last executing test programs: 8.734129009s ago: executing program 0 (id=1270): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 8.664568158s ago: executing program 0 (id=1271): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x8010, 0xffffffffffffffff, 0x3a2000) ftruncate(0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000180)) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_submit(0x0, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x290c01) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) 8.082344208s ago: executing program 0 (id=1273): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) r1 = syz_open_dev$admmidi(&(0x7f00000043c0), 0xc000, 0x800) ppoll(&(0x7f0000004400)=[{r1, 0x4}], 0x1, &(0x7f0000004440), 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r6}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@multicast, @random="8d81e3403687", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x7, 0x24, 0x67, 0x0, 0x9, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2, "c8013d", 0x6, "d270a0"}}}}}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r9, 0x5608, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000900)={0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, @random}]}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x200, 0x7, 0xfffffffffffffffa, 0x40, 0x6, 0x401, 0x5cb2}, &(0x7f0000000080)={0x5, 0x8, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0x100000001, 0x1, 0x8d}, &(0x7f00000000c0)={0x444d40e0, 0x5, 0x8000000000, 0x80000001, 0x3, 0x5, 0xa, 0x7}, &(0x7f0000000100), &(0x7f00000001c0)={0x0}) r12 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r12) 8.016146987s ago: executing program 3 (id=1274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2000}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000170000005400068014000300303132333435363738393031323334353c00040067636d2861657329000000000000000000000000000000000000000000000000140000003031323334353637383930313233343536373839aa8fd94bfb2a55ecb4693630beb75831655ee1a360ec5620f0742c332d965ed266abfb0aa120725f8282a69f39c67da766eab2b7e82434"], 0x68}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 7.074288775s ago: executing program 3 (id=1275): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="785b0000070a010200000000000000000f000082090001000180090001006d65746100000000440002801000000000000000080002400000000b0800014000000001000b08000140000000120800034000000015080001400000000200"/120], 0x78}, 0x1, 0x0, 0x0, 0x480d5}, 0x14008084) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) r3 = fsopen(&(0x7f00000002c0)='ntfs3\x00', 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/wireless\x00') socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf2516000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) fchownat(0xffffffffffffff9c, 0x0, 0xee00, 0xee01, 0x1000) dup(0xffffffffffffffff) pread64(r4, &(0x7f0000000040)=""/30, 0x1e, 0x8001) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) 5.862428992s ago: executing program 2 (id=1278): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x8010, 0xffffffffffffffff, 0x3a2000) ftruncate(0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000180)) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) 5.500729095s ago: executing program 3 (id=1280): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13) r2 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7f03) unshare(0x6a040000) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, 0x0, 0x20000000) 5.354230219s ago: executing program 1 (id=1281): getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) syz_open_dev$vim2m(0x0, 0x40000000e, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x8010, 0xffffffffffffffff, 0x3a2000) ftruncate(0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000180)) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_submit(0x0, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x290c01) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) 5.353560059s ago: executing program 2 (id=1282): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket(0x11, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r6, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5.011601655s ago: executing program 0 (id=1283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x2, 0x4c1, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000140), 0x401, 0x10080) openat$uinput(0xffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) setgroups(0x2d5b, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) recvmsg(r4, 0x0, 0x2) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4.924402968s ago: executing program 1 (id=1284): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b6961045ae2808527a844536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a49"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x0, 0x1, 0x4, 0x24, 0x8, {0x0, 0x2710}, {0x2, 0xc, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xd}) unshare(0x2c020400) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) r5 = getpid() process_vm_readv(r5, &(0x7f0000000d00)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) preadv(r1, 0x0, 0x0, 0x8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) 4.288360951s ago: executing program 1 (id=1285): r0 = io_uring_setup(0x937, &(0x7f0000000140)={0x0, 0x32b3, 0x80, 0x0, 0x360}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000040)) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0x6c, 0xf9, 0x7, '\v4z', 0x8, 0x7}]}}}, 0x13) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc0200) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x4}, {@multicast2}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) io_setup(0xa, &(0x7f0000000140)=0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 4.023975578s ago: executing program 2 (id=1286): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0x1, {0x9, 0x1}, {0x2a, 0x4}, @cond=[{0x10, 0x92, 0xff, 0x1, 0x1, 0x83}, {0x271e, 0x4, 0x809, 0xa, 0xfffe, 0x7ff}]}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) syz_open_pts(0xffffffffffffffff, 0x600) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010227bd7000fadbdf250700100008000800060000000c00e88008003f0007000000"], 0x28}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000280)=@caif=@rfm, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, &(0x7f0000000400)=""/238, 0xee}, 0x6}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/186, 0xba}], 0x1}, 0xbc}, {{&(0x7f0000000640)=@sco, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/132, 0x84}}], 0x3, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x583800, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000240)={0x1d, r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) sendfile(r6, r8, &(0x7f0000000040), 0xfffffdef) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x60, 0x8001, 0x0, 0x4, 0x4, 0x400, 0xfa14, 0xfffffff8}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) 3.435725898s ago: executing program 1 (id=1287): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket(0x11, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r6, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.433162334s ago: executing program 3 (id=1288): socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 3.193001844s ago: executing program 3 (id=1289): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 3.084364788s ago: executing program 0 (id=1290): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113110000000000bf2000000000000016000200071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {@stats}], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@obj_user}, {@fowner_gt}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="b6", 0x1, 0x10004805, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3.083890803s ago: executing program 2 (id=1291): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) r1 = syz_open_dev$admmidi(&(0x7f00000043c0), 0xc000, 0x800) ppoll(&(0x7f0000004400)=[{r1, 0x4}], 0x1, &(0x7f0000004440), 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x1100, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r6}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000004c0)={@multicast, @random="8d81e3403687", @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x7, 0x24, 0x67, 0x0, 0x9, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @private=0xa010100}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2, "c8013d", 0x6, "d270a0"}}}}}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r9, 0x5608, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000900)={0x1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, @random}]}) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x200, 0x7, 0xfffffffffffffffa, 0x40, 0x6, 0x401, 0x5cb2}, &(0x7f0000000080)={0x5, 0x8, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0x100000001, 0x1, 0x8d}, &(0x7f00000000c0)={0x444d40e0, 0x5, 0x8000000000, 0x80000001, 0x3, 0x5, 0xa, 0x7}, &(0x7f0000000100), &(0x7f00000001c0)={0x0}) r12 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r12) 3.083648823s ago: executing program 3 (id=1292): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13) r2 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7f03) unshare(0x6a040000) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, 0x0, 0x20000000) 1.42401978s ago: executing program 2 (id=1293): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket(0x11, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r6, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.332368743s ago: executing program 1 (id=1294): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) socket(0x11, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xea}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockname$l2tp(r6, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 531.197591ms ago: executing program 0 (id=1295): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r7, &(0x7f0000001100)='md0\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r8, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r8, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r8, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r8, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r8, 0x400c0930, 0x0) ioctl(r8, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 2.646284ms ago: executing program 2 (id=1296): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/21], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000004060108000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) unshare(0x6a040000) 0s ago: executing program 1 (id=1304): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) umount2(0x0, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x40800) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x6a, 0x4, 0x1, 0x28, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x7800, 0x3, 0x4c7a}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x8001) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000400)="b9ff03310644268cb89614e886dd6f8ec0a5fa7a80339e916b28fea3fc5c6afe0189acc82c8112eb153b3415124ef9ab1d0dd98b72de1b", 0x0, 0x8003, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) kernel console output (not intermixed with test programs): fined pid=10183 comm="syz.1.898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 383.247936][ T42] audit: type=1326 audit(1785496773.458:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.1.898" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf704efec code=0x7ffc0000 [ 383.264120][ T42] audit: type=1326 audit(1785496773.518:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10183 comm="syz.1.898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 383.522713][T10194] binder: 10192:10194 ioctl 401c7012 0 returned -22 [ 383.561850][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 383.666198][T10198] 9pnet_virtio: no channels available for device syz [ 383.679883][T10196] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 383.682735][T10196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.731314][T10196] vhci_hcd vhci_hcd.0: Device attached [ 384.373816][ T5841] usb 38-1: SetAddress Request (14) to port 0 [ 384.728665][ T5841] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 384.965992][T10210] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 385.312243][T10201] rdma_rxe: rxe_newlink: failed to add wg2 [ 385.475999][T10199] vhci_hcd: connection reset by peer [ 385.477895][ T12] vhci_hcd vhci_hcd.0: stop threads [ 385.480146][ T12] vhci_hcd vhci_hcd.0: release socket [ 385.482629][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 386.540148][T10232] 9pnet_virtio: no channels available for device syz [ 386.848876][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 387.135365][T10240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.912'. [ 387.549599][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 387.649713][T10244] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 387.661881][T10244] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 387.669162][T10244] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 387.725679][T10244] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 388.810051][T10263] 9p: Bad value for 'rfdno' [ 389.010597][ T1480] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 389.170588][ T1480] usb 6-1: Using ep0 maxpacket: 8 [ 389.175101][ T1480] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 389.179042][ T1480] usb 6-1: config 179 has no interface number 0 [ 389.183583][ T1480] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 389.188563][ T1480] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 389.193682][ T1480] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.198498][ T1480] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 389.203512][ T1480] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 389.209230][ T1480] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 389.213304][ T1480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.220904][T10259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.539316][T10271] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 389.549715][T10269] IPVS: stopping master sync thread 10271 ... [ 389.554394][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 389.860682][ T5841] usb 38-1: device descriptor read/8, error -110 [ 389.873306][T10275] 9pnet_virtio: no channels available for device syz [ 389.960674][ T34] usb 6-1: USB disconnect, device number 13 [ 389.960743][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 389.965922][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 390.034885][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 390.215875][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.923'. [ 390.251889][ T5841] usb usb38-port1: attempt power cycle [ 390.815892][ T5841] usb usb38-port1: unable to enumerate USB device [ 391.518429][T10301] netlink: 'syz.2.927': attribute type 2 has an invalid length. [ 391.521763][T10301] netlink: 'syz.2.927': attribute type 2 has an invalid length. [ 392.450515][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 392.600555][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 392.603659][ T34] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 392.606407][ T34] usb 7-1: config 179 has no interface number 0 [ 392.608618][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 392.612459][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 392.616134][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 392.619647][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 392.623491][ T34] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 392.627844][ T34] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 392.630914][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.639290][T10306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.671443][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 393.400294][ T5857] usb 7-1: USB disconnect, device number 7 [ 393.400367][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 393.405648][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 393.443760][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 394.745952][T10358] 9pnet_virtio: no channels available for device syz [ 394.753229][T10357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 394.755747][T10357] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 394.821810][T10357] vhci_hcd vhci_hcd.0: Device attached [ 395.090713][ T5098] usb 42-1: SetAddress Request (22) to port 0 [ 395.090772][ T5098] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 395.240641][ T1480] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 395.390577][ T1480] usb 6-1: Using ep0 maxpacket: 32 [ 395.401101][ T1480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.405621][ T1480] usb 6-1: config 0 has no interfaces? [ 395.409141][ T1480] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 395.412590][ T1480] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 395.415338][ T1480] usb 6-1: Product: syz [ 395.416754][ T1480] usb 6-1: Manufacturer: syz [ 395.418291][ T1480] usb 6-1: SerialNumber: syz [ 395.421869][ T1480] usb 6-1: config 0 descriptor?? [ 395.812756][T10359] vhci_hcd: connection reset by peer [ 395.815502][ T5595] vhci_hcd vhci_hcd.2: stop threads [ 395.817268][ T5595] vhci_hcd vhci_hcd.2: release socket [ 395.820752][ T5595] vhci_hcd vhci_hcd.2: disconnect device [ 395.946241][ T5857] usb 6-1: USB disconnect, device number 14 [ 396.622456][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.942'. [ 397.080830][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 397.204814][ T42] kauditd_printk_skb: 74 callbacks suppressed [ 397.204828][ T42] audit: type=1326 audit(1785496787.458:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.214019][ T42] audit: type=1326 audit(1785496787.458:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.222514][ T42] audit: type=1326 audit(1785496787.458:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71373eb code=0x7ffc0000 [ 397.229474][ T42] audit: type=1326 audit(1785496787.458:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.237960][ T42] audit: type=1326 audit(1785496787.458:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.240529][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 397.245235][ T42] audit: type=1326 audit(1785496787.468:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.253663][ T42] audit: type=1326 audit(1785496787.468:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.261295][ T42] audit: type=1326 audit(1785496787.468:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.268513][ T42] audit: type=1326 audit(1785496787.468:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.276163][ T42] audit: type=1326 audit(1785496787.468:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.941" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 397.277811][ T10] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 397.296913][ T10] usb 8-1: config 179 has no interface number 0 [ 397.301806][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 397.315268][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 397.334864][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 397.341571][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 397.351920][ T10] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 397.365507][ T10] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 397.372919][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.392507][T10395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.830340][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 398.127323][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 398.127329][ T56] usb 8-1: USB disconnect, device number 9 [ 398.150634][ T5929] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 398.183315][ T5758] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 398.822824][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 399.182596][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 399.336651][ T5929] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 399.376382][ T5929] usb 7-1: config 179 has no interface number 0 [ 399.379128][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 399.382890][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 399.387382][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.391965][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 399.396887][ T5929] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 399.402434][ T5929] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 399.406193][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.414559][T10407] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.656464][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 399.856640][T10436] qrtr: Invalid version 0 [ 399.957607][T10438] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 399.960035][T10438] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 400.031911][T10438] vhci_hcd vhci_hcd.0: Device attached [ 400.136939][T10442] syzkaller1: entered promiscuous mode [ 400.138993][T10442] syzkaller1: entered allmulticast mode [ 400.181836][ T56] usb 7-1: USB disconnect, device number 8 [ 400.181868][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 400.187360][ C3] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 400.190703][ T5098] usb 42-1: device descriptor read/8, error -110 [ 400.289190][T10438] rdma_rxe: rxe_newlink: failed to add wg2 [ 400.291645][ T50] usb 44-1: SetAddress Request (18) to port 0 [ 400.293903][ T50] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 400.482133][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'. [ 400.591273][ T5098] usb usb42-port1: attempt power cycle [ 400.875439][T10439] vhci_hcd: connection reset by peer [ 400.879935][ T12] vhci_hcd vhci_hcd.3: stop threads [ 400.884356][ T12] vhci_hcd vhci_hcd.3: release socket [ 400.888858][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 401.182139][ T5098] usb usb42-port1: unable to enumerate USB device [ 401.370524][ T5929] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 401.521430][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 401.529675][ T5929] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 401.537405][ T5929] usb 7-1: config 179 has no interface number 0 [ 401.539914][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 401.549300][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 401.560631][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.568859][ T5929] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 401.577506][ T5929] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 401.586301][ T5929] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 401.589352][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.594470][T10458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 401.852140][T10467] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 401.854711][T10467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 401.869311][T10467] vhci_hcd vhci_hcd.0: Device attached [ 402.171945][T10466] binder: 10465:10466 ioctl 401c7012 0 returned -22 [ 402.206817][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 402.240585][ T5098] usb 40-1: SetAddress Request (22) to port 0 [ 402.274986][ T5098] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 402.448962][ T10] usb 7-1: USB disconnect, device number 9 [ 402.449057][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 402.454365][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 403.365476][T10468] vhci_hcd: connection reset by peer [ 403.370897][ T12] vhci_hcd vhci_hcd.1: stop threads [ 403.373294][ T12] vhci_hcd vhci_hcd.1: release socket [ 403.375837][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 403.551627][T10485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 403.981112][T10496] 9pnet_virtio: no channels available for device syz [ 404.250142][T10502] 9pnet_virtio: no channels available for device syz [ 404.938832][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.943545][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.380645][ T50] usb 44-1: device descriptor read/8, error -110 [ 405.775469][ T50] usb usb44-port1: attempt power cycle [ 406.331508][ T50] usb usb44-port1: unable to enumerate USB device [ 406.647541][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 406.647553][ T42] audit: type=1326 audit(1785496795.900:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 406.661257][ T42] audit: type=1326 audit(1785496795.910:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 406.670211][ T42] audit: type=1326 audit(1785496795.910:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 406.677787][ T42] audit: type=1326 audit(1785496795.920:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 406.686257][ T42] audit: type=1326 audit(1785496795.920:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 407.289117][T10540] 9p: Bad value for 'rfdno' [ 407.381145][ T5098] usb 40-1: device descriptor read/8, error -110 [ 407.628432][ T42] audit: type=1326 audit(1785496796.880:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 407.644846][ T42] audit: type=1326 audit(1785496796.880:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.0.976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 407.836683][ T5098] usb usb40-port1: attempt power cycle [ 408.240650][ T5929] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 408.392581][ T5929] usb 8-1: unable to get BOS descriptor or descriptor too short [ 408.396732][ T5929] usb 8-1: not running at top speed; connect to a high speed hub [ 408.401245][ T5929] usb 8-1: config 10 has an invalid interface number: 3 but max is 0 [ 408.404799][ T5929] usb 8-1: config 10 has no interface number 0 [ 408.407030][ T5098] usb usb40-port1: unable to enumerate USB device [ 408.407530][ T5929] usb 8-1: config 10 interface 3 has no altsetting 0 [ 408.414651][ T5929] usb 8-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 408.418705][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.426571][ T5929] usb 8-1: Product: syz [ 408.428377][ T5929] usb 8-1: Manufacturer: syz [ 408.430540][ T5929] usb 8-1: SerialNumber: syz [ 409.508796][ T5929] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 409.512424][ T5929] usb 8-1: selecting invalid altsetting 0 [ 409.518936][ T5929] usb 8-1: USB disconnect, device number 10 [ 409.523413][ T2517] pvrusb2: Invalid write control endpoint [ 409.793030][ T2517] pvrusb2: Invalid write control endpoint [ 409.800588][ T2517] pvrusb2: Invalid write control endpoint [ 409.806098][ T2517] pvrusb2: Invalid write control endpoint [ 409.810707][ T2517] pvrusb2: Invalid write control endpoint [ 409.812521][ T2517] pvrusb2: Invalid write control endpoint [ 409.820681][ T2517] pvrusb2: Invalid write control endpoint [ 409.826480][ T2517] pvrusb2: Invalid write control endpoint [ 409.828944][ T2517] pvrusb2: Invalid write control endpoint [ 409.836448][ T2517] pvrusb2: Invalid write control endpoint [ 409.838844][ T2517] pvrusb2: Invalid write control endpoint [ 409.841849][ T2517] pvrusb2: Invalid write control endpoint [ 409.844529][ T2517] pvrusb2: Invalid write control endpoint [ 409.846919][ T2517] pvrusb2: Invalid write control endpoint [ 409.849274][ T2517] pvrusb2: Invalid write control endpoint [ 409.855387][ T2517] pvrusb2: Invalid write control endpoint [ 409.857749][ T2517] pvrusb2: Invalid write control endpoint [ 409.859937][ T2517] pvrusb2: Invalid write control endpoint [ 409.863386][ T2517] pvrusb2: Invalid write control endpoint [ 409.866148][ T2517] pvrusb2: Invalid write control endpoint [ 409.882350][ T2517] pvrusb2: Invalid write control endpoint [ 409.884850][ T2517] pvrusb2: Invalid write control endpoint [ 409.887280][ T2517] pvrusb2: Invalid write control endpoint [ 409.889600][ T2517] pvrusb2: Invalid write control endpoint [ 409.938059][ T2517] pvrusb2: Invalid write control endpoint [ 409.943475][ T2517] pvrusb2: Invalid write control endpoint [ 409.945626][ T2517] pvrusb2: Invalid write control endpoint [ 409.961261][ T2517] pvrusb2: Invalid write control endpoint [ 409.963614][ T2517] pvrusb2: Invalid write control endpoint [ 409.967340][ T2517] pvrusb2: Invalid write control endpoint [ 409.969536][ T2517] pvrusb2: Invalid write control endpoint [ 409.975019][ T2517] pvrusb2: Invalid write control endpoint [ 409.979956][ T2517] pvrusb2: Invalid write control endpoint [ 409.992762][ T2517] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 410.087026][ T2517] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a) [ 410.098378][ T2517] pvrusb2: Invalid write control endpoint [ 410.104730][ T2517] pvrusb2: Invalid write control endpoint [ 410.113954][ T2517] pvrusb2: Invalid write control endpoint [ 410.115883][ T2517] pvrusb2: Invalid write control endpoint [ 410.125258][ T2517] pvrusb2: Invalid write control endpoint [ 410.127117][ T2517] pvrusb2: Invalid write control endpoint [ 410.129044][ T2517] pvrusb2: Invalid write control endpoint [ 410.189552][ T2517] pvrusb2: Invalid write control endpoint [ 410.192048][ T2517] pvrusb2: Invalid write control endpoint [ 410.196713][ T2517] pvrusb2: Invalid write control endpoint [ 410.200585][ T2517] pvrusb2: Invalid write control endpoint [ 410.202517][ T2517] pvrusb2: Invalid write control endpoint [ 410.210648][ T2517] pvrusb2: Invalid write control endpoint [ 410.212653][ T2517] pvrusb2: Invalid write control endpoint [ 410.214767][ T2517] pvrusb2: Invalid write control endpoint [ 410.216792][ T2517] pvrusb2: Invalid write control endpoint [ 410.218624][ T2517] pvrusb2: Invalid write control endpoint [ 410.222252][ T2517] pvrusb2: Invalid write control endpoint [ 410.226389][ T2517] pvrusb2: Invalid write control endpoint [ 410.228913][ T2517] pvrusb2: Invalid write control endpoint [ 410.236581][ T2517] pvrusb2: Invalid write control endpoint [ 410.264412][ T2517] pvrusb2: Attached sub-driver cs53l32a [ 410.313837][ T2517] pvrusb2: Invalid write control endpoint [ 410.326222][ T2517] pvrusb2: Invalid write control endpoint [ 410.328872][ T2517] pvrusb2: Invalid write control endpoint [ 410.341475][ T2517] pvrusb2: Invalid write control endpoint [ 410.345844][ T2517] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 410.358488][ T2517] pvrusb2: Device being rendered inoperable [ 410.362219][ T2517] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 410.377590][ T2517] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 410.980823][ T1480] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 411.940513][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 412.110555][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 412.113668][ T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 412.120919][ T9] usb 6-1: config 179 has no interface number 0 [ 412.125299][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 412.130539][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 412.139014][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 412.149917][ T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 412.160466][ T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 412.170555][ T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 412.178652][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.183704][T10592] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 412.950893][ T5929] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 413.132754][ T5929] usb 8-1: Using ep0 maxpacket: 32 [ 413.142213][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.146394][ T5929] usb 8-1: config 0 has no interfaces? [ 413.150593][ T5929] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 413.153723][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 413.156992][ T5929] usb 8-1: Product: syz [ 413.158373][ T5929] usb 8-1: Manufacturer: syz [ 413.160040][ T5929] usb 8-1: SerialNumber: syz [ 413.164535][ T5929] usb 8-1: config 0 descriptor?? [ 413.185736][ T5857] usb 6-1: USB disconnect, device number 15 [ 413.185794][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 413.190362][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 413.261082][T10617] input: syz0 as /devices/virtual/input/input21 [ 413.322118][ T9] usb 8-1: USB disconnect, device number 11 [ 413.592957][ T42] audit: type=1326 audit(1785496802.850:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 413.603284][ T42] audit: type=1326 audit(1785496802.850:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 413.614093][ T42] audit: type=1326 audit(1785496802.860:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 413.627716][ T42] audit: type=1326 audit(1785496802.860:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 413.641485][ T42] audit: type=1326 audit(1785496802.860:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 413.810601][ T5857] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 413.928611][ T5758] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 414.563440][ T42] audit: type=1326 audit(1785496803.820:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 414.573585][ T42] audit: type=1326 audit(1785496803.820:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.3.987" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 414.749175][ T5857] usb 6-1: device descriptor read/64, error -71 [ 415.000746][ T5857] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 415.150763][ T5857] usb 6-1: Using ep0 maxpacket: 8 [ 415.157741][ T5857] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 415.161595][ T5857] usb 6-1: config 179 has no interface number 0 [ 415.163592][ T5857] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 415.171227][ T5857] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 415.178618][ T5857] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 415.187488][ T5857] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 415.195516][ T5857] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 415.209066][ T5857] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 415.216750][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.227689][T10638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 415.844402][T10656] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 415.870208][T10656] netlink: 'syz.2.994': attribute type 29 has an invalid length. [ 415.876701][T10656] netlink: 'syz.2.994': attribute type 1 has an invalid length. [ 415.879280][T10656] netlink: 756 bytes leftover after parsing attributes in process `syz.2.994'. [ 416.033145][ T5858] usb 6-1: USB disconnect, device number 17 [ 416.033181][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 416.039152][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 416.094776][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 419.077007][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 419.141986][T10724] efs: cannot read volume header [ 419.151663][ T5858] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 419.311501][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 419.324486][ T5858] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 419.327787][ T5858] usb 8-1: config 179 has no interface number 0 [ 419.329892][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 419.334669][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 419.338765][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.343534][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 419.347223][ T5858] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.353033][ T5858] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 419.355818][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.372613][T10720] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 419.442441][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 419.570731][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 420.223960][ T5841] usb 8-1: USB disconnect, device number 12 [ 420.224109][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 420.228704][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 420.852799][T10744] lo: entered allmulticast mode [ 420.862144][T10744] lo: left allmulticast mode [ 422.232390][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 422.420265][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 422.549252][T10762] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.553609][ T42] audit: type=1326 audit(1785496811.800:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.554204][ T42] audit: type=1326 audit(1785496811.810:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.576880][ T42] audit: type=1326 audit(1785496811.830:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.588944][ T42] audit: type=1326 audit(1785496811.830:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.599021][ T42] audit: type=1326 audit(1785496811.830:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.607953][ T42] audit: type=1326 audit(1785496811.830:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.615041][ T42] audit: type=1326 audit(1785496811.830:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.622791][ T42] audit: type=1326 audit(1785496811.830:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.630526][ T42] audit: type=1326 audit(1785496811.830:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.637906][ T42] audit: type=1326 audit(1785496811.830:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10765 comm="syz.0.1019" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8fec code=0x7ffc0000 [ 422.689349][T10762] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.879574][T10762] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.024603][T10762] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.580553][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.583340][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.592410][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.595147][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.573781][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 425.576952][T10801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1028'. [ 426.038970][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 427.576389][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 427.576426][ T42] audit: type=1326 audit(1785496816.830:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10824 comm="syz.1.1034" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x0 [ 428.243785][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.251140][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.287446][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.339423][T10840] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1037'. [ 428.346452][T10840] openvswitch: netlink: Message has 512 unknown bytes. [ 428.384200][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.387656][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.393317][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.397753][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.401760][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.406438][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.409543][T10837] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 428.969268][T10847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 431.115134][ T42] audit: type=1326 audit(1785496820.370:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.133070][ T42] audit: type=1326 audit(1785496820.370:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.144858][ T42] audit: type=1326 audit(1785496820.370:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.169655][ T42] audit: type=1326 audit(1785496820.370:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.178531][ T42] audit: type=1326 audit(1785496820.370:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.183512][T10871] zero sized request [ 431.185765][ T42] audit: type=1326 audit(1785496820.370:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.205198][ T42] audit: type=1326 audit(1785496820.370:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.215374][ T42] audit: type=1326 audit(1785496820.370:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 431.236139][ T42] audit: type=1326 audit(1785496820.370:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10870 comm="syz.1.1046" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 432.848879][T10888] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 432.851036][T10888] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 432.862318][T10888] vhci_hcd vhci_hcd.0: Device attached [ 433.193866][ T5833] usb 40-1: SetAddress Request (26) to port 0 [ 433.195762][ T5833] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 433.495626][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 433.631581][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 433.631593][ T42] audit: type=1326 audit(1785496822.880:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.658024][ T42] audit: type=1326 audit(1785496822.880:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.695080][ T42] audit: type=1326 audit(1785496822.890:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.709131][ T42] audit: type=1326 audit(1785496822.890:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.723222][ T42] audit: type=1326 audit(1785496822.890:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.735876][ T42] audit: type=1326 audit(1785496822.890:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.747256][ T42] audit: type=1326 audit(1785496822.900:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.762999][ T42] audit: type=1326 audit(1785496822.900:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.782498][ T42] audit: type=1326 audit(1785496822.910:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.793720][ T42] audit: type=1326 audit(1785496822.920:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10894 comm="syz.2.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 433.838177][T10889] vhci_hcd: connection reset by peer [ 433.845979][ T5595] vhci_hcd vhci_hcd.1: stop threads [ 433.849046][ T5595] vhci_hcd vhci_hcd.1: release socket [ 433.859863][ T5595] vhci_hcd vhci_hcd.1: disconnect device [ 435.863026][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 437.402976][T10928] program syz.0.1056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.260580][ T5833] usb 40-1: device descriptor read/8, error -110 [ 438.272303][T10933] tipc: Cannot configure node identity twice [ 438.358097][T10928] infiniband syz0: set active [ 438.359915][T10928] infiniband syz0: added bond_slave_1 [ 438.366088][T10928] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 438.370690][T10928] infiniband syz0: Couldn't open port 1 [ 438.375422][T10928] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 438.380284][T10928] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 438.386485][T10928] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 438.415180][T10928] RDS/IB: syz0: added [ 438.417498][T10928] smc: adding ib device syz0 with port count 1 [ 438.420054][T10928] smc: ib device syz0 port 1 has no pnetid [ 439.465860][ T5833] usb usb40-port1: attempt power cycle [ 439.818263][T10952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 439.820485][T10952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 439.835792][T10952] vhci_hcd vhci_hcd.0: Device attached [ 440.091854][ T5833] usb usb40-port1: unable to enumerate USB device [ 440.110721][ T50] usb 38-1: SetAddress Request (18) to port 0 [ 440.113490][ T50] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 440.310520][ T5858] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 440.463810][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 440.472415][ T5858] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 440.479561][ T5858] usb 8-1: config 179 has no interface number 0 [ 440.486235][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 440.497385][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 440.510348][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.522207][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 440.531857][ T5858] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 440.540087][ T5858] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 440.543836][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.552874][T10957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 440.620639][T10953] vhci_hcd: connection reset by peer [ 440.623858][ T5595] vhci_hcd vhci_hcd.0: stop threads [ 440.626009][ T5595] vhci_hcd vhci_hcd.0: release socket [ 440.627802][ T5595] vhci_hcd vhci_hcd.0: disconnect device [ 440.741094][T10964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'. [ 440.751452][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 441.323620][ T1480] usb 8-1: USB disconnect, device number 13 [ 441.323753][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 441.328959][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 442.984196][T10985] program syz.1.1071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.108294][T10985] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 445.430286][ T50] usb 38-1: device descriptor read/8, error -110 [ 445.477284][T11019] overlayfs: failed to resolve '/ile0': -2 [ 445.822591][ T50] usb usb38-port1: attempt power cycle [ 446.391243][ T50] usb usb38-port1: unable to enumerate USB device [ 446.464109][T11037] binder: 11034:11037 ioctl c0306201 800003c0 returned -14 [ 446.550746][ T5833] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 446.710534][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 446.713816][ T5833] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 446.716584][ T5833] usb 8-1: config 179 has no interface number 0 [ 446.718941][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 446.722669][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 446.726324][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.730183][ T5833] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 446.734081][ T5833] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 446.738313][ T5833] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 446.741522][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.746340][T11039] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.800536][ T5857] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 446.950648][ T5857] usb 7-1: Using ep0 maxpacket: 8 [ 446.958346][ T5857] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 446.968819][ T5857] usb 7-1: config 179 has no interface number 0 [ 446.982367][ T5857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 446.991721][ T5857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 446.996412][ T5857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 447.000386][ T5857] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 447.005173][ T5857] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 447.010852][ T5857] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 447.015407][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.021365][T11042] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 447.281872][T11044] validate_nla: 41 callbacks suppressed [ 447.281892][T11044] netlink: 'syz.1.1080': attribute type 2 has an invalid length. [ 447.528469][ T34] usb 8-1: USB disconnect, device number 14 [ 447.528597][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 447.533654][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 447.833717][ T34] usb 7-1: USB disconnect, device number 10 [ 447.833828][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 447.838853][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 448.076090][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 448.704470][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 448.992321][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 449.007039][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1086'. [ 449.012097][T11085] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 449.014880][T11085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 449.028324][T11085] vhci_hcd vhci_hcd.0: Device attached [ 449.368705][ T50] usb 44-1: SetAddress Request (22) to port 0 [ 449.371978][ T50] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 450.463315][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 450.673180][T11087] vhci_hcd: connection reset by peer [ 450.679997][ T5595] vhci_hcd vhci_hcd.3: stop threads [ 450.681862][ T5595] vhci_hcd vhci_hcd.3: release socket [ 450.684427][ T5595] vhci_hcd vhci_hcd.3: disconnect device [ 450.840525][ T56] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 450.990547][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 450.993848][ T56] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 450.996607][ T56] usb 6-1: config 179 has no interface number 0 [ 450.999012][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 451.002783][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 451.006160][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 451.009636][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 451.013336][ T56] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 451.017527][ T56] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 451.020110][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.024837][T11126] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 451.610846][T11132] Cannot find set identified by id 0 to match [ 451.753715][ T5857] usb 6-1: USB disconnect, device number 18 [ 451.753722][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 451.753886][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 451.952663][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 452.080622][T11138] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1094'. [ 452.087537][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 452.637758][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.642983][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.646436][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.649826][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.653294][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.656150][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.659599][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.663354][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.666736][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.669759][T11148] netlink: 'syz.2.1096': attribute type 3 has an invalid length. [ 452.695932][T11148] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1096'. [ 452.699839][T11148] openvswitch: netlink: Message has 512 unknown bytes. [ 452.724059][T11149] warn_alloc: 1 callbacks suppressed [ 452.724077][T11149] syz.1.1097: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.735019][T11149] CPU: 3 UID: 0 PID: 11149 Comm: syz.1.1097 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.735049][T11149] Tainted: [L]=SOFTLOCKUP [ 452.735071][T11149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 452.735085][T11149] Call Trace: [ 452.735092][T11149] [ 452.735102][T11149] dump_stack_lvl+0x100/0x190 [ 452.735135][T11149] warn_alloc.cold+0x94/0xa8 [ 452.735160][T11149] ? __pfx_warn_alloc+0x10/0x10 [ 452.735189][T11149] ? kasan_save_stack+0x3f/0x50 [ 452.735218][T11149] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 452.735239][T11149] ? vb2_vmalloc_alloc+0xf9/0x410 [ 452.735262][T11149] ? __vb2_queue_alloc+0x8d5/0x1160 [ 452.735279][T11149] ? vb2_core_create_bufs+0x5fa/0xa30 [ 452.735297][T11149] ? vb2_create_bufs+0x40c/0x830 [ 452.735323][T11149] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 452.735351][T11149] ? vidioc_create_bufs+0x7d/0xf0 [ 452.735372][T11149] ? v4l_create_bufs+0x17d/0x270 [ 452.735395][T11149] ? video_usercopy+0x3d3/0x14c0 [ 452.735419][T11149] ? v4l2_ioctl+0x1bd/0x250 [ 452.735446][T11149] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 452.735478][T11149] ? vb2_vmalloc_alloc+0x135/0x410 [ 452.735502][T11149] __vmalloc_node_range_noprof+0x136c/0x1630 [ 452.735546][T11149] ? vb2_vmalloc_alloc+0x135/0x410 [ 452.735577][T11149] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.735613][T11149] ? kasan_save_track+0x14/0x30 [ 452.735638][T11149] ? __kasan_kmalloc+0xaa/0xb0 [ 452.735664][T11149] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 452.735687][T11149] ? vb2_vmalloc_alloc+0x135/0x410 [ 452.735710][T11149] vmalloc_user_noprof+0x9e/0xe0 [ 452.735741][T11149] ? vb2_vmalloc_alloc+0x135/0x410 [ 452.735764][T11149] vb2_vmalloc_alloc+0x135/0x410 [ 452.735784][T11149] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 452.735807][T11149] __vb2_queue_alloc+0x8d5/0x1160 [ 452.735841][T11149] vb2_core_create_bufs+0x5fa/0xa30 [ 452.735865][T11149] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 452.735891][T11149] ? lock_acquire+0x1b9/0x370 [ 452.735929][T11149] vb2_create_bufs+0x40c/0x830 [ 452.735961][T11149] ? __pfx_vb2_create_bufs+0x10/0x10 [ 452.735991][T11149] ? v4l_sanitize_colorspace+0x220/0x410 [ 452.736028][T11149] vb2_ioctl_create_bufs+0x244/0x3e0 [ 452.736058][T11149] ? v4l2_compat_get_user+0x883/0x11f0 [ 452.736081][T11149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.736112][T11149] vidioc_create_bufs+0x7d/0xf0 [ 452.736137][T11149] v4l_create_bufs+0x17d/0x270 [ 452.736163][T11149] __video_do_ioctl+0xb2a/0xdf0 [ 452.736220][T11149] ? trace_kmalloc+0xeb/0x110 [ 452.736250][T11149] ? __pfx___video_do_ioctl+0x10/0x10 [ 452.736283][T11149] ? video_usercopy+0x145/0x14c0 [ 452.736317][T11149] video_usercopy+0x3d3/0x14c0 [ 452.736348][T11149] ? __pfx___video_do_ioctl+0x10/0x10 [ 452.736380][T11149] ? __pfx_video_usercopy+0x10/0x10 [ 452.736420][T11149] ? __fget_files+0x215/0x3d0 [ 452.736439][T11149] ? hook_file_ioctl_common+0x140/0x440 [ 452.736478][T11149] v4l2_ioctl+0x1bd/0x250 [ 452.736509][T11149] v4l2_compat_ioctl32+0x20f/0x2d0 [ 452.736532][T11149] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 452.736559][T11149] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 452.736594][T11149] __do_fast_syscall_32+0xe7/0x970 [ 452.736622][T11149] ? lockdep_hardirqs_on+0x78/0x100 [ 452.736649][T11149] do_fast_syscall_32+0x32/0x70 [ 452.736675][T11149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 452.736699][T11149] RIP: 0023:0xf704efec [ 452.736724][T11149] Code: Unable to access opcode bytes at 0xf704efc2. [ 452.736733][T11149] RSP: 002b:00000000f53fb50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 452.736753][T11149] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 452.736765][T11149] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 452.736776][T11149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 452.736787][T11149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 452.736798][T11149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 452.736824][T11149] [ 452.736855][T11149] Mem-Info: [ 452.892126][T11149] active_anon:12443 inactive_anon:23042 isolated_anon:0 [ 452.892126][T11149] active_file:704 inactive_file:15983 isolated_file:0 [ 452.892126][T11149] unevictable:768 dirty:482 writeback:0 [ 452.892126][T11149] slab_reclaimable:6567 slab_unreclaimable:57796 [ 452.892126][T11149] mapped:22445 shmem:31442 pagetables:1278 [ 452.892126][T11149] sec_pagetables:322 bounce:0 [ 452.892126][T11149] kernel_misc_reclaimable:0 [ 452.892126][T11149] free:37699 free_pcp:11033 free_cma:0 [ 452.907119][T11149] Node 0 active_anon:10508kB inactive_anon:5744kB active_file:0kB inactive_file:632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:17736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:1108kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 452.917987][T11149] Node 1 active_anon:39264kB inactive_anon:86424kB active_file:2816kB inactive_file:63300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93852kB dirty:1928kB writeback:0kB shmem:108032kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5208kB pagetables:4004kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 452.929505][T11149] Node 0 DMA free:1976kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.950551][T11149] lowmem_reserve[]: 0 280 280 280 280 [ 452.953159][T11149] Node 0 DMA32 free:17320kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10252kB inactive_anon:5744kB active_file:0kB inactive_file:632kB unevictable:1536kB writepending:0kB zspages:628kB present:1032196kB managed:286904kB mlocked:0kB bounce:0kB free_pcp:6368kB local_pcp:1932kB free_cma:0kB [ 452.966425][T11149] lowmem_reserve[]: 0 0 0 0 0 [ 452.968627][T11149] Node 1 DMA32 free:131244kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39464kB inactive_anon:86424kB active_file:2816kB inactive_file:63300kB unevictable:1536kB writepending:1928kB zspages:7556kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:37644kB local_pcp:2732kB free_cma:0kB [ 452.982284][T11149] lowmem_reserve[]: 0 0 0 0 0 [ 452.984529][T11149] Node 0 DMA: 68*4kB (UM) 3*8kB (UM) 1*16kB (U) 4*32kB (UM) 2*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1976kB [ 452.990998][T11149] Node 0 DMA32: 470*4kB (UME) 110*8kB (U) 108*16kB (UME) 213*32kB (UM) 24*64kB (UM) 13*128kB (UM) 5*256kB (UME) 1*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 17320kB [ 452.998198][T11149] Node 1 DMA32: 1315*4kB (UME) 558*8kB (UME) 497*16kB (UME) 592*32kB (UME) 185*64kB (UME) 134*128kB (UME) 62*256kB (UME) 37*512kB (UME) 22*1024kB (UM) 2*2048kB (U) 1*4096kB (U) = 131148kB [ 453.006327][T11149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.010247][T11149] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.014575][T11149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.018698][T11149] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 453.022769][T11149] 48980 total pagecache pages [ 453.024882][T11149] 852 pages in swap cache [ 453.026803][T11149] Free swap = 196kB [ 453.028588][T11149] Total swap = 124996kB [ 453.031056][T11149] 524155 pages RAM [ 453.032746][T11149] 0 pages HighMem/MovableOnly [ 453.034869][T11149] 211536 pages reserved [ 453.036721][T11149] 0 pages cma reserved [ 453.517981][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1100'. [ 453.599942][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1098'. [ 453.603512][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1098'. [ 453.979702][T11171] ptrace attach of "/syz-executor exec"[5746] was attempted by " [ 454.004769][T11172] 9pnet_virtio: no channels available for device syz [ 454.132828][T11171] tipc: Enabled bearer , priority 10 [ 454.421023][ T50] usb 44-1: device descriptor read/8, error -110 [ 454.506497][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 454.506512][ T42] audit: type=1326 audit(1785496843.760:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.516492][ T42] audit: type=1326 audit(1785496843.780:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.528920][ T42] audit: type=1326 audit(1785496843.780:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.544121][ T42] audit: type=1326 audit(1785496843.780:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.558795][ T42] audit: type=1326 audit(1785496843.780:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.572290][ T42] audit: type=1326 audit(1785496843.780:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.587527][ T42] audit: type=1326 audit(1785496843.780:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.599771][ T42] audit: type=1326 audit(1785496843.780:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.615717][ T42] audit: type=1326 audit(1785496843.780:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.633779][ T42] audit: type=1326 audit(1785496843.780:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11175 comm="syz.2.1104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 454.821221][ T50] usb usb44-port1: attempt power cycle [ 455.257261][ T5858] tipc: Node number set to 3145728 [ 455.391339][ T50] usb usb44-port1: unable to enumerate USB device [ 456.535138][T11200] ptrace attach of ""[11201] was attempted by "/syz-executor exec"[11200] [ 457.390554][ T5858] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 457.550693][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 457.553649][ T5858] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 457.556598][ T5858] usb 7-1: config 179 has no interface number 0 [ 457.558732][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 457.562504][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 457.566413][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 457.571162][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 457.575885][ T5858] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 457.581811][ T5858] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 457.585655][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.593006][T11204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 457.961068][ T56] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 458.396286][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1111'. [ 458.500924][ T56] usb 7-1: USB disconnect, device number 11 [ 458.500973][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 458.506331][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 459.913441][T11246] random: crng reseeded on system resumption [ 460.190551][ T56] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 460.353485][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 460.363190][ T56] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 460.370004][ T56] usb 6-1: config 179 has no interface number 0 [ 460.375251][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 460.385847][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 460.391680][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 460.396470][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 460.404238][ T56] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 460.411876][ T56] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 460.414880][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.421785][T11249] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 461.154092][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 461.156747][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 461.159443][ T1480] usb 6-1: USB disconnect, device number 19 [ 461.220925][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 461.260523][ T56] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 461.412070][ T56] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.418539][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 461.422816][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 461.425778][ T56] usb 8-1: Product: syz [ 461.427219][ T56] usb 8-1: Manufacturer: syz [ 461.429135][ T56] usb 8-1: SerialNumber: syz [ 461.603516][T11274] ptrace attach of ""[11275] was attempted by "/syz-executor exec"[11274] [ 461.640857][ T56] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 461.835763][T11273] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 461.893921][ T5858] usb 8-1: USB disconnect, device number 15 [ 461.900070][ T5858] usblp0: removed [ 462.314792][T11280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 462.316906][T11280] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 462.336722][T11280] vhci_hcd vhci_hcd.0: Device attached [ 462.637128][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 462.637165][ T42] audit: type=1400 audit(1785496851.890:1196): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11283 comm="syz.0.1124" [ 462.991139][ T5841] usb 42-1: SetAddress Request (26) to port 0 [ 462.993437][ T5841] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 462.994593][ T10] kernel read not supported for file /video9 (pid: 10 comm: kworker/0:1) [ 463.459138][T11279] rdma_rxe: rxe_newlink: failed to add wg2 [ 463.636526][T11281] vhci_hcd: connection reset by peer [ 463.641941][ T12] vhci_hcd vhci_hcd.2: stop threads [ 463.644315][ T12] vhci_hcd vhci_hcd.2: release socket [ 463.646492][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 463.750603][ T5858] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 463.920537][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 463.924002][ T5858] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 463.927407][ T5858] usb 8-1: config 179 has no interface number 0 [ 463.929752][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 463.934315][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 463.938712][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 463.943384][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 463.947687][ T5858] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 463.952279][ T5858] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 463.955882][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.961795][T11299] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 464.694974][ T10] usb 8-1: USB disconnect, device number 16 [ 464.694975][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 464.695131][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 464.871219][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 465.230835][ T56] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 465.380543][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 465.385949][ T56] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 465.388769][ T56] usb 6-1: config 179 has no interface number 0 [ 465.391030][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 465.394862][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 465.398414][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 465.401906][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 465.406264][ T56] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 465.411195][ T56] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 465.414587][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.420266][T11312] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 466.193149][ T56] usb 6-1: USB disconnect, device number 20 [ 466.193230][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 466.199248][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 466.248248][T11321] netlink: 58 bytes leftover after parsing attributes in process `syz.3.1133'. [ 466.251611][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 466.661860][ T5758] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 466.741124][T11326] overlayfs: failed to resolve '/ile0': -2 [ 467.162203][ T56] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 467.331891][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 467.340895][ T56] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 467.347056][ T56] usb 8-1: config 179 has no interface number 0 [ 467.349163][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 467.425456][T11335] program syz.2.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.439321][T11335] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 468.171018][ T5841] usb 42-1: device descriptor read/8, error -110 [ 468.296473][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 468.299934][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 468.306996][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 468.310804][ T56] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 468.314907][ T56] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 468.317684][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.324112][T11331] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 469.046479][ T5841] usb usb42-port1: attempt power cycle [ 469.151694][T11339] program syz.1.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.201312][T11343] IPVS: Scheduler module ip_vs_sip not found [ 469.202593][T11339] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 469.232088][T11339] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 469.239224][T11339] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 469.242455][T11339] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 469.246185][T11339] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 469.265087][T11339] pci 0000:00:01.0: Adding to iommu group 1 [ 469.276933][T11339] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 469.279819][T11339] pci 0000:00:01.0: vgaarb: bridge control possible [ 469.282540][T11339] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 469.288695][T11339] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 469.300838][T11339] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 469.303612][T11339] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 469.306346][T11339] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 469.308768][T11339] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 469.311346][T11339] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 469.314254][T11339] pci 0000:00:02.0: enabling Extended Tags [ 469.329340][T11339] pci 0000:00:02.0: Adding to iommu group 2 [ 469.342388][T11339] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 469.353460][T11339] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 469.356503][T11339] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 469.360045][T11339] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 469.363899][T11339] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 469.367305][T11339] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 469.371163][T11339] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 469.378749][T11339] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 469.397615][T11339] [drm] Found bochs VGA, ID 0xb0c5. [ 469.399308][T11339] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 469.431663][T11339] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 469.477411][T11339] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 469.536082][T11339] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 469.628604][T11339] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 469.723294][T11339] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 469.726194][T11339] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 469.729162][T11339] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 469.953479][ T5841] usb usb42-port1: unable to enumerate USB device [ 470.078173][ T56] usb 8-1: USB disconnect, device number 17 [ 470.080332][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 470.080370][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 470.134155][ T5458] 8021q: adding VLAN 0 to HW filter on device eth1 [ 470.365709][T11391] siw: device registration error -23 [ 470.641895][ T5841] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 472.354816][T11404] overlayfs: failed to resolve '/ile0': -2 [ 472.477021][T11406] syz.2.1147: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 472.494252][T11406] CPU: 1 UID: 0 PID: 11406 Comm: syz.2.1147 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.494273][T11406] Tainted: [L]=SOFTLOCKUP [ 472.494278][T11406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.494293][T11406] Call Trace: [ 472.494310][T11406] [ 472.494315][T11406] dump_stack_lvl+0x100/0x190 [ 472.494421][T11406] warn_alloc.cold+0x94/0xa8 [ 472.494437][T11406] ? __pfx_warn_alloc+0x10/0x10 [ 472.494463][T11406] ? __pfx_stack_trace_save+0x10/0x10 [ 472.494512][T11406] ? kasan_save_stack+0x3f/0x50 [ 472.494534][T11406] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 472.494546][T11406] ? vb2_vmalloc_alloc+0xf9/0x410 [ 472.494588][T11406] ? __vb2_queue_alloc+0x8d5/0x1160 [ 472.494600][T11406] ? vb2_core_create_bufs+0x5fa/0xa30 [ 472.494613][T11406] ? vb2_create_bufs+0x40c/0x830 [ 472.494630][T11406] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 472.494648][T11406] ? vidioc_create_bufs+0x7d/0xf0 [ 472.494667][T11406] ? v4l_create_bufs+0x17d/0x270 [ 472.494682][T11406] ? video_usercopy+0x3d3/0x14c0 [ 472.494698][T11406] ? v4l2_ioctl+0x1bd/0x250 [ 472.494713][T11406] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 472.494728][T11406] ? vb2_vmalloc_alloc+0x135/0x410 [ 472.494740][T11406] __vmalloc_node_range_noprof+0x136c/0x1630 [ 472.494764][T11406] ? vb2_vmalloc_alloc+0x135/0x410 [ 472.494781][T11406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 472.494802][T11406] ? kasan_save_track+0x14/0x30 [ 472.494815][T11406] ? __kasan_kmalloc+0xaa/0xb0 [ 472.494829][T11406] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 472.494841][T11406] ? vb2_vmalloc_alloc+0x135/0x410 [ 472.494853][T11406] vmalloc_user_noprof+0x9e/0xe0 [ 472.494869][T11406] ? vb2_vmalloc_alloc+0x135/0x410 [ 472.494882][T11406] vb2_vmalloc_alloc+0x135/0x410 [ 472.494894][T11406] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 472.494907][T11406] __vb2_queue_alloc+0x8d5/0x1160 [ 472.494926][T11406] vb2_core_create_bufs+0x5fa/0xa30 [ 472.494940][T11406] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 472.494955][T11406] ? lock_acquire+0x1b9/0x370 [ 472.494996][T11406] vb2_create_bufs+0x40c/0x830 [ 472.495016][T11406] ? __pfx_vb2_create_bufs+0x10/0x10 [ 472.495033][T11406] ? v4l_sanitize_colorspace+0x220/0x410 [ 472.495056][T11406] vb2_ioctl_create_bufs+0x244/0x3e0 [ 472.495075][T11406] ? v4l2_compat_get_user+0x883/0x11f0 [ 472.495090][T11406] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 472.495115][T11406] vidioc_create_bufs+0x7d/0xf0 [ 472.495130][T11406] v4l_create_bufs+0x17d/0x270 [ 472.495145][T11406] __video_do_ioctl+0xb2a/0xdf0 [ 472.495163][T11406] ? trace_kmalloc+0xeb/0x110 [ 472.495180][T11406] ? __pfx___video_do_ioctl+0x10/0x10 [ 472.495199][T11406] ? video_usercopy+0x145/0x14c0 [ 472.495220][T11406] video_usercopy+0x3d3/0x14c0 [ 472.495238][T11406] ? __pfx___video_do_ioctl+0x10/0x10 [ 472.495258][T11406] ? __pfx_video_usercopy+0x10/0x10 [ 472.495279][T11406] ? __fget_files+0x215/0x3d0 [ 472.495295][T11406] ? hook_file_ioctl_common+0x140/0x440 [ 472.495348][T11406] v4l2_ioctl+0x1bd/0x250 [ 472.495368][T11406] v4l2_compat_ioctl32+0x20f/0x2d0 [ 472.495384][T11406] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 472.495399][T11406] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 472.495420][T11406] __do_fast_syscall_32+0xe7/0x970 [ 472.495453][T11406] ? lockdep_hardirqs_on+0x78/0x100 [ 472.495470][T11406] do_fast_syscall_32+0x32/0x70 [ 472.495491][T11406] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 472.495508][T11406] RIP: 0023:0xf6ffefec [ 472.495525][T11406] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 472.495537][T11406] RSP: 002b:00000000f53ab50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 472.495551][T11406] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0f8565c [ 472.495559][T11406] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.495567][T11406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.495574][T11406] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 472.495582][T11406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.495598][T11406] [ 472.495988][T11406] Mem-Info: [ 472.775745][T11406] active_anon:15482 inactive_anon:19855 isolated_anon:0 [ 472.775745][T11406] active_file:2481 inactive_file:10549 isolated_file:0 [ 472.775745][T11406] unevictable:22638 dirty:451 writeback:0 [ 472.775745][T11406] slab_reclaimable:6557 slab_unreclaimable:57607 [ 472.775745][T11406] mapped:34389 shmem:32429 pagetables:1310 [ 472.775745][T11406] sec_pagetables:331 bounce:0 [ 472.775745][T11406] kernel_misc_reclaimable:0 [ 472.775745][T11406] free:21436 free_pcp:10629 free_cma:0 [ 472.810847][T11406] Node 0 active_anon:10508kB inactive_anon:5744kB active_file:0kB inactive_file:632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:17736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:1092kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 473.072762][T11406] Node 1 active_anon:71620kB inactive_anon:74676kB active_file:9924kB inactive_file:87164kB unevictable:5516kB isolated(anon):0kB isolated(file):0kB mapped:115528kB dirty:1804kB writeback:0kB shmem:132180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5424kB pagetables:4248kB sec_pagetables:184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 473.101812][T11406] Node 0 DMA free:1976kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:256kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.237915][T11421] program syz.3.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.247105][T11421] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 473.986792][T11406] lowmem_reserve[]: 0 280 280 280 280 [ 473.997891][T11406] Node 0 DMA32 free:16924kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10252kB inactive_anon:5744kB active_file:0kB inactive_file:632kB unevictable:1536kB writepending:0kB zspages:628kB present:1032196kB managed:286904kB mlocked:0kB bounce:0kB free_pcp:7020kB local_pcp:292kB free_cma:0kB [ 474.022223][T11406] lowmem_reserve[]: 0 0 0 0 0 [ 474.024992][T11406] Node 1 DMA32 free:95800kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63152kB inactive_anon:74612kB active_file:9920kB inactive_file:87072kB unevictable:5588kB writepending:1804kB zspages:7556kB present:1048432kB managed:948212kB mlocked:36kB bounce:0kB free_pcp:29748kB local_pcp:11680kB free_cma:0kB [ 474.042933][T11406] lowmem_reserve[]: 0 0 0 0 0 [ 474.053226][T11406] Node 0 DMA: 68*4kB (UM) 3*8kB (UM) 1*16kB (U) 4*32kB (UM) 2*64kB (UM) 3*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1976kB [ 474.067046][T11406] Node 0 DMA32: 499*4kB (UM) 144*8kB (UME) 109*16kB (UME) 182*32kB (UME) 21*64kB (UME) 12*128kB (UM) 5*256kB (UME) 2*512kB (ME) 1*1024kB (E) 0*2048kB 0*4096kB = 16924kB [ 474.077665][T11406] Node 1 DMA32: 888*4kB (UME) 169*8kB (ME) 450*16kB (ME) 396*32kB (ME) 130*64kB (UME) 49*128kB (UME) 48*256kB (UME) 34*512kB (UME) 14*1024kB (UM) 2*2048kB (M) 2*4096kB (UM) = 95688kB [ 474.086038][T11406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.090301][T11406] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 474.093851][T11406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 474.096960][T11406] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 474.100304][T11406] 60590 total pagecache pages [ 474.102174][T11406] 858 pages in swap cache [ 474.103789][T11406] Free swap = 240kB [ 474.105174][T11406] Total swap = 124996kB [ 474.106760][T11406] 524155 pages RAM [ 474.108426][T11406] 0 pages HighMem/MovableOnly [ 474.110547][T11406] 211536 pages reserved [ 474.112287][T11406] 0 pages cma reserved [ 474.360577][ T5858] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 474.521358][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 474.525532][ T5858] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 474.530525][ T5858] usb 6-1: config 179 has no interface number 0 [ 474.535581][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 474.543218][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 474.550517][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 474.557775][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 474.569184][ T5858] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 474.575715][ T5858] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 474.579647][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.589450][T11425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.819162][T11433] team0: Port device bond0 removed [ 474.843166][T11436] 9pnet_virtio: no channels available for device syz [ 474.919781][T11433] bond0: (slave bond_slave_0): Releasing backup interface [ 474.946237][T11433] bond0: (slave bond_slave_1): Releasing backup interface [ 474.988176][T11433] team0: Port device team_slave_0 removed [ 475.006631][T11433] team0: Port device team_slave_1 removed [ 475.012473][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.015004][T11433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.020193][T11433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.560913][ T5858] usb 6-1: USB disconnect, device number 21 [ 475.563134][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 475.563168][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 475.920487][ T5858] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 476.070485][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 476.074253][ T5858] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.077208][ T5858] usb 6-1: config 179 has no interface number 0 [ 476.079363][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 476.084459][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 476.089113][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 476.094359][ T5858] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 476.099083][ T5858] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.105051][ T5858] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 476.108805][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.120347][T11443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 477.011817][ T50] usb 6-1: USB disconnect, device number 22 [ 477.011887][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 477.016370][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 477.697392][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'. [ 477.835369][ T42] audit: type=1400 audit(1785496867.090:1197): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11466 comm="syz.3.1164" [ 477.900838][ T5858] kernel read not supported for file /video9 (pid: 5858 comm: kworker/3:3) [ 478.223813][T11481] ptrace attach of ""[11483] was attempted by "/syz-executor exec"[11481] [ 478.240534][ T42] audit: type=1800 audit(1785496867.490:1198): pid=11481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1162" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 478.263129][T11481] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 478.561102][ T5758] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 483.048855][T11572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1173'. [ 483.058477][T11571] nbd: socks must be embedded in a SOCK_ITEM attr [ 483.062414][T11571] block nbd0: shutting down sockets [ 483.883229][T11585] program syz.3.1185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.893946][T11585] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 484.984368][T11587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 484.987078][T11587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 485.021979][T11587] vhci_hcd vhci_hcd.0: Device attached [ 485.252918][T11590] vhci_hcd: connection closed [ 485.253258][ T12] vhci_hcd vhci_hcd.1: stop threads [ 485.257406][ T12] vhci_hcd vhci_hcd.1: release socket [ 485.271028][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 485.290539][ T50] usb 40-1: enqueue for inactive port 0 [ 485.670592][ T5758] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 485.805236][ T50] usb usb40-port1: attempt power cycle [ 486.690511][ T5858] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 486.691092][ T50] usb usb40-port1: unable to enumerate USB device [ 486.820595][ T56] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 486.850517][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 486.854830][ T5858] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.859576][ T5858] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.863747][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 486.866987][ T5858] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 486.871101][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.877123][ T5858] usb 6-1: config 0 descriptor?? [ 486.980485][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 486.992792][ T56] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 487.006370][ T56] usb 8-1: config 179 has no interface number 0 [ 487.021033][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 487.045583][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 487.063027][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.068233][ T56] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 487.074243][ T56] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 487.080176][ T56] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 487.084623][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.104236][T11619] random: crng reseeded on system resumption [ 487.144856][T11610] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 487.966216][ T5858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 487.973386][ T5858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 487.976701][ T5858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 487.979882][ T5858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 487.983161][ T5858] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 487.987255][ T5858] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 488.087499][ T5858] usb 6-1: USB disconnect, device number 23 [ 488.464197][T11626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 488.466970][T11626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.471221][T11626] vhci_hcd vhci_hcd.0: Device attached [ 488.500081][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 488.500086][ T5841] usb 8-1: USB disconnect, device number 18 [ 488.500107][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.831043][ T50] usb 42-1: SetAddress Request (30) to port 0 [ 488.836732][ T50] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 488.894110][T11632] geneve2: entered allmulticast mode [ 489.312422][T11627] vhci_hcd: connection reset by peer [ 489.315961][ T12] vhci_hcd vhci_hcd.2: stop threads [ 489.318326][ T12] vhci_hcd vhci_hcd.2: release socket [ 489.322940][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 489.703499][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 489.890546][ T5858] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 490.050539][ T5858] usb 8-1: Using ep0 maxpacket: 32 [ 490.069141][ T5858] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.073594][ T5858] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 490.077601][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.089677][ T5858] usb 8-1: config 0 descriptor?? [ 490.380302][ T5858] usb 8-1: USB disconnect, device number 19 [ 492.120473][T11694] random: crng reseeded on system resumption [ 492.494136][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 493.348265][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'. [ 493.940959][ T50] usb 42-1: device descriptor read/8, error -110 [ 494.260532][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 494.331536][ T50] usb usb42-port1: attempt power cycle [ 494.449185][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 494.453302][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.455767][ T9] usb 7-1: config 179 has no interface number 0 [ 494.457789][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 494.461482][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 494.464891][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.468410][ T9] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 494.472096][ T9] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.476090][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 494.478978][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.487959][T11736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 494.739141][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 494.739145][ T56] usb 7-1: USB disconnect, device number 12 [ 494.921377][ T50] usb usb42-port1: unable to enumerate USB device [ 495.474805][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 495.497283][T11767] tipc: Started in network mode [ 495.499567][T11767] tipc: Node identity 4, cluster identity 4711 [ 495.504135][T11767] tipc: Node number set to 4 [ 495.791635][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 495.940481][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 495.943423][ T9] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 495.946034][ T9] usb 8-1: config 179 has no interface number 0 [ 495.947984][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 495.952185][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 495.956266][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 495.960088][ T9] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 495.963866][ T9] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 495.968167][ T9] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 495.971333][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.977123][T11772] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 496.574758][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 496.701498][ T50] usb 8-1: USB disconnect, device number 20 [ 496.701587][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 496.706936][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 500.450917][ T42] audit: type=1800 audit(1785496889.710:1199): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1218" name="bus" dev="ramfs" ino=41910 res=0 errno=0 [ 500.625948][ T1480] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 500.790606][ T1480] usb 7-1: Using ep0 maxpacket: 8 [ 500.793560][ T1480] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 500.796506][ T1480] usb 7-1: config 179 has no interface number 0 [ 500.798599][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 500.802902][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 500.806756][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.810377][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 500.814406][ T1480] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.818739][ T1480] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 500.822454][ T1480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.858567][T11827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 501.302890][T11834] tipc: Cannot configure node identity twice [ 501.598378][ T1480] usb 7-1: USB disconnect, device number 13 [ 501.601296][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 501.601338][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 502.602769][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 503.301628][T11861] 9pnet_virtio: no channels available for device syz [ 503.351594][ T5858] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 503.510745][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 503.540018][ T5858] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 503.542749][ T5858] usb 7-1: config 179 has no interface number 0 [ 503.544740][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 503.548410][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 503.554637][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.558099][ T5858] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 503.562238][ T5858] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 503.566996][ T5858] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 503.569991][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.576024][T11857] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 504.280035][ T5758] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 504.294681][ T5758] Bluetooth: hci2: Injecting HCI hardware error event [ 504.299877][ T5758] Bluetooth: hci2: hardware error 0x00 [ 504.390791][ T5858] usb 7-1: USB disconnect, device number 14 [ 504.390853][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 504.390875][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 504.686545][T11870] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.813294][T11870] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.991447][T11870] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.149705][T11870] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.460670][ T1480] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 505.500660][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.504402][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.507868][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.681492][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.753510][T11884] misc userio: The device must be registered before sending interrupts [ 505.890518][ T1480] usb 8-1: Using ep0 maxpacket: 8 [ 505.894358][ T1480] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 505.898032][ T1480] usb 8-1: config 179 has no interface number 0 [ 505.900807][ T1480] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 505.905326][ T1480] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 505.909947][ T1480] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.914554][ T1480] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 505.919103][ T1480] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 505.924564][ T1480] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 505.928286][ T1480] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.934908][T11873] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 506.423598][ T5758] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 506.689388][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 506.692069][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 506.694862][ T1480] usb 8-1: USB disconnect, device number 21 [ 506.818888][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'. [ 507.313070][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1239'. [ 507.730559][ T34] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 507.900574][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 507.905643][ T34] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 507.909109][ T34] usb 8-1: config 179 has no interface number 0 [ 507.912099][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 507.916594][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 507.921548][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 507.926048][ T34] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 507.933142][ T34] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 507.942956][ T34] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 507.952016][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.968926][T11909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 508.367596][T11941] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1244'. [ 508.370716][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 508.550600][ T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 508.702255][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.706605][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 508.774173][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.844099][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 508.856489][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 508.863312][T11947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1248'. [ 508.866939][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.869908][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.872488][ T9] usb 6-1: Product: syz [ 508.873850][ T9] usb 6-1: Manufacturer: syz [ 508.875345][ T9] usb 6-1: SerialNumber: syz [ 508.881655][T11937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 508.969014][ T10] usb 8-1: USB disconnect, device number 22 [ 508.969015][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 508.969161][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 509.028281][T11951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 509.030513][T11951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 509.039527][T11951] vhci_hcd vhci_hcd.0: Device attached [ 509.096122][T11937] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 509.153932][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1250'. [ 509.164038][ T42] audit: type=1326 audit(1785496898.420:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 509.174364][ T42] audit: type=1326 audit(1785496898.430:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11954 comm="syz.3.1250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2fec code=0x7ffc0000 [ 509.331111][ T50] usb 38-1: SetAddress Request (22) to port 0 [ 509.337857][ T50] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 509.859649][T11952] vhci_hcd: connection reset by peer [ 509.864123][ T12] vhci_hcd vhci_hcd.0: stop threads [ 509.868618][ T12] vhci_hcd vhci_hcd.0: release socket [ 509.873534][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 510.588470][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 511.116120][ T9] cdc_ncm 6-1:1.0: bind() failure [ 511.120308][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 511.122558][ T9] cdc_ncm 6-1:1.1: bind() failure [ 511.141228][ T9] usb 6-1: USB disconnect, device number 24 [ 511.580982][ T5858] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 511.762455][ T5858] usb 8-1: Using ep0 maxpacket: 8 [ 511.766354][ T5858] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 511.779218][ T5858] usb 8-1: config 179 has no interface number 0 [ 511.785687][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 511.788926][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 511.795943][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 511.800503][ T5858] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 511.805327][ T5858] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 511.811124][ T5858] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 511.815474][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.824210][T11979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 511.837331][T11982] netlink: 58 bytes leftover after parsing attributes in process `syz.1.1256'. [ 511.858136][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'. [ 512.566604][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 512.566609][ T1480] usb 8-1: USB disconnect, device number 23 [ 512.571697][ C3] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 512.600627][ T5858] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 512.750480][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 512.753913][ T5858] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.763456][ T5858] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.784733][ T5858] usb 6-1: config 0 interface 0 has no altsetting 0 [ 512.794947][ T5858] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 512.808636][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.822974][ T5858] usb 6-1: config 0 descriptor?? [ 513.232572][ T5858] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 513.237880][ T5858] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 513.240187][ T5858] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 513.242813][ T5858] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 513.245256][ T5858] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 513.247819][ T5858] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 513.496646][ T1480] usb 6-1: USB disconnect, device number 25 [ 513.767967][T12009] trusted_key: syz.3.1264 sent an empty control message without MSG_MORE. [ 514.421105][ T50] usb 38-1: device descriptor read/8, error -110 [ 514.464069][T12012] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1265'. [ 514.479541][T12012] gretap0: entered promiscuous mode [ 514.631537][T12014] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1265'. [ 514.792081][T12014] 0ªî{X¹¦: renamed from gretap0 [ 514.798672][T12014] 0ªî{X¹¦: left promiscuous mode [ 514.802468][T12014] 0ªî{X¹¦: entered allmulticast mode [ 514.807232][T12014] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 514.834692][ T50] usb usb38-port1: attempt power cycle [ 514.995480][T12020] binder: 12019:12020 ioctl c00c6211 0 returned -14 [ 515.160494][ T5098] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 515.310485][ T5098] usb 8-1: Using ep0 maxpacket: 8 [ 515.314775][ T5098] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 515.317682][ T5098] usb 8-1: config 179 has no interface number 0 [ 515.320023][ T5098] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 515.323827][ T5098] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 515.327521][ T5098] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 515.331988][ T5098] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 515.336564][ T5098] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 515.342934][ T5098] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 515.345940][ T5098] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.360507][T12018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 515.392771][ T50] usb usb38-port1: unable to enumerate USB device [ 516.149926][ T5858] usb 8-1: USB disconnect, device number 24 [ 516.150057][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 516.155086][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 516.379294][T12044] tipc: Cannot configure node identity twice [ 516.385966][T12044] Invalid ELF header magic: != ELF [ 516.392792][T12044] overlayfs: overlapping lowerdir path [ 516.630564][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1272'. [ 517.139852][T12048] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.301676][T12048] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.389265][T12048] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.400589][ T1480] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 517.593705][ T1480] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 517.597260][ T1480] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.600112][ T1480] usb 8-1: Product: syz [ 517.601830][ T1480] usb 8-1: Manufacturer: syz [ 517.604534][ T1480] usb 8-1: SerialNumber: syz [ 517.609655][ T1480] usb 8-1: config 0 descriptor?? [ 517.655514][T12048] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.768744][T12054] misc userio: The device must be registered before sending interrupts [ 517.827977][ T1480] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 517.860659][ T5595] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.863381][ T5595] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.866261][ T5595] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.869226][ T5595] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.160533][ T1480] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 518.169869][ T1480] usb 8-1: USB disconnect, device number 25 [ 519.140663][ T1480] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 519.310595][ T1480] usb 7-1: Using ep0 maxpacket: 8 [ 519.319195][ T1480] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 519.325289][ T1480] usb 7-1: config 179 has no interface number 0 [ 519.328648][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 519.335833][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 519.339841][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 519.344551][ T1480] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 519.348904][ T1480] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 519.354580][ T1480] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 519.358078][ T1480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.370983][T12074] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 519.475302][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 519.949366][ T5758] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 520.122939][ T1480] usb 7-1: USB disconnect, device number 15 [ 520.122996][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 520.129926][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 521.020563][ T5098] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 521.250701][ T5098] usb 6-1: Using ep0 maxpacket: 8 [ 521.256372][ T5098] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 521.260544][ T5098] usb 6-1: config 179 has no interface number 0 [ 521.263384][ T5098] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 521.273111][ T5098] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 521.280068][ T5098] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 521.287178][ T5098] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 521.293890][ T5098] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 521.299537][ T5098] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 521.304389][ T5098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.314331][T12094] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 521.400577][ T56] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 521.560478][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 521.563654][ T56] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.567322][ T56] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.570556][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 521.572700][ T56] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 521.575515][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.581365][ T56] usb 7-1: config 0 descriptor?? [ 521.993940][ T56] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 521.999126][ T56] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 522.001763][ T56] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 522.004097][ T56] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 522.006447][ T56] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 522.009258][ T56] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 522.199825][ T56] usb 7-1: USB disconnect, device number 16 [ 522.821961][ T56] usb 6-1: USB disconnect, device number 26 [ 522.822022][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 522.826590][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 522.990522][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 523.140536][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 523.143790][ T34] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 523.146833][ T34] usb 7-1: config 179 has no interface number 0 [ 523.148812][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 523.152797][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 523.156702][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.160480][ T34] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 523.164244][ T34] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.168504][ T34] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.170532][ T56] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 523.171657][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.179197][T12115] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 523.320572][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 523.324422][ T56] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 523.328008][ T56] usb 6-1: config 179 has no interface number 0 [ 523.330772][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 523.335174][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 523.339493][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.343999][ T56] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 523.348517][ T56] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.353882][ T56] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.357454][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.365831][T12117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.647356][ T5098] usb 7-1: USB disconnect, device number 17 [ 523.647459][ C3] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 523.652835][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 523.701849][T12119] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 523.750636][T12119] md: array md0 already has disks! [ 523.801287][T12119] md: could not open device unknown-block(7,0). [ 523.803312][T12119] md: error, md_import_device() returned -16 [ 523.860684][T12120] md: could not open device unknown-block(7,1). [ 523.866409][T12120] md: error, md_import_device() returned -16 [ 523.869334][T12119] md: could not open device unknown-block(7,2). [ 523.872416][T12119] md: error, md_import_device() returned -16 [ 523.967282][T12119] md/raid:md0: not clean -- starting background reconstruction [ 523.976452][T12119] md/raid:md0: device loop1 operational as raid disk 1 [ 523.978679][T12119] md/raid:md0: device loop2 operational as raid disk 2 [ 523.981021][T12119] md/raid:md0: device loop0 operational as raid disk 0 [ 524.113521][T12119] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 524.119309][T12119] md0: detected capacity change from 0 to 4096 [ 524.177276][ T34] usb 6-1: USB disconnect, device number 27 [ 524.178333][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 524.182486][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 524.249372][T12120] block device autoloading is deprecated and will be removed. [ 524.252986][T12120] md: loop3 has zero or unknown size, marking faulty! [ 524.256031][T12120] md: md_import_device returned -22 [ 524.261725][ T5858] [ 524.262766][ T5858] ====================================================== [ 524.265673][ T5858] WARNING: possible circular locking dependency detected [ 524.268571][ T5858] syzkaller #0 Tainted: G L [ 524.271462][ T5858] ------------------------------------------------------ [ 524.274363][ T5858] kworker/3:3/5858 is trying to acquire lock: [ 524.276931][ T5858] ffff88804b30e358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 524.280746][ T5858] [ 524.280746][ T5858] but task is already holding lock: [ 524.283088][ T5858] ffffc900068e7d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 524.286966][ T5858] [ 524.286966][ T5858] which lock already depends on the new lock. [ 524.286966][ T5858] [ 524.290619][ T5858] [ 524.290619][ T5858] the existing dependency chain (in reverse order) is: [ 524.293912][ T5858] [ 524.293912][ T5858] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 524.297314][ T5858] lock_acquire+0x1b9/0x370 [ 524.299091][ T5858] process_one_work+0x98e/0x1940 [ 524.301387][ T5858] worker_thread+0x5ef/0xe50 [ 524.303565][ T5858] kthread+0x370/0x450 [ 524.305533][ T5858] ret_from_fork+0x72b/0xd50 [ 524.307706][ T5858] ret_from_fork_asm+0x1a/0x30 [ 524.309936][ T5858] [ 524.309936][ T5858] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 524.312639][ T5858] lock_acquire+0x1b9/0x370 [ 524.314796][ T5858] touch_wq_lockdep_map+0xad/0x1c0 [ 524.316859][ T5858] __flush_workqueue+0x131/0x1200 [ 524.319074][ T5858] md_alloc+0x30/0x10a0 [ 524.320802][ T5858] md_probe+0x73/0xf0 [ 524.322426][ T5858] blk_probe_dev+0x149/0x1e0 [ 524.324403][ T5858] blk_request_module+0x16/0xc0 [ 524.326608][ T5858] blkdev_get_no_open+0x9b/0xf0 [ 524.328863][ T5858] blkdev_open+0x141/0x4f0 [ 524.330840][ T5858] do_dentry_open+0x6ab/0x14d0 [ 524.333018][ T5858] vfs_open+0x82/0x3f0 [ 524.334909][ T5858] path_openat+0x2873/0x4280 [ 524.336584][ T5858] do_file_open+0x20e/0x430 [ 524.338668][ T5858] do_sys_openat2+0x10f/0x1e0 [ 524.340932][ T5858] __ia32_compat_sys_openat+0x12d/0x210 [ 524.343506][ T5858] __do_fast_syscall_32+0xe7/0x970 [ 524.345787][ T5858] do_fast_syscall_32+0x32/0x70 [ 524.348033][ T5858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.350915][ T5858] [ 524.350915][ T5858] -> #1 (major_names_lock){+.+.}-{4:4}: [ 524.353705][ T5858] lock_acquire+0x1b9/0x370 [ 524.355248][ T5858] __mutex_lock+0x1a4/0x1bd0 [ 524.356943][ T5858] blk_probe_dev+0x28/0x1e0 [ 524.358896][ T5858] blk_request_module+0x16/0xc0 [ 524.360938][ T5858] blkdev_get_no_open+0x9b/0xf0 [ 524.363000][ T5858] bdev_file_open_by_dev+0x70/0x210 [ 524.365422][ T5858] md_import_device+0x120/0x360 [ 524.367696][ T5858] md_add_new_disk+0x4b6/0x1820 [ 524.369984][ T5858] md_ioctl+0x2b28/0x36b0 [ 524.372053][ T5858] compat_blkdev_ioctl+0x682/0x7b0 [ 524.374398][ T5858] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 524.376949][ T5858] __do_fast_syscall_32+0xe7/0x970 [ 524.379261][ T5858] do_fast_syscall_32+0x32/0x70 [ 524.381419][ T5858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 524.384225][ T5858] [ 524.384225][ T5858] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 524.387460][ T5858] check_prev_add+0xeb/0xe60 [ 524.389593][ T5858] __lock_acquire+0x136c/0x1a40 [ 524.391858][ T5858] lock_acquire+0x1b9/0x370 [ 524.394007][ T5858] __mutex_lock+0x1a4/0x1bd0 [ 524.396161][ T5858] md_start_sync+0x79/0xbe0 [ 524.398287][ T5858] process_one_work+0xa23/0x1940 [ 524.400567][ T5858] worker_thread+0x5ef/0xe50 [ 524.402768][ T5858] kthread+0x370/0x450 [ 524.404746][ T5858] ret_from_fork+0x72b/0xd50 [ 524.406903][ T5858] ret_from_fork_asm+0x1a/0x30 [ 524.409143][ T5858] [ 524.409143][ T5858] other info that might help us debug this: [ 524.409143][ T5858] [ 524.413348][ T5858] Chain exists of: [ 524.413348][ T5858] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 524.413348][ T5858] [ 524.419939][ T5858] Possible unsafe locking scenario: [ 524.419939][ T5858] [ 524.423032][ T5858] CPU0 CPU1 [ 524.425287][ T5858] ---- ---- [ 524.427532][ T5858] lock((work_completion)(&mddev->sync_work)); [ 524.430167][ T5858] lock((wq_completion)md_misc); [ 524.433356][ T5858] lock((work_completion)(&mddev->sync_work)); [ 524.437020][ T5858] lock(&mddev->reconfig_mutex); [ 524.439134][ T5858] [ 524.439134][ T5858] *** DEADLOCK *** [ 524.439134][ T5858] [ 524.442508][ T5858] 2 locks held by kworker/3:3/5858: [ 524.444690][ T5858] #0: ffff8880214b0d40 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 524.449051][ T5858] #1: ffffc900068e7d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 524.453849][ T5858] [ 524.453849][ T5858] stack backtrace: [ 524.456250][ T5858] CPU: 3 UID: 0 PID: 5858 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.456277][ T5858] Tainted: [L]=SOFTLOCKUP [ 524.456283][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 524.456296][ T5858] Workqueue: md_misc md_start_sync [ 524.456326][ T5858] Call Trace: [ 524.456333][ T5858] [ 524.456339][ T5858] dump_stack_lvl+0x100/0x190 [ 524.456360][ T5858] print_circular_bug.cold+0x178/0x1c7 [ 524.456390][ T5858] check_noncircular+0x146/0x160 [ 524.456415][ T5858] ? lock_release+0x24d/0x310 [ 524.456444][ T5858] check_prev_add+0xeb/0xe60 [ 524.456469][ T5858] __lock_acquire+0x136c/0x1a40 [ 524.456499][ T5858] lock_acquire+0x1b9/0x370 [ 524.456525][ T5858] ? md_start_sync+0x79/0xbe0 [ 524.456550][ T5858] ? __pfx___might_resched+0x10/0x10 [ 524.456595][ T5858] __mutex_lock+0x1a4/0x1bd0 [ 524.456617][ T5858] ? md_start_sync+0x79/0xbe0 [ 524.456641][ T5858] ? md_start_sync+0x79/0xbe0 [ 524.456669][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 524.456694][ T5858] ? check_prev_add+0x354/0xe60 [ 524.456720][ T5858] ? __pfx___mutex_lock+0x10/0x10 [ 524.456740][ T5858] ? lockdep_unlock+0x5a/0xc0 [ 524.456764][ T5858] ? md_spares_need_change+0x1dc/0x320 [ 524.456788][ T5858] ? md_start_sync+0x79/0xbe0 [ 524.456812][ T5858] md_start_sync+0x79/0xbe0 [ 524.456837][ T5858] process_one_work+0xa23/0x1940 [ 524.456867][ T5858] ? __pfx_process_one_work+0x10/0x10 [ 524.456894][ T5858] ? __pfx_md_start_sync+0x10/0x10 [ 524.456920][ T5858] worker_thread+0x5ef/0xe50 [ 524.456948][ T5858] ? kthread+0x13a/0x450 [ 524.456970][ T5858] ? __pfx_worker_thread+0x10/0x10 [ 524.456992][ T5858] kthread+0x370/0x450 [ 524.457014][ T5858] ? __pfx_kthread+0x10/0x10 [ 524.457036][ T5858] ret_from_fork+0x72b/0xd50 [ 524.457059][ T5858] ? __pfx_ret_from_fork+0x10/0x10 [ 524.457079][ T5858] ? __switch_to+0x800/0x10f0 [ 524.457114][ T5858] ? __pfx_kthread+0x10/0x10 [ 524.457136][ T5858] ret_from_fork_asm+0x1a/0x30 [ 524.457165][ T5858] [ 524.541410][T12131] md: resync of RAID array md0 [ 524.584720][T12131] md: md0: resync done. [ 524.670547][T12134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 524.672698][T12134] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 524.675731][T12134] vhci_hcd vhci_hcd.0: Device attached [ 524.787747][T12134] geneve2: entered allmulticast mode [ 524.970627][ T5098] usb 40-1: SetAddress Request (34) to port 0 [ 524.972810][ T5098] usb 40-1: new SuperSpeed USB device number 34 using vhci_hcd [ 525.131736][T12135] vhci_hcd: connection reset by peer [ 525.133885][ T5595] vhci_hcd vhci_hcd.1: stop threads [ 525.138293][ T5595] vhci_hcd vhci_hcd.1: release socket [ 525.142931][ T5595] vhci_hcd vhci_hcd.1: disconnect device [ 530.020789][ T5098] usb 40-1: device descriptor read/8, error -110 [ 530.411084][ T5098] usb usb40-port1: attempt power cycle [ 530.971395][ T5098] usb usb40-port1: unable to enumerate USB device