last executing test programs: 11.604062662s ago: executing program 2 (id=5577): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0xf, 0x20203243, 0x3, [0x2], [0x80ffff, 0x0, 0x2, 0xfffffffe], [0x0, 0x0, 0x0, 0x3], [0xfff]}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020}, 0x2020) 7.657512591s ago: executing program 3 (id=5600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000f0000711016f3e5af00000080000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 7.62963831s ago: executing program 2 (id=5602): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008890) listen(0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd", 0x2f2}], 0x2}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)=0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.959892337s ago: executing program 3 (id=5604): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(0xffffffffffffffff) 5.778174801s ago: executing program 3 (id=5607): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r4}, 0x38) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r6, 0xb1d, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) 5.589656166s ago: executing program 4 (id=5609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {0x0}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) 5.364469469s ago: executing program 4 (id=5610): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200), 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000380)=[0x0], &(0x7f0000000040)}) 4.528230125s ago: executing program 0 (id=5611): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) 4.443474688s ago: executing program 4 (id=5612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 4.414733758s ago: executing program 0 (id=5613): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) timer_create(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 4.178779946s ago: executing program 1 (id=5614): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000f0000711016f3e5af00000080000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 4.082926946s ago: executing program 1 (id=5615): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.833623017s ago: executing program 0 (id=5616): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40020) tee(0xffffffffffffffff, r5, 0x8, 0xe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 3.782239932s ago: executing program 1 (id=5617): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc8a43, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000980), 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.768182678s ago: executing program 4 (id=5618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0xa, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xf, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x8, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.626273366s ago: executing program 2 (id=5619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 2.57262399s ago: executing program 4 (id=5620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {0x0}, {&(0x7f0000000740)="6d4fcb9f", 0x4}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ac", 0x2}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y@', 0x2}, {&(0x7f0000000100)="f0099820", 0x4}], 0x7}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121", 0x2}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) 2.549409241s ago: executing program 0 (id=5621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x2, 0xa}, {0x6, 0x101, 0x0, 0x200, 0x8465}}}}, 0x17) close(r3) 2.472146658s ago: executing program 2 (id=5622): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, &(0x7f0000000200), 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000380)=[0x0], &(0x7f0000000040)}) 2.405218087s ago: executing program 3 (id=5623): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) 2.26364696s ago: executing program 4 (id=5624): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pread64(r4, &(0x7f00000003c0)=""/128, 0x80, 0x9) 2.260761703s ago: executing program 1 (id=5625): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000804, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r8}, 0x18) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) 1.690381284s ago: executing program 3 (id=5626): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) 1.688436799s ago: executing program 2 (id=5627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[], 0x24}}, 0x2000c004) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="b3ed03ec7bfba0191cab0788d097eed56afbe923db69efb04418197881157132704176ba3159e322e84a095cb74973f302044a6b56c266c4aae38407da29ef1ce87c4e28fb47751c89858aeb2222be83943199834e594a01e31daf5c242b6108f1d20b36a9cc82823c2781184bfbd7dd93bc7a06b9a0aee848e821efdc2e103903cf0bbf13a93c8f16e9c2", 0x8b}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x7f}}], 0x18}, 0x800) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) add_key(&(0x7f00000009c0)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000580)="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", 0x437, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_enter(0xffffffffffffffff, 0x2464, 0x6c1a, 0x0, &(0x7f0000000540)={[0x7fff]}, 0x8) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 533.70697ms ago: executing program 1 (id=5628): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r7, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 261.93149ms ago: executing program 0 (id=5629): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 259.589206ms ago: executing program 3 (id=5630): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = creat(0x0, 0x6a) r6 = fanotify_init(0x20, 0x800) fanotify_mark(r6, 0x641, 0x1020, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000c00)={0x8, 0x0, [{0x1000, 0x65, &(0x7f0000000600)=""/101}, {0x8080000, 0x0, 0x0}, {0x6000, 0xb0, &(0x7f0000000740)=""/176}, {0x5000, 0x72, &(0x7f0000000800)=""/114}, {0x4, 0x31, &(0x7f0000000880)=""/49}, {0xdddd1000, 0x0, 0x0}, {0x4, 0x5f, &(0x7f0000000940)=""/95}, {0xeeee8000, 0xd, &(0x7f0000000bc0)=""/13}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x40880) 214.892144ms ago: executing program 2 (id=5631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r1, &(0x7f0000000340)="2014b9c7c7b08c119a6d08a77e24bab4e5514ef28590e9e5a0f7612a96fbd889a3c9f69dd838227538f49d93fa14e7b4677f7ac7e01c482b6cd19fb12fae3a17316fa1dc85", 0x45) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x80000001, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x2, 0x0, 0x63) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) close(r5) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffffff000000000000000007000000040000000700000000000000080000001000000002000000000000000e00000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000400000000000000d8060000000000000000000000000000000000000000000001020000000000000000000000000000040000000000000000000000000000000800000000000000000000000000000000000000000000000e320000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000008400000000000000000000000000000007000000000008000600000000000000ff7f0000000000000000000000000000000000000000000080240000000000000000000000000000010000000000000006000000000000000300000000000000000000000000000000000000000000008a000000000000000000000000000000ffffffffffffff7f0000000000000000070000000000000000000000000000000000000000000000892400"/424]) 168.347378ms ago: executing program 1 (id=5632): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=5633): ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @mcast2, 0x0, 0x8007, 0x100, 0x5}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setns(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c00000400c2800c0001800600060084", @ANYBLOB="9b6d5b1c3f9acfe130898ce7bb01ad28e2772d590dd9"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x402) r4 = socket(0x11, 0xa, 0x0) getsockname$packet(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): sadm_r:sysadm_t pid=23539 comm="syz.0.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f435cf8f749 code=0x7ffc0000 [ 1879.653010][T23560] tipc: Resetting bearer [ 1879.693585][T23560] tipc: Disabling bearer [ 1880.054947][T23587] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1880.246932][T18435] tipc: Node number set to 1444064675 [ 1880.337582][T23594] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 1881.070839][T23594] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1881.091816][T23594] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1881.653534][T23607] macvlan2: entered promiscuous mode [ 1881.675642][T23607] macvlan2: entered allmulticast mode [ 1881.700261][T23607] bond1: entered promiscuous mode [ 1881.740306][T23607] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1881.824003][T23607] bond1: left promiscuous mode [ 1881.841511][T23617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4321'. [ 1882.201796][T23614] vxcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 1884.021348][T18808] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1884.542958][T18808] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1884.638100][T18808] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1884.655521][T18808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.680272][T18808] usb 2-1: Product: syz [ 1884.697929][T18808] usb 2-1: Manufacturer: syz [ 1884.705679][T18808] usb 2-1: SerialNumber: syz [ 1884.793900][T18808] usb 2-1: config 0 descriptor?? [ 1885.298553][T23644] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4330'. [ 1886.031892][T23650] syzkaller0: entered promiscuous mode [ 1886.078853][T23650] syzkaller0: entered allmulticast mode [ 1886.277276][T14929] usb 2-1: USB disconnect, device number 126 [ 1887.003264][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1887.003284][ T30] audit: type=1400 audit(1767626800.352:2245): avc: denied { write } for pid=23658 comm="syz.1.4337" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1887.207660][T23659] Process accounting resumed [ 1887.746962][T23669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1888.430457][T23679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1888.440750][T18808] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1888.684778][T18808] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1888.694744][T18808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.703145][T18808] usb 4-1: Product: syz [ 1888.707391][T18808] usb 4-1: Manufacturer: syz [ 1889.160547][T18808] usb 4-1: SerialNumber: syz [ 1889.177292][T18808] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1889.276309][ T30] audit: type=1400 audit(1767626802.622:2246): avc: denied { firmware_load } for pid=18936 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1889.309216][T18936] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1889.907285][T14929] usb 4-1: USB disconnect, device number 86 [ 1890.411633][T18936] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1890.457956][T18936] ath9k_htc: Failed to initialize the device [ 1890.502256][T14929] usb 4-1: ath9k_htc: USB layer deinitialized [ 1890.721480][T18435] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1890.792085][T23702] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4344'. [ 1890.842963][T18808] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1890.893126][T23704] syzkaller0: entered promiscuous mode [ 1890.898651][T23704] syzkaller0: entered allmulticast mode [ 1890.900495][T18435] usb 3-1: Using ep0 maxpacket: 32 [ 1890.924029][T18435] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1890.984090][T18435] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1891.001242][T18808] usb 2-1: Using ep0 maxpacket: 32 [ 1891.020835][T18808] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1891.031576][T18808] usb 2-1: config 0 has no interface number 0 [ 1891.100302][T18808] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1891.100317][T18435] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1891.208635][T18808] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1891.219975][T18808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.243946][T18808] usb 2-1: Product: syz [ 1891.248226][T18808] usb 2-1: Manufacturer: syz [ 1891.282583][T18808] usb 2-1: SerialNumber: syz [ 1891.379379][T18808] usb 2-1: config 0 descriptor?? [ 1891.434258][T18808] smsc75xx v1.0.0 [ 1891.441333][T18808] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1891.455502][T18435] usb 3-1: Product: syz [ 1891.461956][T18808] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1891.496112][T18435] usb 3-1: Manufacturer: syz [ 1891.500781][T18435] usb 3-1: SerialNumber: syz [ 1891.535369][T18435] usb 3-1: config 0 descriptor?? [ 1891.582240][T23696] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1891.603947][T18435] hub 3-1:0.0: bad descriptor, ignoring hub [ 1891.621214][T18435] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1891.788710][T23714] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4352'. [ 1893.458145][T18808] usb 3-1: USB disconnect, device number 119 [ 1893.576480][T18808] usb 2-1: USB disconnect, device number 127 [ 1894.684755][T23734] netlink: 'syz.0.4358': attribute type 6 has an invalid length. [ 1895.181705][T23749] gfs2: not a GFS2 filesystem [ 1895.190997][T18808] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1895.731442][T18808] usb 1-1: Using ep0 maxpacket: 32 [ 1895.738201][T18808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.754686][T18808] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1895.851433][T18808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.859451][T18808] usb 1-1: Product: syz [ 1895.871261][T18808] usb 1-1: Manufacturer: syz [ 1895.875901][T18808] usb 1-1: SerialNumber: syz [ 1895.927364][T18808] usb 1-1: config 0 descriptor?? [ 1895.967858][T18808] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1896.445551][T23756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4362'. [ 1897.344618][T18808] usb 1-1: USB disconnect, device number 90 [ 1897.534233][T23760] Process accounting resumed [ 1897.986088][T23768] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1898.962479][T23772] netlink: 'syz.0.4369': attribute type 1 has an invalid length. [ 1899.110991][T23778] bond2: (slave bridge1): making interface the new active one [ 1899.434502][T23778] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1899.605597][T23772] macvlan2: entered promiscuous mode [ 1899.649649][T23772] macvlan2: entered allmulticast mode [ 1899.672235][T23772] bond2: entered promiscuous mode [ 1899.687778][T23772] bridge1: entered promiscuous mode [ 1899.731920][T23772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1900.004440][T23772] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1900.081597][T18808] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1900.086176][T23772] bond2: left promiscuous mode [ 1900.141720][T23772] bridge1: left promiscuous mode [ 1900.269386][T18808] usb 4-1: Using ep0 maxpacket: 32 [ 1900.346308][T18808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.373353][T18808] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1900.401146][T18808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.421115][T18808] usb 4-1: Product: syz [ 1900.428513][T18808] usb 4-1: Manufacturer: syz [ 1900.587068][T18808] usb 4-1: SerialNumber: syz [ 1900.620987][T18808] usb 4-1: config 0 descriptor?? [ 1901.066057][T18808] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1901.483635][T18435] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1901.576865][T18808] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1901.761141][T18435] usb 1-1: Using ep0 maxpacket: 32 [ 1902.105459][T18435] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.201465][T18808] usb 5-1: Using ep0 maxpacket: 32 [ 1902.220191][T18808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.313317][T23805] Process accounting resumed [ 1902.628456][T18435] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1902.642809][T18808] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1902.643722][T23806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1902.853190][T23806] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1902.911198][T18435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.932185][T18808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.940230][T18808] usb 5-1: Product: syz [ 1902.950591][T18435] usb 1-1: Product: syz [ 1902.961374][T18435] usb 1-1: Manufacturer: syz [ 1902.971335][T18435] usb 1-1: SerialNumber: syz [ 1903.032719][T18435] usb 1-1: config 0 descriptor?? [ 1903.047186][T18435] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1903.118370][T18808] usb 5-1: Manufacturer: syz [ 1903.515229][T18435] usb 4-1: USB disconnect, device number 87 [ 1903.524575][T23799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4377'. [ 1903.537671][T23799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1903.550033][T18808] usb 5-1: SerialNumber: syz [ 1903.550230][T14929] usb 1-1: USB disconnect, device number 91 [ 1903.651976][T18808] usb 5-1: config 0 descriptor?? [ 1903.733841][T18808] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1904.841842][T23822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4354'. [ 1905.151471][T23645] Bluetooth: hci0: Malformed Event: 0x02 [ 1905.346965][T18808] usb 5-1: USB disconnect, device number 117 [ 1905.639669][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4384'. [ 1906.809920][T23834] gfs2: not a GFS2 filesystem [ 1908.538519][T23850] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1908.579713][T23850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1909.191398][T23853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1909.850311][T23645] Bluetooth: hci4: Malformed Event: 0x02 [ 1910.071171][T14929] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1910.249362][T18808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1910.552452][T18808] usb 2-1: Using ep0 maxpacket: 32 [ 1910.781735][T18808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.789060][T14929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1910.890845][T14929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1910.913737][T14929] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1910.951451][T18808] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1910.963524][T18808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.971868][T18808] usb 2-1: Product: syz [ 1910.976024][T18808] usb 2-1: Manufacturer: syz [ 1910.980606][T18808] usb 2-1: SerialNumber: syz [ 1910.987231][T18808] usb 2-1: config 0 descriptor?? [ 1910.996647][T18808] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1911.075907][T14929] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1911.143016][T14929] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1911.188156][T14929] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1911.214912][T14929] usb 3-1: Manufacturer: syz [ 1911.253726][T14929] usb 3-1: config 0 descriptor?? [ 1911.614770][T23863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1911.634944][T23863] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1911.661443][T18435] usb 2-1: USB disconnect, device number 2 [ 1912.069790][T23894] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1913.093073][T18936] usb 3-1: USB disconnect, device number 120 [ 1913.349084][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'. [ 1914.731630][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.170472][T18435] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1915.183008][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.335967][T23945] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4408'. [ 1915.441445][T18435] usb 2-1: Using ep0 maxpacket: 32 [ 1915.448155][T18435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.462635][T18435] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1915.471931][T18435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.483741][T18435] usb 2-1: Product: syz [ 1915.488041][T18435] usb 2-1: Manufacturer: syz [ 1915.494475][T18435] usb 2-1: SerialNumber: syz [ 1915.930772][T18435] usb 2-1: config 0 descriptor?? [ 1915.955681][T18435] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1916.113815][T23949] Process accounting resumed [ 1916.281484][T18936] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1916.322038][T23959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4405'. [ 1916.694133][T23960] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1916.865035][T23959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1917.243102][T23645] Bluetooth: hci1: Malformed Event: 0x02 [ 1917.278377][T18435] usb 2-1: USB disconnect, device number 3 [ 1917.370075][T18936] usb 1-1: Using ep0 maxpacket: 32 [ 1917.409681][T18936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.466416][T18936] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1917.519585][T18936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.577772][T18936] usb 1-1: Product: syz [ 1917.623824][T18936] usb 1-1: Manufacturer: syz [ 1917.677072][T18936] usb 1-1: SerialNumber: syz [ 1917.766807][T18936] usb 1-1: config 0 descriptor?? [ 1917.880349][T18936] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1918.229280][T23951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'. [ 1918.243977][T23951] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1918.260895][T18808] usb 1-1: USB disconnect, device number 92 [ 1920.276178][T24002] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1920.864926][T24007] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1921.580233][T24025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1921.591620][T18435] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1921.821844][T18435] usb 1-1: Using ep0 maxpacket: 32 [ 1922.358794][T24034] Process accounting resumed [ 1922.562527][T18435] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.666530][T18435] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1922.680503][T18435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.701429][T18435] usb 1-1: Product: syz [ 1922.705687][T18435] usb 1-1: Manufacturer: syz [ 1922.717068][T18435] usb 1-1: SerialNumber: syz [ 1922.732559][T18435] usb 1-1: config 0 descriptor?? [ 1922.750061][T18435] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 1922.930444][T24047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1923.011432][T24047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1923.155157][T24016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1923.174586][T24016] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1923.188408][T18435] usb 1-1: USB disconnect, device number 93 [ 1924.838557][T24068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4438'. [ 1925.512448][T24077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1928.703497][T24112] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4451'. [ 1930.582222][ T30] audit: type=1400 audit(1767627611.935:2247): avc: denied { accept } for pid=24118 comm="syz.3.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1930.872906][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4453'. [ 1931.539787][ T30] audit: type=1400 audit(1767627612.215:2248): avc: denied { ioctl } for pid=24118 comm="syz.3.4453" path="socket:[106252]" dev="sockfs" ino=106252 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1931.545434][T18435] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1931.692460][T18435] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1931.754320][T24126] fido_id[24126]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1932.018490][T23645] Bluetooth: hci4: Malformed Event: 0x02 [ 1933.455301][T23645] Bluetooth: hci4: Malformed Event: 0x02 [ 1933.600156][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1935.644782][T24173] netlink: 'syz.2.4461': attribute type 10 has an invalid length. [ 1935.661602][T24173] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1936.414871][T24185] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1937.133153][T24191] netlink: 'syz.2.4466': attribute type 10 has an invalid length. [ 1937.141972][T24191] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1938.910606][T24202] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1940.169381][T24214] gfs2: not a GFS2 filesystem [ 1941.821814][T18936] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1941.950760][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4477'. [ 1941.981163][T18936] usb 4-1: Using ep0 maxpacket: 32 [ 1942.021461][T18936] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1942.032710][T18936] usb 4-1: config 0 has no interface number 0 [ 1942.040082][T18936] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1942.051486][T18936] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1942.063852][T18936] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1942.075401][T18936] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1942.091179][T18936] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1942.103085][T18936] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1942.113630][T18936] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1942.128536][T18936] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1942.140398][T18936] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1942.151827][T18936] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1942.177233][T18936] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1942.192188][T18936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.224199][T18936] usb 4-1: Product: syz [ 1942.952992][T18936] usb 4-1: Manufacturer: syz [ 1942.957758][T18936] usb 4-1: SerialNumber: syz [ 1942.965440][T18936] usb 4-1: config 0 descriptor?? [ 1942.971631][T24230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1942.979881][T24230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1942.998792][T18936] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1943.007673][T18936] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1943.182985][T18936] scsi host1: microtekX6 [ 1943.274419][T24257] fuse: Bad value for 'user_id' [ 1943.279294][T24257] fuse: Bad value for 'user_id' [ 1943.417212][T24261] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1944.781497][T18347] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1944.933813][T18347] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1944.942643][T18347] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1944.964839][T18347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1944.991879][T18347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1945.013049][T18347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1945.028627][T18347] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1945.056983][T18347] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1945.179059][T18347] usb 5-1: Product: syz [ 1945.189228][T18347] usb 5-1: Manufacturer: syz [ 1946.385293][T18347] cdc_wdm 5-1:1.0: skipping garbage [ 1946.391279][T18347] cdc_wdm 5-1:1.0: skipping garbage [ 1946.398664][T18347] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1946.405493][T18347] cdc_wdm 5-1:1.0: Unknown control protocol [ 1946.541824][T18347] usb 4-1: USB disconnect, device number 88 [ 1947.705662][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1947.712290][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1947.718995][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1947.725592][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1947.731981][T18936] usb 5-1: USB disconnect, device number 118 [ 1947.738413][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1947.738441][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1947.738460][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1947.866538][T24296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1948.040275][T24296] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1948.221266][T24301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1948.301533][T24301] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1952.523012][T24340] netlink: 'syz.3.4500': attribute type 10 has an invalid length. [ 1952.544111][T24340] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1952.922770][T24339] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1952.931252][T24344] gfs2: not a GFS2 filesystem [ 1953.010128][T24343] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1953.454688][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1954.651402][T23645] Bluetooth: hci4: Malformed Event: 0x02 [ 1955.793669][T24374] gfs2: not a GFS2 filesystem [ 1956.570920][ T30] audit: type=1400 audit(1767628405.451:2249): avc: denied { listen } for pid=24375 comm="syz.4.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1956.659395][T24385] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1956.777426][T24389] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4515'. [ 1956.891518][T18347] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 1957.718330][T24394] netlink: 'syz.1.4517': attribute type 1 has an invalid length. [ 1957.793117][T18347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1957.864492][T18347] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1957.901336][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4516'. [ 1957.961064][T18347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.067001][T18347] usb 4-1: config 0 descriptor?? [ 1958.090227][T24394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1958.121737][T24386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1959.143278][T18347] elan 0003:04F3:0755.0026: item fetching failed at offset 3/5 [ 1959.222487][T18347] elan 0003:04F3:0755.0026: Hid Parse failed [ 1959.273003][T18347] elan 0003:04F3:0755.0026: probe with driver elan failed with error -22 [ 1960.157578][T18936] usb 4-1: USB disconnect, device number 89 [ 1961.817899][T14929] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1962.342604][T14929] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1962.352206][T14929] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1962.365805][T14929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1962.387383][T14929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1962.417037][T14929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1962.446303][T14929] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1962.462718][T14929] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1962.480234][T14929] usb 5-1: Product: syz [ 1962.492909][T14929] usb 5-1: Manufacturer: syz [ 1962.508445][T14929] cdc_wdm 5-1:1.0: skipping garbage [ 1962.523644][T14929] cdc_wdm 5-1:1.0: skipping garbage [ 1962.536805][T14929] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1962.551348][T14929] cdc_wdm 5-1:1.0: Unknown control protocol [ 1962.755621][T24439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4529'. [ 1963.270986][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.277652][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.284319][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.290919][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.297588][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.304162][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.310775][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.317344][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.323777][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.330339][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.336670][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.343251][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.349489][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.356049][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.363098][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.369679][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.381506][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.388106][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.394516][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1963.401083][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1963.456219][T14929] usb 5-1: USB disconnect, device number 119 [ 1963.462318][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1965.396925][T24459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4522'. [ 1965.503095][T24462] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4535'. [ 1968.282546][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4539'. [ 1971.968573][T24492] Device name cannot be null; rc = [-22] [ 1972.530228][T24503] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4547'. [ 1972.813120][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4549'. [ 1975.336832][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4554'. [ 1975.526471][T23645] Bluetooth: hci5: Malformed Event: 0x02 [ 1975.551066][T23645] Bluetooth: hci4: Malformed Event: 0x02 [ 1976.196627][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.528143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.046981][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1983.451404][T23645] Bluetooth: hci4: Malformed Event: 0x02 [ 1983.676923][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1986.883838][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1987.321493][T18936] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1987.643359][T18936] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1987.677096][T18936] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1987.768185][T18936] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1987.819822][T18936] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1987.893751][T18936] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1987.937581][T18936] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1987.971201][T18936] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1988.221389][T18936] usb 1-1: Product: syz [ 1988.225730][T18936] usb 1-1: Manufacturer: syz [ 1988.266390][T18936] cdc_wdm 1-1:1.0: skipping garbage [ 1988.347687][T18936] cdc_wdm 1-1:1.0: skipping garbage [ 1988.393684][T18936] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1988.436494][T18936] cdc_wdm 1-1:1.0: Unknown control protocol [ 1988.515218][T18936] usb 1-1: USB disconnect, device number 94 [ 1991.041385][T18347] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1991.203182][T18347] usb 5-1: Using ep0 maxpacket: 32 [ 1991.262927][T18347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.301099][T18347] usb 5-1: config 0 has no interfaces? [ 1991.333827][T18347] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 1991.354465][T18347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.470504][T18347] usb 5-1: Product: syz [ 1991.478135][T18347] usb 5-1: Manufacturer: syz [ 1991.491880][T18347] usb 5-1: SerialNumber: syz [ 1991.502529][T18347] usb 5-1: config 0 descriptor?? [ 1992.341131][ T30] audit: type=1400 audit(1767628953.683:2250): avc: denied { lock } for pid=24678 comm="syz.3.4586" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1992.492576][T24682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1992.538574][T24682] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1993.760591][T24692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1993.810661][T18347] usb 5-1: USB disconnect, device number 120 [ 1994.034141][T23645] Bluetooth: hci5: Malformed Event: 0x02 [ 1995.756176][T24709] netlink: 19 bytes leftover after parsing attributes in process `syz.3.4592'. [ 1995.970902][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1996.686838][T14929] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1996.882842][T14929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1996.895128][T14929] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1997.283711][T14929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.324245][T14929] usb 3-1: config 0 descriptor?? [ 1997.354072][T24720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1998.117014][T14929] elan 0003:04F3:0755.0027: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1998.421467][ T30] audit: type=1400 audit(1767628959.763:2251): avc: denied { setopt } for pid=24740 comm="syz.1.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1998.576121][T14929] usb 3-1: USB disconnect, device number 121 [ 2001.466809][ T30] audit: type=1400 audit(1767628962.803:2252): avc: denied { getopt } for pid=24773 comm="syz.4.4614" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2002.446647][T24786] gfs2: not a GFS2 filesystem [ 2003.952198][T18347] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 2003.963128][T18347] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2004.091508][T24800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4621'. [ 2005.308590][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4623'. [ 2006.458505][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4626'. [ 2006.884513][T14560] block nbd2: Receive control failed (result -110) [ 2009.181141][T14929] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2010.171146][T14929] usb 1-1: Using ep0 maxpacket: 32 [ 2010.178451][T14929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.202622][T14929] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2010.212072][T14929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.220072][T14929] usb 1-1: Product: syz [ 2010.224994][T14929] usb 1-1: Manufacturer: syz [ 2010.695277][T14929] usb 1-1: SerialNumber: syz [ 2010.731678][T14929] usb 1-1: config 0 descriptor?? [ 2010.762382][T14929] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2010.829248][T18347] usb 1-1: USB disconnect, device number 95 [ 2012.675095][T14560] Bluetooth: hci1: Malformed Event: 0x02 [ 2015.462443][T24899] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4645'. [ 2017.121995][ T5824] block nbd3: Receive control failed (result -110) [ 2017.306983][T24931] fuse: Bad value for 'rootmode' [ 2017.978482][T24947] gfs2: not a GFS2 filesystem [ 2018.201342][T14929] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2019.402749][T14929] usb 4-1: Using ep0 maxpacket: 32 [ 2019.412270][T14929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.442070][T14929] usb 4-1: config 0 has no interfaces? [ 2019.449838][T14929] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2019.470272][T24959] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4659'. [ 2019.493675][T14929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.510837][T14929] usb 4-1: Product: syz [ 2019.523499][T14929] usb 4-1: Manufacturer: syz [ 2019.528142][T14929] usb 4-1: SerialNumber: syz [ 2019.568354][T14929] usb 4-1: config 0 descriptor?? [ 2019.744861][T24962] netlink: 19 bytes leftover after parsing attributes in process `syz.0.4660'. [ 2020.754908][T24963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4646'. [ 2020.905501][T24963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2020.985895][ T30] audit: type=1400 audit(1767628982.333:2253): avc: denied { connect } for pid=24965 comm="syz.2.4661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2021.391101][T24972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4658'. [ 2021.462107][T14929] usb 4-1: USB disconnect, device number 90 [ 2022.549252][T24985] fuse: Unknown parameter 'use00000000000000000000' [ 2023.704782][T24991] syz.0.4664 (24991) used greatest stack depth: 19176 bytes left [ 2024.512660][T14929] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2024.770795][T14929] usb 4-1: Using ep0 maxpacket: 32 [ 2024.907448][T14929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.918655][T14929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2024.949007][T14929] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2024.972592][T14929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.997901][T14929] usb 4-1: Product: syz [ 2025.203145][T14929] usb 4-1: Manufacturer: syz [ 2025.215174][T14929] usb 4-1: SerialNumber: syz [ 2025.320265][T14929] usb 4-1: config 0 descriptor?? [ 2025.684951][T25013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4669'. [ 2025.844883][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 2026.300454][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4676'. [ 2027.207707][T24990] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2027.223997][T14929] usb 4-1: USB disconnect, device number 91 [ 2027.742182][T25026] fuse: Unknown parameter 'use00000000000000000000' [ 2030.842049][T25055] gfs2: not a GFS2 filesystem [ 2031.515084][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'. [ 2031.602909][T25064] fuse: Unknown parameter 'use00000000000000000000' [ 2033.701087][T14929] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2034.202096][T25100] netlink: 'syz.0.4700': attribute type 72 has an invalid length. [ 2034.242242][T14929] usb 2-1: Using ep0 maxpacket: 8 [ 2034.252532][T14929] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2034.273490][T14929] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2034.296106][T25105] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4702'. [ 2034.334380][T14929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2034.346154][T14929] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2034.359973][T14929] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2034.377576][T14929] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2034.387296][T14929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.521400][T18435] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2034.789301][T14929] usb 2-1: usb_control_msg returned -32 [ 2034.798649][T14929] usbtmc 2-1:16.0: can't read capabilities [ 2034.871775][T18435] usb 5-1: Using ep0 maxpacket: 32 [ 2034.893631][T18435] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2034.911556][T25114] No control pipe specified [ 2034.916251][T18435] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2034.956118][T18435] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2034.973308][T18435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.011954][T18435] usb 5-1: Product: syz [ 2035.026954][T18435] usb 5-1: Manufacturer: syz [ 2035.033343][T18435] usb 5-1: SerialNumber: syz [ 2035.044081][T18435] usb 5-1: config 0 descriptor?? [ 2035.449031][T25122] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 2035.479075][T18347] usb 2-1: USB disconnect, device number 4 [ 2036.056489][T25104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4701'. [ 2036.071955][T25104] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2036.084360][T18435] usb 5-1: USB disconnect, device number 121 [ 2036.716131][T25117] gfs2: not a GFS2 filesystem [ 2037.608374][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.615904][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.851126][T18435] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2038.025022][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4716'. [ 2038.641415][T18435] usb 2-1: Using ep0 maxpacket: 32 [ 2038.794264][T18435] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.863997][T18435] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2038.912668][T18435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.920758][T18435] usb 2-1: Product: syz [ 2038.961220][T18435] usb 2-1: Manufacturer: syz [ 2038.965868][T18435] usb 2-1: SerialNumber: syz [ 2038.984104][T18435] usb 2-1: config 0 descriptor?? [ 2038.999507][T18435] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2039.373313][T25168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4714'. [ 2039.466573][T25168] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2040.460233][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4725'. [ 2040.674954][T18347] usb 2-1: USB disconnect, device number 5 [ 2043.485550][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4730'. [ 2043.762295][T25204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4733'. [ 2045.047381][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4735'. [ 2047.293709][T18435] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2047.399318][T25244] gfs2: not a GFS2 filesystem [ 2047.451173][T18435] usb 4-1: Using ep0 maxpacket: 32 [ 2047.477920][T18435] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.750622][T18435] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2048.007859][T18435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.088826][T18435] usb 4-1: Product: syz [ 2048.097445][T18435] usb 4-1: Manufacturer: syz [ 2048.109488][T18435] usb 4-1: SerialNumber: syz [ 2048.133087][T18435] usb 4-1: config 0 descriptor?? [ 2048.152216][T18435] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2048.683406][T25253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4738'. [ 2048.738410][T25253] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2050.292941][T18936] usb 4-1: USB disconnect, device number 92 [ 2050.793489][T25283] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4755'. [ 2053.431157][T18936] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2053.463833][T25313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4762'. [ 2053.476422][T25313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4762'. [ 2053.704299][T18936] usb 1-1: Using ep0 maxpacket: 32 [ 2053.755885][T18936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.250670][T18936] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2054.356567][T18936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.628277][T18936] usb 1-1: Product: syz [ 2054.919978][T18936] usb 1-1: Manufacturer: syz [ 2054.936924][T18936] usb 1-1: SerialNumber: syz [ 2054.957418][T18936] usb 1-1: config 0 descriptor?? [ 2054.987615][T18936] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2055.267592][T25329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4764'. [ 2055.306223][T25329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2058.070639][T18936] usb 1-1: USB disconnect, device number 96 [ 2065.504648][T25435] gfs2: not a GFS2 filesystem [ 2069.283572][T18435] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 2069.319225][T18435] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2070.314504][T25472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4814'. [ 2070.712629][T25481] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2070.725600][T25481] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 2070.805460][T25478] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 2071.317505][T25478] macvlan2: entered promiscuous mode [ 2071.376099][T25478] macvlan2: entered allmulticast mode [ 2071.422175][T25478] bond5: entered promiscuous mode [ 2071.427468][T25478] bridge2: entered promiscuous mode [ 2071.433935][T25478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2071.766316][T25478] bond5: left promiscuous mode [ 2071.771415][T25478] bridge2: left promiscuous mode [ 2075.582607][T18936] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2075.801024][T18936] usb 4-1: Using ep0 maxpacket: 32 [ 2076.021904][T18936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.117290][T18936] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2076.141402][T18936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.332256][T18936] usb 4-1: Product: syz [ 2076.351835][T25543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4837'. [ 2076.364200][T18936] usb 4-1: Manufacturer: syz [ 2076.401095][T18936] usb 4-1: SerialNumber: syz [ 2076.534362][T18936] usb 4-1: config 0 descriptor?? [ 2076.585801][T18936] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2077.201614][T25547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4834'. [ 2077.327547][T25547] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2077.562509][T18347] usb 4-1: USB disconnect, device number 93 [ 2077.740635][T25556] tipc: Enabling of bearer rejected, failed to enable media [ 2078.281165][T25559] syzkaller0: entered promiscuous mode [ 2078.286736][T25559] syzkaller0: entered allmulticast mode [ 2080.099412][T25568] tipc: Enabling of bearer rejected, failed to enable media [ 2080.161115][T18347] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2080.173331][T25571] syzkaller0: entered promiscuous mode [ 2080.178887][T25571] syzkaller0: entered allmulticast mode [ 2080.341148][T18347] usb 4-1: Using ep0 maxpacket: 32 [ 2080.369569][T18347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.392722][T18347] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2080.415771][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.436003][T18347] usb 4-1: Product: syz [ 2080.451128][T18936] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2080.469285][T18347] usb 4-1: Manufacturer: syz [ 2080.536062][T18347] usb 4-1: SerialNumber: syz [ 2080.629364][T18347] usb 4-1: config 0 descriptor?? [ 2080.651755][T18936] usb 5-1: Using ep0 maxpacket: 32 [ 2080.713217][T18347] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2080.801373][T18936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.880903][T18936] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2080.934020][T18936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.987105][T18936] usb 5-1: Product: syz [ 2081.021076][T18936] usb 5-1: Manufacturer: syz [ 2081.041630][T18936] usb 5-1: SerialNumber: syz [ 2081.143839][T18936] usb 5-1: config 0 descriptor?? [ 2081.258334][T18936] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2081.643989][T25591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4845'. [ 2081.720895][T25591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2083.157607][T25594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4846'. [ 2083.274980][T25587] usb 4-1: USB disconnect, device number 94 [ 2083.363917][T25594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2083.708567][T25587] usb 5-1: USB disconnect, device number 122 [ 2084.676679][ T30] audit: type=1400 audit(1767629046.023:2254): avc: denied { create } for pid=25607 comm="syz.3.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2084.902114][T25612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4855'. [ 2084.920881][ T30] audit: type=1400 audit(1767629046.053:2255): avc: denied { getopt } for pid=25607 comm="syz.3.4854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2087.765181][T25633] gfs2: not a GFS2 filesystem [ 2088.081434][T25637] fuse: Unknown parameter '0x0000000000000004' [ 2088.171511][T18435] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2088.322639][T18435] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.365372][T18435] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.651408][T18435] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2088.728544][T18435] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2088.763771][T18435] usb 3-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 2088.781116][T18435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.795491][T18435] usb 3-1: Product: syz [ 2088.799701][T18435] usb 3-1: Manufacturer: syz [ 2089.071568][T18435] usb 3-1: SerialNumber: syz [ 2089.443629][T14929] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2089.862857][T14929] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2089.871472][T14929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.883164][T14929] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2089.894288][T14929] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2089.904827][T14929] usb 1-1: Manufacturer: syz [ 2089.919248][T14929] usb 1-1: config 0 descriptor?? [ 2090.033161][T14929] rc_core: IR keymap rc-hauppauge not found [ 2090.039391][T14929] Registered IR keymap rc-empty [ 2090.057105][T14929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2090.076944][T25667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4872'. [ 2090.114856][T14929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 2090.401313][T18435] cdc_ncm 3-1:1.0: bind() failure [ 2090.433390][T18435] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2090.444018][T18435] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2090.467944][T18435] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2090.510288][T18435] usb 3-1: USB disconnect, device number 122 [ 2091.668272][T25680] fuse: Unknown parameter '0x0000000000000004' [ 2092.143713][T18435] usb 1-1: USB disconnect, device number 97 [ 2094.111167][T14929] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2094.118739][T18435] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2094.342048][T14929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.355231][T14929] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2094.375479][T14929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2094.411145][T18435] usb 1-1: Using ep0 maxpacket: 32 [ 2094.422341][T18435] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2094.438302][T14929] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2094.456990][T18435] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2094.469741][T14929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.482292][T18435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.523569][T14929] usb 2-1: config 0 descriptor?? [ 2094.535489][T18435] usb 1-1: Product: syz [ 2094.566917][T18435] usb 1-1: Manufacturer: syz [ 2094.593605][T18435] usb 1-1: SerialNumber: syz [ 2094.626873][T18435] usb 1-1: config 0 descriptor?? [ 2094.652946][T18435] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2095.000604][T14929] usb 2-1: USB disconnect, device number 6 [ 2095.102351][T25715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4883'. [ 2095.259732][T25715] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2095.384689][T25718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4887'. [ 2095.565005][T14929] usb 1-1: USB disconnect, device number 98 [ 2097.778206][T25587] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2098.001545][T25587] usb 5-1: Using ep0 maxpacket: 32 [ 2098.008310][T25587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.032193][T25587] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2098.052465][T25587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.063883][T25587] usb 5-1: Product: syz [ 2098.068161][T25587] usb 5-1: Manufacturer: syz [ 2098.191206][ T30] audit: type=1400 audit(1767629059.473:2256): avc: denied { bind } for pid=25742 comm="syz.2.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2098.341022][T18435] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 2098.459971][T25587] usb 5-1: SerialNumber: syz [ 2098.501213][T14929] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2098.539544][T25587] usb 5-1: config 0 descriptor?? [ 2098.588432][T25587] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2098.733186][T14929] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2098.875689][T18435] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.904570][T14929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2098.921079][T18435] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2098.936113][T18435] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 2098.947103][T14929] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2098.962627][T14929] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2099.056999][T25752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4892'. [ 2099.079487][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.089456][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.139347][T25752] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2099.241034][T18435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.250022][T14929] usb 2-1: Manufacturer: syz [ 2099.264556][T18435] usb 1-1: config 0 descriptor?? [ 2099.270824][T14929] usb 2-1: config 0 descriptor?? [ 2099.470773][T25587] usb 5-1: USB disconnect, device number 123 [ 2099.471056][T14929] rc_core: IR keymap rc-hauppauge not found [ 2099.483185][T14929] Registered IR keymap rc-empty [ 2099.491617][T14929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2099.504873][T14929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 2099.549247][T14929] usb 2-1: USB disconnect, device number 7 [ 2099.719464][T18435] usbhid 1-1:0.0: can't add hid device: -71 [ 2099.725607][T18435] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2099.748138][T18435] usb 1-1: USB disconnect, device number 99 [ 2100.130017][T18435] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2101.491146][T18435] usb 3-1: Using ep0 maxpacket: 32 [ 2101.508354][T18435] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2101.756784][T18435] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2101.821058][T18435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.849747][T18435] usb 3-1: Product: syz [ 2101.858550][T18435] usb 3-1: Manufacturer: syz [ 2101.931263][T18435] usb 3-1: SerialNumber: syz [ 2102.146810][T18435] usb 3-1: config 0 descriptor?? [ 2102.158735][T18435] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2102.516850][T25783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4901'. [ 2102.613511][T25783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2102.773049][ T30] audit: type=1400 audit(1767629064.123:2257): avc: denied { getopt } for pid=25776 comm="syz.3.4907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2103.314503][T25587] usb 3-1: USB disconnect, device number 123 [ 2104.837189][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4913'. [ 2107.999181][T25852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4926'. [ 2111.931613][T25896] binder: 25895:25896 ioctl c0306201 0 returned -14 [ 2112.147302][T25902] openvswitch: netlink: Actions may not be safe on all matching packets [ 2112.411340][T18435] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2112.569856][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 2112.713227][T18435] usb 3-1: device descriptor read/64, error -71 [ 2112.971102][T18435] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2113.123024][T18435] usb 3-1: device descriptor read/64, error -71 [ 2113.447453][T18435] usb usb3-port1: attempt power cycle [ 2113.801063][T18435] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2113.821919][T18435] usb 3-1: device descriptor read/8, error -71 [ 2113.994998][T25919] netlink: 'syz.0.4940': attribute type 1 has an invalid length. [ 2114.189632][T18435] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2114.224224][T18435] usb 3-1: device descriptor read/8, error -71 [ 2114.319977][T25928] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2114.391976][T18435] usb usb3-port1: unable to enumerate USB device [ 2114.443884][T25934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4947'. [ 2114.467098][T25928] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 2115.321562][T25929] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 2115.544656][T25919] macvlan2: entered promiscuous mode [ 2115.549995][T25919] macvlan2: entered allmulticast mode [ 2115.571890][T25919] bond4: entered promiscuous mode [ 2115.604964][T25919] bridge2: entered promiscuous mode [ 2115.632332][T25919] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2115.673176][T25919] bond4: left promiscuous mode [ 2115.678008][T25919] bridge2: left promiscuous mode [ 2116.911099][T25951] netlink: 'syz.0.4952': attribute type 4 has an invalid length. [ 2116.918987][T25951] netlink: 'syz.0.4952': attribute type 2 has an invalid length. [ 2118.001660][T25587] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2118.171028][T25587] usb 1-1: Using ep0 maxpacket: 32 [ 2118.207795][T25587] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 2118.230056][T25587] usb 1-1: config 0 has no interface number 0 [ 2118.252380][T25587] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2118.270058][T25587] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2118.291078][T25587] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2118.310980][T25587] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2118.351005][T25587] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2118.366602][T25587] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2118.395140][T25587] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2118.449930][T25587] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2118.470058][T25587] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2118.490037][T25587] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2118.605133][T25587] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2118.651798][T25587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.659858][T25587] usb 1-1: Product: syz [ 2118.665506][T25587] usb 1-1: Manufacturer: syz [ 2118.671703][T25587] usb 1-1: SerialNumber: syz [ 2118.743876][T25965] tipc: Can't bind to reserved service type 0 [ 2118.743904][ T30] audit: type=1400 audit(1767629080.093:2258): avc: denied { bind } for pid=25963 comm="syz.3.4958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2118.895748][T25587] usb 1-1: config 0 descriptor?? [ 2118.944324][T25957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2118.992302][T25957] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2119.080030][T25587] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2119.147561][T25587] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2119.798936][T25587] scsi host1: microtekX6 [ 2119.972159][T25979] netlink: 'syz.4.4955': attribute type 4 has an invalid length. [ 2119.980051][T25979] netlink: 'syz.4.4955': attribute type 2 has an invalid length. [ 2119.996368][T25978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4960'. [ 2120.075026][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4959'. [ 2121.393031][T25995] netlink: 'syz.1.4963': attribute type 4 has an invalid length. [ 2121.401007][T25995] netlink: 'syz.1.4963': attribute type 2 has an invalid length. [ 2124.723083][T18435] usb 1-1: USB disconnect, device number 100 [ 2125.303355][T26024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4972'. [ 2127.201568][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 2127.283469][T18435] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2127.451302][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4982'. [ 2128.495995][T26054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 2128.574940][ T30] audit: type=1400 audit(1767629089.923:2259): avc: denied { bind } for pid=26044 comm="syz.3.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2128.667973][T18435] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2128.701685][ T30] audit: type=1400 audit(1767629089.963:2260): avc: denied { listen } for pid=26044 comm="syz.3.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2128.725008][T18435] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2128.743204][T18435] usb 4-1: can't read configurations, error -71 [ 2128.839365][ T30] audit: type=1400 audit(1767629089.973:2261): avc: denied { write } for pid=26044 comm="syz.3.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2130.250397][T26081] netlink: 'syz.4.4990': attribute type 10 has an invalid length. [ 2130.347412][T26081] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2130.495465][T25109] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2130.655117][T25109] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 2130.666342][T25109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.680598][T25109] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2130.690827][T25109] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2130.699268][T25109] usb 3-1: Manufacturer: syz [ 2130.708365][T25109] usb 3-1: config 0 descriptor?? [ 2131.461109][T25109] rc_core: IR keymap rc-hauppauge not found [ 2131.471106][T25109] Registered IR keymap rc-empty [ 2131.481930][T25109] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 2131.759013][T25109] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input52 [ 2131.872248][T25109] usb 3-1: USB disconnect, device number 2 [ 2132.612798][T26118] netlink: 'syz.3.5002': attribute type 1 has an invalid length. [ 2132.721963][T26120] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2132.759167][T26120] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2132.925952][T26118] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2133.646375][T26121] macvlan2: entered promiscuous mode [ 2133.661041][T26121] macvlan2: entered allmulticast mode [ 2133.668061][T26121] bond1: entered promiscuous mode [ 2133.705242][T26121] bridge1: entered promiscuous mode [ 2133.721872][T26121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2133.761064][T25109] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2133.805797][T26121] bond1: left promiscuous mode [ 2133.811892][T26121] bridge1: left promiscuous mode [ 2134.068601][T25109] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.138439][T25109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2134.149861][T25109] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2134.161905][T25109] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2135.023152][T25109] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2135.038945][T25109] usb 2-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 2135.049358][T25109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.058089][T25109] usb 2-1: Product: syz [ 2135.062657][T25109] usb 2-1: Manufacturer: syz [ 2135.073753][T25109] usb 2-1: SerialNumber: syz [ 2135.111792][T26144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5009'. [ 2135.225968][T26147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5010'. [ 2136.341302][T18435] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2136.444149][T25109] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 2136.550422][T25109] cdc_ncm 2-1:1.0: bind() failure [ 2136.551068][T26160] gfs2: not a GFS2 filesystem [ 2136.622487][T25109] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 2136.630862][T25109] cdc_ncm 2-1:1.1: bind() failure [ 2136.641033][T18435] usb 4-1: Using ep0 maxpacket: 32 [ 2136.661671][T18435] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2136.680542][T18435] usb 4-1: config 0 has no interface number 0 [ 2136.707871][T18435] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2136.720753][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5015'. [ 2136.741941][T25109] usb 2-1: USB disconnect, device number 8 [ 2136.788820][T18435] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2137.205929][T18435] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2137.371166][T18435] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2137.383500][T18435] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2137.433994][T18435] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2137.464771][T18435] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2137.488211][ T5824] Bluetooth: hci0: Malformed Event: 0x02 [ 2137.543800][T18435] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2137.633479][T18435] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2137.714507][T18435] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2137.853772][T18435] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2137.933327][T18435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.030252][T18435] usb 4-1: Product: syz [ 2138.088713][T18435] usb 4-1: Manufacturer: syz [ 2138.167425][T18435] usb 4-1: SerialNumber: syz [ 2138.324701][T18435] usb 4-1: config 0 descriptor?? [ 2138.752273][T18435] usb 4-1: can't set config #0, error -71 [ 2138.820218][T18435] usb 4-1: USB disconnect, device number 97 [ 2138.842169][T26187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5022'. [ 2138.959088][T26195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26195 comm=syz.3.5022 [ 2139.276026][T26205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 2140.554232][T26213] gfs2: not a GFS2 filesystem [ 2140.921556][T25587] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2141.115830][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5029'. [ 2141.204188][T25587] usb 5-1: Using ep0 maxpacket: 32 [ 2141.245878][T25587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2141.355719][T25587] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2141.440132][T25587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.552720][T25587] usb 5-1: Product: syz [ 2141.675508][T25587] usb 5-1: Manufacturer: syz [ 2141.680181][T25587] usb 5-1: SerialNumber: syz [ 2142.019661][T26235] netlink: 'syz.1.5031': attribute type 4 has an invalid length. [ 2142.027664][T26235] netlink: 'syz.1.5031': attribute type 2 has an invalid length. [ 2142.251302][T25587] usb 5-1: config 0 descriptor?? [ 2142.259258][T25587] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2142.789971][T26243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5028'. [ 2142.812513][T26243] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2142.921994][T25587] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2143.142536][T25587] usb 4-1: Using ep0 maxpacket: 32 [ 2143.236632][T25587] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2144.783281][T25587] usb 4-1: config 0 has no interface number 0 [ 2144.789986][T25587] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2144.808618][T25587] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2144.833022][T25587] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2144.844815][T25587] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2145.144309][T25587] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2145.156249][T25587] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2145.171638][T25587] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2145.205666][T25587] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2145.244457][T25587] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2145.282878][T25587] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2145.333491][T25587] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2145.345532][T25587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.443130][T25587] usb 4-1: Product: syz [ 2145.480192][T25587] usb 4-1: Manufacturer: syz [ 2145.510623][T18936] usb 5-1: USB disconnect, device number 124 [ 2145.530795][T25587] usb 4-1: SerialNumber: syz [ 2145.716347][T25587] usb 4-1: config 0 descriptor?? [ 2145.970658][T25587] usb 4-1: can't set config #0, error -71 [ 2146.115209][T25587] usb 4-1: USB disconnect, device number 98 [ 2146.528241][T26262] gfs2: not a GFS2 filesystem [ 2146.661567][T26267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5041'. [ 2147.013873][T26277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5043'. [ 2149.005628][T26301] netlink: 'syz.3.5047': attribute type 4 has an invalid length. [ 2149.013673][T26301] netlink: 'syz.3.5047': attribute type 2 has an invalid length. [ 2149.543266][T25587] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2149.712426][T25587] usb 5-1: Using ep0 maxpacket: 32 [ 2149.729794][T25587] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 2149.784137][T25587] usb 5-1: config 0 has no interface number 0 [ 2149.870814][T25587] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2150.038115][T25587] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2150.160254][T25587] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2150.296397][T25587] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2150.401197][T25587] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2150.459183][T25587] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2150.480836][T25587] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2150.523173][T25587] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2150.561489][T25587] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2150.654003][T25587] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2150.686444][T25587] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2150.698977][T25587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.710101][T25587] usb 5-1: Product: syz [ 2150.718707][T25587] usb 5-1: Manufacturer: syz [ 2150.728906][T25587] usb 5-1: SerialNumber: syz [ 2150.873924][T25587] usb 5-1: config 0 descriptor?? [ 2150.903352][T26303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2150.911478][T26303] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2150.942875][T25587] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2150.958186][T25587] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2150.992337][T25587] scsi host1: microtekX6 [ 2153.500597][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5060'. [ 2153.947831][T25587] usb 5-1: USB disconnect, device number 125 [ 2154.636619][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'. [ 2155.559650][ T30] audit: type=1400 audit(1767629116.903:2262): avc: denied { read } for pid=26369 comm="syz.2.5066" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2155.585048][ T30] audit: type=1400 audit(1767629116.903:2263): avc: denied { open } for pid=26369 comm="syz.2.5066" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2156.625754][T26386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5069'. [ 2158.925088][T26418] openvswitch: netlink: Actions may not be safe on all matching packets [ 2159.182110][T18435] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2159.331148][T18435] usb 1-1: device descriptor read/64, error -71 [ 2159.591653][T18435] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2159.821232][T18435] usb 1-1: device descriptor read/64, error -71 [ 2159.938226][T18435] usb usb1-port1: attempt power cycle [ 2160.486009][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.492408][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.571131][T18435] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2160.596572][T26444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5084'. [ 2160.674859][T18435] usb 1-1: device descriptor read/8, error -71 [ 2160.931041][T18435] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2160.942715][T25587] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2161.453090][T18435] usb 1-1: device descriptor read/8, error -71 [ 2161.633839][T18435] usb usb1-port1: unable to enumerate USB device [ 2161.708265][T25587] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 2161.765568][T25587] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.976188][T25587] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2162.061084][T25587] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2162.087415][T25587] usb 5-1: Manufacturer: syz [ 2162.132576][T25587] usb 5-1: config 0 descriptor?? [ 2162.431227][T25587] rc_core: IR keymap rc-hauppauge not found [ 2162.443749][T25587] Registered IR keymap rc-empty [ 2162.454401][T25587] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2162.473691][T25587] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 2162.518865][T25587] usb 5-1: USB disconnect, device number 126 [ 2163.909466][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 2166.603491][T25587] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 2166.652819][T25587] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2166.926931][T26549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5114'. [ 2169.456362][T26577] netlink: 'syz.1.5122': attribute type 10 has an invalid length. [ 2169.475282][T26577] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2169.951272][T25587] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2170.371394][T25587] usb 4-1: Using ep0 maxpacket: 32 [ 2170.378956][T25587] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2170.392407][T25587] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2170.401804][T25587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.409811][T25587] usb 4-1: Product: syz [ 2170.414883][T25587] usb 4-1: Manufacturer: syz [ 2170.419708][T25587] usb 4-1: SerialNumber: syz [ 2170.427255][T25587] usb 4-1: config 0 descriptor?? [ 2170.437740][T25587] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2170.572191][T18936] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2170.751516][T18936] usb 5-1: Using ep0 maxpacket: 32 [ 2170.791761][T26589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5121'. [ 2170.801037][T18936] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 2170.818055][T26589] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2170.999399][T18936] usb 5-1: config 0 has no interface number 0 [ 2171.171505][T18936] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2171.290046][T18936] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2171.340230][T18435] usb 4-1: USB disconnect, device number 99 [ 2171.345252][T18936] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2171.984119][T18936] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2172.154367][T18936] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2172.190324][T18936] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2172.212138][T18936] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2172.295435][T18936] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2172.325851][T18936] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2172.346101][T18936] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2172.388185][T18936] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2172.407995][T18936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.428223][T18936] usb 5-1: Product: syz [ 2172.433118][T18936] usb 5-1: Manufacturer: syz [ 2172.437721][T18936] usb 5-1: SerialNumber: syz [ 2172.561381][T18936] usb 5-1: config 0 descriptor?? [ 2172.954917][T26582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2172.963902][T26582] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2172.974527][T18936] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2172.983481][T18936] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2173.007749][T18936] scsi host1: microtekX6 [ 2173.126418][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5133'. [ 2174.101173][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'. [ 2175.115825][T26631] openvswitch: netlink: Actions may not be safe on all matching packets [ 2175.323436][T18435] usb 5-1: USB disconnect, device number 127 [ 2175.491144][T25109] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2175.661280][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5139'. [ 2175.724921][T25109] usb 4-1: device descriptor read/64, error -71 [ 2175.765239][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5138'. [ 2176.841082][T25109] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2177.023096][T25109] usb 4-1: device descriptor read/64, error -71 [ 2177.195637][T25109] usb usb4-port1: attempt power cycle [ 2177.851007][T25109] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2178.716325][T25109] usb 4-1: device descriptor read/8, error -71 [ 2178.946925][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'. [ 2180.337050][ T30] audit: type=1326 audit(1767629141.673:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2180.932357][ T30] audit: type=1326 audit(1767629141.673:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2181.134614][ T30] audit: type=1326 audit(1767629141.673:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2181.443621][ T30] audit: type=1326 audit(1767629141.683:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2181.523781][ T30] audit: type=1326 audit(1767629141.683:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2181.777898][T26692] netlink: 'syz.3.5152': attribute type 4 has an invalid length. [ 2181.786366][T26692] netlink: 'syz.3.5152': attribute type 2 has an invalid length. [ 2182.175955][ T30] audit: type=1326 audit(1767629142.333:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2182.577201][T26697] tipc: Started in network mode [ 2182.579574][ T30] audit: type=1326 audit(1767629142.433:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2182.582245][T26697] tipc: Node identity 96bacbddb379, cluster identity 4711 [ 2182.582387][T26697] tipc: Enabled bearer , priority 0 [ 2183.157408][ T30] audit: type=1326 audit(1767629142.433:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2183.181324][ T30] audit: type=1326 audit(1767629142.463:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2183.234881][ T30] audit: type=1326 audit(1767629142.463:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26669 comm="syz.4.5147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f5a58f749 code=0x7ffc0000 [ 2183.271437][T26697] syzkaller0: entered promiscuous mode [ 2183.399930][T26709] openvswitch: netlink: Actions may not be safe on all matching packets [ 2183.439053][T26697] syzkaller0: entered allmulticast mode [ 2183.595813][T26696] tipc: Resetting bearer [ 2183.691064][T25109] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2183.831060][T25109] usb 5-1: device descriptor read/64, error -71 [ 2183.852923][T26696] tipc: Disabling bearer [ 2183.871102][T25925] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2183.940142][T18936] tipc: Node number set to 633588701 [ 2184.780982][T25925] usb 3-1: Using ep0 maxpacket: 32 [ 2184.787857][T25925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.865780][T25925] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2184.883419][T25925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.913807][T25925] usb 3-1: Product: syz [ 2184.941091][T25109] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2184.959396][T25925] usb 3-1: Manufacturer: syz [ 2184.989260][T25925] usb 3-1: SerialNumber: syz [ 2185.026512][T25925] usb 3-1: config 0 descriptor?? [ 2185.116449][T25109] usb 5-1: device descriptor read/64, error -71 [ 2185.138876][T25925] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2185.394179][T25109] usb usb5-port1: attempt power cycle [ 2186.014663][T26737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5160'. [ 2186.380283][T18936] usb 3-1: USB disconnect, device number 3 [ 2187.001186][T25587] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2187.193599][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2187.193613][ T30] audit: type=1326 audit(1767629148.543:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2187.232316][T25587] usb 2-1: Using ep0 maxpacket: 32 [ 2187.239711][T25587] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2187.319037][T25587] usb 2-1: config 0 has no interface number 0 [ 2187.327012][T25587] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2187.539053][T25587] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2187.590408][ T30] audit: type=1326 audit(1767629148.573:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2187.647100][T25587] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2187.720051][T25587] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2187.788545][ T30] audit: type=1326 audit(1767629148.573:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2187.844269][T25587] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2187.984897][T25587] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2188.074367][ T30] audit: type=1326 audit(1767629148.573:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2188.111013][T25587] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2188.163445][T25587] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2188.213338][ T30] audit: type=1326 audit(1767629148.573:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2188.240760][T25587] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2188.281312][T25587] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2188.461811][ T30] audit: type=1326 audit(1767629148.573:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2188.596892][ T30] audit: type=1326 audit(1767629148.573:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2188.623760][ T30] audit: type=1326 audit(1767629148.573:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2188.884230][T25587] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2188.915891][T25587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.935087][T25587] usb 2-1: Product: syz [ 2188.939273][T25587] usb 2-1: Manufacturer: syz [ 2188.974684][ T30] audit: type=1326 audit(1767629148.573:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2189.000707][T25587] usb 2-1: SerialNumber: syz [ 2189.017545][T25587] usb 2-1: config 0 descriptor?? [ 2189.032208][T26742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2189.050656][T26742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2189.080290][T25587] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2189.088883][ T30] audit: type=1326 audit(1767629148.573:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26738 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb0ff8f749 code=0x7ffc0000 [ 2189.129135][T25587] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2189.161305][T25587] scsi host1: microtekX6 [ 2189.427413][T25587] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2189.711513][T25587] usb 5-1: Using ep0 maxpacket: 32 [ 2189.724325][T25587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.737228][T25587] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2189.746617][T25587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.772357][T25587] usb 5-1: Product: syz [ 2189.781360][T25587] usb 5-1: Manufacturer: syz [ 2189.790326][T25587] usb 5-1: SerialNumber: syz [ 2189.814700][T25587] usb 5-1: config 0 descriptor?? [ 2189.830785][T25587] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2190.039844][T26777] netlink: 'syz.0.5170': attribute type 10 has an invalid length. [ 2190.070159][T26777] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2191.168881][T26784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5173'. [ 2191.480182][T25587] usb 2-1: USB disconnect, device number 9 [ 2191.615511][T26784] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2191.688888][T26794] openvswitch: netlink: Actions may not be safe on all matching packets [ 2192.001537][T25109] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2192.531841][T25587] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2192.561368][T25109] usb 1-1: Using ep0 maxpacket: 16 [ 2192.672716][T25109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2192.683992][T25109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2192.693809][T25109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2192.706813][T25109] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2192.715993][T25109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.744659][T25587] usb 2-1: device descriptor read/64, error -71 [ 2192.751502][T25109] usb 1-1: config 0 descriptor?? [ 2192.950576][T18347] usb 5-1: USB disconnect, device number 5 [ 2193.062977][T25587] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2193.472492][T25587] usb 2-1: device descriptor read/64, error -71 [ 2193.719980][T25587] usb usb2-port1: attempt power cycle [ 2194.006715][T25109] usbhid 1-1:0.0: can't add hid device: -71 [ 2194.012990][T25109] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2194.023720][T25109] usb 1-1: USB disconnect, device number 105 [ 2194.161730][T25587] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2196.300141][T25587] usb 2-1: device descriptor read/8, error -71 [ 2196.339253][T25109] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 2196.379730][T25109] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2196.567604][T26837] No control pipe specified [ 2198.121832][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5197'. [ 2198.277580][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5198'. [ 2204.894514][T26933] netlink: 'syz.2.5217': attribute type 4 has an invalid length. [ 2204.902458][T26933] netlink: 'syz.2.5217': attribute type 2 has an invalid length. [ 2205.822299][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2205.990823][ T30] audit: type=1400 audit(1767629167.163:2323): avc: denied { mount } for pid=26932 comm="syz.4.5219" name="/" dev="autofs" ino=115272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2206.990982][ T30] audit: type=1400 audit(1767629168.293:2324): avc: denied { unmount } for pid=19413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2207.661164][T25587] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2207.832205][T25587] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2207.840623][T25587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2207.908263][T25587] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2207.918196][T25587] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2208.787298][T25587] usb 4-1: Manufacturer: syz [ 2208.852432][T25587] usb 4-1: config 0 descriptor?? [ 2209.971031][T25587] rc_core: IR keymap rc-hauppauge not found [ 2210.021179][T25587] Registered IR keymap rc-empty [ 2210.032055][T25587] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2210.331639][T25587] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 2210.390632][T25587] usb 4-1: USB disconnect, device number 104 [ 2213.081136][T25925] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2213.801060][T25925] usb 3-1: Using ep0 maxpacket: 32 [ 2213.809145][T25925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.835062][T25925] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2213.869644][T25925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.901048][T25925] usb 3-1: Product: syz [ 2213.905309][T25925] usb 3-1: Manufacturer: syz [ 2213.909933][T25925] usb 3-1: SerialNumber: syz [ 2214.017291][T25925] usb 3-1: config 0 descriptor?? [ 2214.027989][T25925] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2217.262184][T25587] usb 3-1: USB disconnect, device number 4 [ 2217.359381][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5252'. [ 2219.317168][T27107] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5258'. [ 2219.761504][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5259'. [ 2221.160968][T25109] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2221.341423][T25109] usb 4-1: Using ep0 maxpacket: 32 [ 2221.364117][T25109] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 2221.381627][T25109] usb 4-1: config 0 has no interface number 0 [ 2221.387785][T25109] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2221.415448][T25109] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2221.440273][T25109] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2221.485988][T25109] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2221.504118][T25109] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2221.565357][T25109] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2221.575945][T25109] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2221.586311][T25109] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2221.598850][T25109] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2221.623508][T25109] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2221.663201][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5270'. [ 2221.677547][T25109] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2221.704618][T25109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.731019][T25109] usb 4-1: Product: syz [ 2221.741074][T25109] usb 4-1: Manufacturer: syz [ 2221.747620][T25109] usb 4-1: SerialNumber: syz [ 2221.769923][T25109] usb 4-1: config 0 descriptor?? [ 2221.791364][T27138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2221.799482][T27138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2221.816000][T25109] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2221.830956][T25109] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2221.859557][T25109] scsi host1: microtekX6 [ 2221.924511][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.931193][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.354857][T25109] usb 4-1: USB disconnect, device number 105 [ 2226.490161][T27212] tipc: Enabled bearer , priority 0 [ 2226.499239][T27212] syzkaller0: entered promiscuous mode [ 2226.505043][T27212] syzkaller0: entered allmulticast mode [ 2226.857071][T27212] tipc: Resetting bearer [ 2226.955097][T27211] tipc: Resetting bearer [ 2227.073287][T27211] tipc: Disabling bearer [ 2228.152119][T27237] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5296'. [ 2230.321081][T25109] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2230.690982][T25109] usb 2-1: Using ep0 maxpacket: 32 [ 2230.702930][T25109] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2230.755990][T25109] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2230.788433][T25109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.817102][T25109] usb 2-1: Product: syz [ 2230.827466][T25109] usb 2-1: Manufacturer: syz [ 2230.837355][T25109] usb 2-1: SerialNumber: syz [ 2230.856102][T25109] usb 2-1: config 0 descriptor?? [ 2230.870590][T25109] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2232.189557][T27281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5300'. [ 2232.372710][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5308'. [ 2232.404003][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'. [ 2233.601998][T27310] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5315'. [ 2234.898306][T27319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5316'. [ 2235.922057][T25109] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2236.231011][T25109] usb 3-1: Using ep0 maxpacket: 32 [ 2236.244388][T25109] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 2236.264780][T25109] usb 3-1: config 0 has no interface number 0 [ 2236.686578][T25109] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2236.697678][T25109] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2236.709725][T25109] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2236.723182][T25109] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2236.737566][T25109] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2236.750430][T25109] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2236.768901][T25109] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2236.789750][T25109] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2236.808639][T25109] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2236.826571][T25109] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2236.843764][T25109] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2236.853230][T25109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.865002][T25109] usb 3-1: Product: syz [ 2236.869320][T25109] usb 3-1: Manufacturer: syz [ 2236.892046][T25109] usb 3-1: SerialNumber: syz [ 2237.177570][T25109] usb 3-1: config 0 descriptor?? [ 2237.188999][T27328] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2237.207943][T27328] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2237.229217][T25109] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2237.251517][T25109] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2237.313863][T25109] scsi host1: microtekX6 [ 2237.440489][T27360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5331'. [ 2238.926101][T25587] usb 2-1: USB disconnect, device number 14 [ 2239.030237][T27374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5334'. [ 2243.021050][T25109] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2243.531027][T25109] usb 2-1: Using ep0 maxpacket: 32 [ 2243.536594][T25925] usb 3-1: USB disconnect, device number 5 [ 2243.545612][T25109] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.564793][T25109] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2243.575775][T25109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.584411][T25109] usb 2-1: Product: syz [ 2243.589102][T25109] usb 2-1: Manufacturer: syz [ 2243.652029][T25109] usb 2-1: SerialNumber: syz [ 2243.667973][T25109] usb 2-1: config 0 descriptor?? [ 2243.691774][T27412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5347'. [ 2243.715530][T25109] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2244.662912][T27419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5345'. [ 2244.925348][T27419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2245.565166][T27439] binder: 27438:27439 ioctl c0306201 0 returned -14 [ 2245.747042][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5355'. [ 2245.872813][ T5824] Bluetooth: hci1: Malformed Event: 0x02 [ 2246.763666][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5359'. [ 2246.782728][ T5824] Bluetooth: hci4: Malformed Event: 0x02 [ 2248.141947][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'. [ 2248.475988][T18936] usb 2-1: USB disconnect, device number 15 [ 2251.322156][T27503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5372'. [ 2251.391186][T25925] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2251.692052][T25925] usb 1-1: Using ep0 maxpacket: 32 [ 2251.704956][T25925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.720334][T25925] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2251.761720][T25925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.770345][T25925] usb 1-1: Product: syz [ 2251.774980][T25925] usb 1-1: Manufacturer: syz [ 2251.779882][T25925] usb 1-1: SerialNumber: syz [ 2251.788323][T25925] usb 1-1: config 0 descriptor?? [ 2251.804664][T25925] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2251.853684][T27520] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5380'. [ 2252.044598][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5382'. [ 2252.502533][T27529] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5370'. [ 2252.688750][T27529] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2254.696018][T25925] usb 1-1: USB disconnect, device number 106 [ 2254.910809][T27555] netlink: 'syz.1.5391': attribute type 1 has an invalid length. [ 2254.990825][T27558] overlayfs: failed to clone upperpath [ 2255.220900][T27560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5391'. [ 2255.385132][T27555] bond6: (slave bridge3): making interface the new active one [ 2255.393952][T27555] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 2255.423525][T27555] macvlan2: entered promiscuous mode [ 2255.429095][T27555] macvlan2: entered allmulticast mode [ 2255.436107][T27555] bond6: entered promiscuous mode [ 2255.448512][T27555] bridge3: entered promiscuous mode [ 2255.462468][T27555] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2255.515838][T27555] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2255.548081][T27555] bond6: left promiscuous mode [ 2256.134147][T27555] bridge3: left promiscuous mode [ 2256.246592][T27567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 2256.452584][T27580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5396'. [ 2258.277910][T27599] netlink: 'syz.3.5402': attribute type 1 has an invalid length. [ 2258.384935][T27608] netlink: 'syz.4.5405': attribute type 1 has an invalid length. [ 2259.420257][T27612] bond2: (slave bridge2): making interface the new active one [ 2259.448570][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5405'. [ 2259.458368][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5405'. [ 2259.480797][T27612] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 2259.698800][T27620] bond2: (slave bridge1): making interface the new active one [ 2259.759701][T27620] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 2259.803351][T27599] macvlan2: entered promiscuous mode [ 2259.839335][T27599] macvlan2: entered allmulticast mode [ 2259.861977][T27599] bond2: entered promiscuous mode [ 2259.885047][T27599] bridge2: entered promiscuous mode [ 2259.899520][T27599] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2259.912308][T27599] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2259.932507][T27599] bond2: left promiscuous mode [ 2259.937447][T27599] bridge2: left promiscuous mode [ 2260.008479][T27621] macvlan2: entered promiscuous mode [ 2260.016309][T27621] macvlan2: entered allmulticast mode [ 2260.023260][T27621] bond2: entered promiscuous mode [ 2260.028486][T27621] bridge1: entered promiscuous mode [ 2260.035900][T27621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2260.051239][ T5824] Bluetooth: hci4: Malformed Event: 0x02 [ 2260.055626][T27621] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2260.123687][T27621] bond2: left promiscuous mode [ 2260.128531][T27621] bridge1: left promiscuous mode [ 2260.259968][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5412'. [ 2260.375553][T27637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5407'. [ 2261.238007][T27652] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5419'. [ 2263.213691][T25109] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2263.481945][T25109] usb 3-1: Using ep0 maxpacket: 32 [ 2263.525987][T25109] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2263.602778][T25109] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 2263.621021][T25109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.641252][T25109] usb 3-1: Product: syz [ 2263.738112][T27686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5428'. [ 2264.131229][T25109] usb 3-1: Manufacturer: syz [ 2264.135897][T25109] usb 3-1: SerialNumber: syz [ 2264.160115][T25109] usb 3-1: config 0 descriptor?? [ 2264.168998][T25109] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 2264.929559][T27696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5425'. [ 2265.167541][T27696] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2267.475732][T27736] netlink: 'syz.0.5445': attribute type 1 has an invalid length. [ 2267.637933][T18936] usb 3-1: USB disconnect, device number 6 [ 2267.699316][T27736] bond5: (slave bridge3): making interface the new active one [ 2267.792478][T27736] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 2267.832068][T27740] macvlan2: entered promiscuous mode [ 2267.841202][T27740] macvlan2: entered allmulticast mode [ 2267.874018][T27740] bond5: entered promiscuous mode [ 2267.897252][T27740] bridge3: entered promiscuous mode [ 2267.938828][T27740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2267.985459][T27740] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2268.168026][T27740] bond5: left promiscuous mode [ 2268.178017][T27740] bridge3: left promiscuous mode [ 2268.827003][T27762] fuse: Unknown parameter 'use00000000000000000000' [ 2269.137680][ T5824] Bluetooth: hci2: Malformed Event: 0x02 [ 2269.895361][T27777] netlink: 'syz.4.5458': attribute type 1 has an invalid length. [ 2269.935270][T27777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5458'. [ 2270.007448][T27777] bond3: (slave bridge2): making interface the new active one [ 2270.022039][T27777] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 2270.053335][T27777] macvlan2: entered promiscuous mode [ 2270.058998][T27777] macvlan2: entered allmulticast mode [ 2270.065696][T27777] bond3: entered promiscuous mode [ 2270.071261][T27777] bridge2: entered promiscuous mode [ 2270.077211][T27777] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2270.091516][T27777] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2270.117720][T27777] bond3: left promiscuous mode [ 2270.130615][T27777] bridge2: left promiscuous mode [ 2272.612928][T25587] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2272.833336][T27820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5469'. [ 2273.293012][T25587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.307144][T25587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.317850][T25587] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2273.333740][T25587] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2273.344230][T25587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.407288][T25587] usb 3-1: config 0 descriptor?? [ 2274.912775][T25587] usbhid 3-1:0.0: can't add hid device: -71 [ 2274.922571][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5477'. [ 2274.951799][T25587] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2274.992871][T25587] usb 3-1: USB disconnect, device number 7 [ 2276.255502][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5488'. [ 2277.568554][T27884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5492'. [ 2277.608050][T27887] netlink: 'syz.0.5493': attribute type 12 has an invalid length. [ 2279.030765][ T5824] Bluetooth: hci2: Malformed Event: 0x02 [ 2279.337023][T27903] warning: `syz.0.5496' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2280.254162][ T5824] Bluetooth: hci5: Malformed Event: 0x02 [ 2281.653344][T27932] overlayfs: failed to resolve './file0': -2 [ 2281.653615][T27935] overlayfs: failed to clone upperpath [ 2281.918590][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5508'. [ 2283.365079][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.407142][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.441458][T25587] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 2284.655939][T25587] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2284.679184][T25587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.747969][T25587] usb 3-1: Product: syz [ 2284.793184][T27980] netlink: 'syz.0.5518': attribute type 1 has an invalid length. [ 2284.820352][T25587] usb 3-1: Manufacturer: syz [ 2284.825337][T25587] usb 3-1: SerialNumber: syz [ 2284.872200][T25587] usb 3-1: config 0 descriptor?? [ 2284.891354][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5518'. [ 2284.948297][T27984] bond6: (slave bridge4): making interface the new active one [ 2284.963746][T27984] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 2285.085403][T25587] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2285.152441][T27980] macvlan2: entered promiscuous mode [ 2285.170973][T27980] macvlan2: entered allmulticast mode [ 2285.189220][T27980] bond6: entered promiscuous mode [ 2285.207363][T27980] bridge4: entered promiscuous mode [ 2285.230529][T27980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2285.259740][T27980] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2285.294665][T27980] bond6: left promiscuous mode [ 2285.316115][T27980] bridge4: left promiscuous mode [ 2285.702384][T25587] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2286.346653][T28012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5523'. [ 2286.804690][T25587] usb 3-1: USB disconnect, device number 8 [ 2288.160073][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5525'. [ 2288.298518][ T5824] Bluetooth: hci4: Malformed Event: 0x02 [ 2289.475706][ T5824] Bluetooth: hci4: Malformed Event: 0x02 [ 2291.793231][T25109] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 2292.284746][T25109] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2292.297455][T25109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.307448][T25109] usb 2-1: Product: syz [ 2292.321174][T25109] usb 2-1: Manufacturer: syz [ 2292.325819][T25109] usb 2-1: SerialNumber: syz [ 2292.409188][T28087] overlayfs: failed to clone upperpath [ 2292.761828][T25109] usb 2-1: config 0 descriptor?? [ 2292.992203][T25109] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2293.724687][T25109] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2294.165210][ T5824] Bluetooth: hci5: Malformed Event: 0x02 [ 2295.221353][T25925] usb 2-1: USB disconnect, device number 16 [ 2296.897137][T28148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5553'. [ 2297.510418][T28164] overlayfs: failed to clone upperpath [ 2298.161450][T28171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5558'. [ 2298.344731][T28178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5560'. [ 2298.502572][T18936] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 2299.012082][T28194] overlayfs: failed to clone upperpath [ 2299.287300][T18936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2299.296693][T18936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.304903][T18936] usb 2-1: Product: syz [ 2299.309138][T18936] usb 2-1: Manufacturer: syz [ 2299.314117][T18936] usb 2-1: SerialNumber: syz [ 2299.405606][T18936] usb 2-1: config 0 descriptor?? [ 2299.664250][T28201] overlayfs: failed to clone upperpath [ 2299.674578][T18936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2299.898229][T28207] netlink: 'syz.0.5570': attribute type 1 has an invalid length. [ 2299.971654][T28207] bond7: (slave bridge5): making interface the new active one [ 2300.063767][T28207] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 2300.153141][T28207] macvlan2: entered promiscuous mode [ 2300.159624][T28207] macvlan2: entered allmulticast mode [ 2300.167554][T28207] bond7: entered promiscuous mode [ 2300.173138][T28207] bridge5: entered promiscuous mode [ 2300.235146][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 2300.357522][T18936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2300.370529][T28207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2300.575473][T28207] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2300.592962][T28207] bond7: left promiscuous mode [ 2300.598735][T28207] bridge5: left promiscuous mode [ 2300.685013][T28216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5573'. [ 2301.363873][T28246] netlink: 'syz.3.5583': attribute type 1 has an invalid length. [ 2301.418922][T28248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5583'. [ 2301.423940][T25109] usb 2-1: USB disconnect, device number 17 [ 2301.804691][T28249] bond3: (slave bridge3): making interface the new active one [ 2301.870510][T28249] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 2301.963648][T28254] macvlan2: entered promiscuous mode [ 2302.355083][T28254] macvlan2: entered allmulticast mode [ 2302.369901][T28254] bond3: entered promiscuous mode [ 2302.421641][T28254] bridge3: entered promiscuous mode [ 2302.462777][T28254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2302.470399][T28254] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2302.489828][T28254] bond3: left promiscuous mode [ 2302.497293][T28254] bridge3: left promiscuous mode [ 2304.401343][T25109] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2304.632488][T25109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2304.651110][T25109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2304.674417][T25109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2304.721502][T25109] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2304.782820][T25109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.919074][T25109] usb 1-1: config 0 descriptor?? [ 2306.544377][T25109] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 2306.571065][T25109] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 2306.636976][T25109] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 2306.736550][T25109] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 2306.829920][T25109] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 2306.846133][T25109] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 2306.864550][T25109] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2306.995562][T28330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5608'. [ 2307.845183][T25109] usb 1-1: USB disconnect, device number 107 [ 2307.896958][T28329] fido_id[28329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2307.962462][T28337] netlink: 'syz.4.5612': attribute type 1 has an invalid length. [ 2308.043074][T28337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5612'. [ 2308.168572][T28343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5613'. [ 2308.232128][T28345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5613'. [ 2308.233873][T28337] bond4: (slave bridge3): making interface the new active one [ 2308.292840][T28337] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 2308.383537][T28348] macvlan2: entered promiscuous mode [ 2308.400288][T28348] macvlan2: entered allmulticast mode [ 2308.416130][T28348] bond4: entered promiscuous mode [ 2308.422649][T28348] bridge3: entered promiscuous mode [ 2308.433183][T28348] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2308.441122][T28348] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2308.462465][T28348] bond4: left promiscuous mode [ 2308.469296][T28348] bridge3: left promiscuous mode [ 2308.523374][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5615'. [ 2310.225845][ T5824] Bluetooth: Wrong link type (-71) [ 2312.214678][T28397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5628'. [ 2312.513457][T28407] netlink: 'syz.3.5630': attribute type 4 has an invalid length. [ 2312.521441][T28407] netlink: 'syz.3.5630': attribute type 2 has an invalid length. [ 2420.030762][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2420.037755][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3423/1:b..l [ 2420.046523][ C1] rcu: (detected by 1, t=10502 jiffies, g=156049, q=114 ncpus=2) [ 2420.054323][ C1] task:kworker/u8:9 state:R running task stack:22752 pid:3423 tgid:3423 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2420.068964][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2420.076797][ C1] Call Trace: [ 2420.080073][ C1] [ 2420.082999][ C1] ? __schedule+0x10b9/0x6150 [ 2420.087675][ C1] __schedule+0x1139/0x6150 [ 2420.092193][ C1] ? __pfx___schedule+0x10/0x10 [ 2420.097044][ C1] ? mark_held_locks+0x49/0x80 [ 2420.101814][ C1] preempt_schedule_irq+0x51/0x90 [ 2420.106833][ C1] irqentry_exit+0x1d8/0x8c0 [ 2420.111422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2420.117393][ C1] RIP: 0010:lock_release+0x24/0x2d0 [ 2420.122585][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 49 89 f4 53 48 89 fb 48 83 ec 18 65 48 8b 05 f9 ba 18 12 48 89 44 24 10 <31> c0 0f 1f 44 00 00 65 8b 05 12 bb 18 12 83 f8 07 0f 87 1e 02 00 [ 2420.142187][ C1] RSP: 0018:ffffc9000ce37628 EFLAGS: 00000296 [ 2420.148248][ C1] RAX: f705eb248be76600 RBX: ffffffff8e3c96a0 RCX: ffffc9000ce38001 [ 2420.156230][ C1] RDX: 0000000000000000 RSI: ffffffff816cb9a4 RDI: ffffffff8e3c96a0 [ 2420.164193][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 000000005e7c85b4 [ 2420.172159][ C1] R10: 0000000000000002 R11: 000000000000846f R12: ffffffff816cb9a4 [ 2420.180121][ C1] R13: ffffc9000ce376e0 R14: ffffc9000ce37d38 R15: ffffc9000ce37714 [ 2420.188086][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 2420.193294][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 2420.198496][ C1] unwind_next_frame+0x3f9/0x20b0 [ 2420.203516][ C1] ? process_one_work+0x9ba/0x1b20 [ 2420.208630][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2420.214780][ C1] arch_stack_walk+0x94/0x100 [ 2420.219473][ C1] ? worker_thread+0x6c8/0xf10 [ 2420.224236][ C1] stack_trace_save+0x8e/0xc0 [ 2420.228906][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2420.234273][ C1] ? __lock_acquire+0x436/0x2890 [ 2420.239207][ C1] ? __mod_timer+0x8f2/0xd30 [ 2420.243794][ C1] kasan_save_stack+0x33/0x60 [ 2420.248467][ C1] ? kasan_save_stack+0x33/0x60 [ 2420.253319][ C1] ? kasan_save_track+0x14/0x30 [ 2420.258160][ C1] ? kasan_save_free_info+0x3b/0x60 [ 2420.263350][ C1] ? __kasan_slab_free+0x5f/0x80 [ 2420.268282][ C1] ? kmem_cache_free+0x2d8/0x770 [ 2420.273215][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 2420.277918][ C1] ? consume_skb+0xcc/0x100 [ 2420.282418][ C1] ? batadv_forw_packet_free+0x217/0x250 [ 2420.288052][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x26d/0x920 [ 2420.295250][ C1] ? process_one_work+0x9ba/0x1b20 [ 2420.300399][ C1] kasan_save_track+0x14/0x30 [ 2420.305075][ C1] kasan_save_free_info+0x3b/0x60 [ 2420.310092][ C1] __kasan_slab_free+0x5f/0x80 [ 2420.314851][ C1] kmem_cache_free+0x2d8/0x770 [ 2420.319623][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 2420.324304][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 2420.328972][ C1] kfree_skbmem+0x1a4/0x1f0 [ 2420.333471][ C1] consume_skb+0xcc/0x100 [ 2420.337797][ C1] batadv_forw_packet_free+0x217/0x250 [ 2420.343256][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x26d/0x920 [ 2420.350287][ C1] process_one_work+0x9ba/0x1b20 [ 2420.355228][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 2420.362769][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2420.368146][ C1] ? assign_work+0x1a0/0x250 [ 2420.372734][ C1] worker_thread+0x6c8/0xf10 [ 2420.377335][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2420.382447][ C1] kthread+0x3c5/0x780 [ 2420.386515][ C1] ? __pfx_kthread+0x10/0x10 [ 2420.391100][ C1] ? rcu_is_watching+0x12/0xc0 [ 2420.395864][ C1] ? __pfx_kthread+0x10/0x10 [ 2420.400462][ C1] ret_from_fork+0x983/0xb10 [ 2420.405048][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2420.410160][ C1] ? __switch_to+0x7af/0x10d0 [ 2420.414833][ C1] ? __pfx_kthread+0x10/0x10 [ 2420.419416][ C1] ret_from_fork_asm+0x1a/0x30 [ 2420.424196][ C1] [ 2420.427208][ C1] rcu: rcu_preempt kthread starved for 10538 jiffies! g156049 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2420.438478][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2420.448433][ C1] rcu: RCU grace-period kthread stack dump: [ 2420.454307][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2420.467800][ C1] Call Trace: [ 2420.471079][ C1] [ 2420.474006][ C1] ? __schedule+0x10b9/0x6150 [ 2420.478697][ C1] __schedule+0x1139/0x6150 [ 2420.483216][ C1] ? __pfx___schedule+0x10/0x10 [ 2420.488063][ C1] ? find_held_lock+0x2b/0x80 [ 2420.492745][ C1] ? schedule+0x2d7/0x3a0 [ 2420.497077][ C1] schedule+0xe7/0x3a0 [ 2420.501138][ C1] schedule_timeout+0x123/0x290 [ 2420.505978][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2420.511341][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2420.516620][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2420.522420][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 2420.527876][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 2420.532638][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2420.537917][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2420.543110][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2420.548042][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 2420.552902][ C1] rcu_gp_kthread+0x26d/0x380 [ 2420.557573][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2420.562764][ C1] ? rcu_is_watching+0x12/0xc0 [ 2420.567519][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2420.572711][ C1] ? __kthread_parkme+0x19e/0x250 [ 2420.577726][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2420.582920][ C1] kthread+0x3c5/0x780 [ 2420.586989][ C1] ? __pfx_kthread+0x10/0x10 [ 2420.591576][ C1] ? rcu_is_watching+0x12/0xc0 [ 2420.596332][ C1] ? __pfx_kthread+0x10/0x10 [ 2420.600914][ C1] ret_from_fork+0x983/0xb10 [ 2420.605501][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2420.610604][ C1] ? __switch_to+0x7af/0x10d0 [ 2420.615278][ C1] ? __pfx_kthread+0x10/0x10 [ 2420.619865][ C1] ret_from_fork_asm+0x1a/0x30 [ 2420.624645][ C1] [ 2420.627653][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2420.633974][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2420.642899][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2420.652944][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2420.658572][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2420.678189][ C1] RSP: 0000:ffffc90000197de8 EFLAGS: 000002c6 [ 2420.684275][ C1] RAX: 000000000ad2c96d RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 2420.692256][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 2420.700226][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 2420.708191][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 2420.716151][ C1] R13: ffff88801dac24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 2420.724113][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 2420.733037][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2420.739612][ C1] CR2: 000020000000f000 CR3: 0000000035dda000 CR4: 00000000003526f0 [ 2420.747577][ C1] Call Trace: [ 2420.750850][ C1] [ 2420.753772][ C1] default_idle+0x13/0x20 [ 2420.758106][ C1] default_idle_call+0x6c/0xb0 [ 2420.762864][ C1] do_idle+0x38d/0x510 [ 2420.766938][ C1] ? __pfx_do_idle+0x10/0x10 [ 2420.771532][ C1] cpu_startup_entry+0x4f/0x60 [ 2420.776294][ C1] start_secondary+0x21d/0x2d0 [ 2420.781064][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2420.786348][ C1] common_startup_64+0x13e/0x148 [ 2420.791299][ C1]