591230][T20532] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1258.591256][T20532] __kvmalloc_node_noprof+0x63c/0x820 [ 1258.591279][T20532] seq_read_iter+0x1ea/0xca0 [ 1258.591302][T20532] vfs_read+0x595/0xa80 [ 1258.591319][T20532] ksys_read+0x150/0x270 [ 1258.591336][T20532] do_syscall_64+0x166/0x520 [ 1258.591352][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.591371][T20532] page last free pid 4996 tgid 4996 ts 28597054087 stack trace: [ 1258.591384][T20532] __free_frozen_pages+0xc93/0xd90 [ 1258.591403][T20532] __slab_free+0x274/0x2c0 [ 1258.591421][T20532] qlist_free_all+0x99/0x100 [ 1258.591442][T20532] kasan_quarantine_reduce+0x148/0x160 [ 1258.591463][T20532] __kasan_slab_alloc+0x22/0x80 [ 1258.591486][T20532] __kmalloc_noprof+0x307/0x720 [ 1258.591506][T20532] tomoyo_realpath_from_path+0xef/0x640 [ 1258.591602][T20532] tomoyo_path2_perm+0x2e7/0x760 [ 1258.591621][T20532] tomoyo_path_rename+0x14e/0x1b0 [ 1258.591644][T20532] security_path_rename+0x248/0x460 [ 1258.591703][T20532] filename_renameat2+0x4ba/0x9a0 [ 1258.591731][T20532] __se_sys_rename+0x55/0x2c0 [ 1258.591756][T20532] do_syscall_64+0x166/0x520 [ 1258.591773][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.591791][T20532] [ 1258.591796][T20532] Memory state around the buggy address: [ 1258.591807][T20532] ffff88807d3d4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.591820][T20532] ffff88807d3d4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.591833][T20532] >ffff88807d3d4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.591842][T20532] ^ [ 1258.591852][T20532] ffff88807d3d4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.591865][T20532] ffff88807d3d4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1258.591875][T20532] ================================================================== [ 1258.606702][T20532] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1259.397225][T20532] CPU: 1 UID: 0 PID: 20532 Comm: syz.2.4531 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.408241][T20532] Tainted: [L]=SOFTLOCKUP [ 1259.412563][T20532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1259.422624][T20532] Call Trace: [ 1259.425889][T20532] [ 1259.428819][T20532] vpanic+0x56d/0xa60 [ 1259.432810][T20532] ? __pfx_vpanic+0x10/0x10 [ 1259.437321][T20532] panic+0xc5/0xd0 [ 1259.441030][T20532] ? __pfx_panic+0x10/0x10 [ 1259.445458][T20532] ? preempt_schedule_thunk+0x16/0x40 [ 1259.450842][T20532] ? pn_bind+0x106/0xb20 [ 1259.455085][T20532] ? preempt_schedule_thunk+0x16/0x40 [ 1259.460449][T20532] ? pn_bind+0x106/0xb20 [ 1259.464698][T20532] check_panic_on_warn+0x89/0xb0 [ 1259.469634][T20532] ? pn_bind+0x106/0xb20 [ 1259.473878][T20532] end_report+0x73/0x170 [ 1259.478108][T20532] ? pn_bind+0x106/0xb20 [ 1259.482331][T20532] kasan_report+0x128/0x150 [ 1259.486818][T20532] ? pn_bind+0x106/0xb20 [ 1259.491043][T20532] pn_bind+0x106/0xb20 [ 1259.495099][T20532] usb_add_function+0x2e1/0x9f0 [ 1259.499954][T20532] ? check_remote_wakeup_config+0x58/0x1c0 [ 1259.505829][T20532] configfs_composite_bind+0xde0/0x1410 [ 1259.511381][T20532] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1259.517358][T20532] gadget_bind_driver+0x2ca/0x9e0 [ 1259.522374][T20532] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1259.527895][T20532] really_probe+0x254/0xae0 [ 1259.532384][T20532] __driver_probe_device+0x1e8/0x360 [ 1259.537652][T20532] driver_probe_device+0x4f/0x240 [ 1259.542660][T20532] __driver_attach+0x339/0x600 [ 1259.547403][T20532] bus_for_each_dev+0x23b/0x2c0 [ 1259.552235][T20532] ? __pfx___driver_attach+0x10/0x10 [ 1259.557498][T20532] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1259.562861][T20532] ? do_raw_spin_unlock+0xf5/0x200 [ 1259.567967][T20532] bus_add_driver+0x345/0x670 [ 1259.572630][T20532] driver_register+0x23a/0x320 [ 1259.577374][T20532] usb_gadget_register_driver_owner+0xf9/0x270 [ 1259.583535][T20532] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1259.589182][T20532] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1259.595407][T20532] configfs_write_iter+0x337/0x430 [ 1259.600507][T20532] vfs_write+0x612/0xba0 [ 1259.604738][T20532] ? __pfx_vfs_write+0x10/0x10 [ 1259.609496][T20532] ? __fget_files+0x2a/0x420 [ 1259.614067][T20532] ksys_write+0x150/0x270 [ 1259.618374][T20532] ? __pfx_ksys_write+0x10/0x10 [ 1259.623206][T20532] do_syscall_64+0x166/0x520 [ 1259.627795][T20532] ? trace_irq_disable+0x3b/0x140 [ 1259.632804][T20532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.638864][T20532] ? clear_bhb_loop+0x70/0xc0 [ 1259.643535][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.649420][T20532] RIP: 0033:0x7fd855d9e0d9 [ 1259.653827][T20532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.673442][T20532] RSP: 002b:00007fd856c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1259.681856][T20532] RAX: ffffffffffffffda RBX: 00007fd856025fa0 RCX: 00007fd855d9e0d9 [ 1259.689810][T20532] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000003 [ 1259.697782][T20532] RBP: 00007fd855e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1259.705741][T20532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.713701][T20532] R13: 00007fd856026038 R14: 00007fd856025fa0 R15: 00007ffc452f6978 [ 1259.721668][T20532] [ 1259.725188][T20532] Kernel Offset: disabled [ 1259.729527][T20532] Rebooting in 86400 seconds..