last executing test programs: 8m13.466610503s ago: executing program 3 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 8m12.206097241s ago: executing program 0 (id=21): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, 0x0, 0x0}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 8m11.286452039s ago: executing program 3 (id=22): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 8m10.88172861s ago: executing program 3 (id=24): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 8m10.87909646s ago: executing program 0 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0x6100083a, 0x8, 0xfffc, 0x6, 0x592186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0x9, {{0x3, 0xffffffffffffffff, 0x7, 0x1abb, 0xfffffffa, 0x14, {0x3, 0x81, 0xffffffff, 0x7, 0x1000001, 0x8, 0x8, 0x4, 0xfd58, 0xa000, 0x8008, 0x0, 0x0, 0x58000000, 0xffff}}}}, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x104}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 8m8.406215462s ago: executing program 0 (id=27): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 8m8.404224062s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) wait4(r0, &(0x7f00000000c0), 0x1000000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) read(r4, 0x0, 0x0) 8m7.029559205s ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 8m4.390943757s ago: executing program 3 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) syz_open_procfs$userns(0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffea0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x401, 0x6, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81f1aa}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x404e885}, 0x4050) 8m2.253328758s ago: executing program 0 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {0x0}, 0x0, 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)=""/64, &(0x7f0000000080)=0x40) 8m1.055904703s ago: executing program 0 (id=35): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000880)={0x2ee, 0x7d, 0x1, {{0x500, 0x1ad, 0x0, 0x15000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{cvfox%\x02\x00\x00\x00\x00\x001\xff\xad\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\"\x00}\xfag>\xff\xeb\t\xb51\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00/\xa9Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x01\x00\x00\x00', 0x12, '\xcf\xb6\x00'/18, 0x115, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xffkz\xcf\x16\xb4{R\xcb;\"\xb3\xcdX@\x00~7\xf2\x0f\xdf6\xe1?x\xda\xae`H\x01\xebh\xb1[\xe7\xf6\xf52\xbd\xf4G`\xa9\xd3\xcd\x9e\xdb\x8c\xee\x86z\xe3\x8a\x92i\x02\xe2\x93n\xc9EL\xe5\xc5\a\xb5\x86\f@I!m\x1f?\xb7A\xaf\x1e.\x1b\x00\xe9F\xb9E\xf9x\xec\xa3\x06\x00\xf8\xd5kn\xef:\x9f\xc7\xc3\xd0\x10\'%\n\xdd\xe8\xa2\xe3]\xea\x04\x01\xbe*Y\xfe\x98?\v\xf3N\xab\xf9*M}y\xfe\x81|\x01\x0fU\x7f\xc7;P\xcdD\xac\x021\x8a\x8d \x0fI\xe1\x8d;\x88\x86\xb8\xa6\xf5T\xfc)@#p\xc0\xfc[\xbe\xeb\xb0\xde8R\x80\x8e\x12\xdc\xa3\x1c\xee\x9d\xb2\xf3#\xed\x82o\xe4\xfa-\xf3\xb9\xce\xaa'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2ee) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) 7m56.68898968s ago: executing program 0 (id=38): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r5, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 7m45.295598908s ago: executing program 32 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) syz_open_procfs$userns(0x0, &(0x7f0000000000)) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffea0, &(0x7f00000003c0)={&(0x7f0000000000)=@newlink={0x64, 0x10, 0x401, 0x6, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81f1aa}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x404e885}, 0x4050) 7m41.246889808s ago: executing program 33 (id=38): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r5, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) 2m3.69559563s ago: executing program 5 (id=1044): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m1.0996352s ago: executing program 5 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="3c5c2d3ecd45036a2762bb626c65640a", 0x10) 2m0.530919847s ago: executing program 5 (id=1050): socket$kcm(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000805) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.187134551s ago: executing program 5 (id=1051): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x98d846, 0x0) 1m59.866721176s ago: executing program 5 (id=1054): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000010, 0x42003) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) 1m58.379369038s ago: executing program 5 (id=1067): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xf, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m57.136092227s ago: executing program 34 (id=1067): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000002f000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000144000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffee3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xf, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.79346486s ago: executing program 1 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) pselect6(0x7c, &(0x7f0000000180)={0xc, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)=@overlay={0x5, 0x1, 0x4, 0x8, 0x4eb4, {}, {0x5, 0x8, 0xa, 0x5, 0x3, 0x19, "fcf13de1"}, 0x51, 0x3, {}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) modify_ldt$write2(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x9e, &(0x7f00000030c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0x7c, 0x0, @wg=@data={0x4, 0x916c, 0x7, "d7df2d0003e5b212b9e7f4a85faec13adba81fa994f2748b0777af8b3b3e63df30321d3bf0eaadb14b71e2ef9948e3886d14ba4a8c082e0268e8b57f19bd48efa561d4705c6a62e095cba32db55768f7a0968577546a7c592754dc0ca64f08683ccca8df"}}}}}}, 0x0) 28.496623679s ago: executing program 4 (id=1202): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)={0x8b, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4"}) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f00000001c0)='1\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='secret\x00', &(0x7f0000000200)='AQB1234567890123456789012345678901234567890=\x00', 0x0) close(0x3) 24.097574354s ago: executing program 1 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/urandom\x00', 0x48682, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) close(r3) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e"], 0x16) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xc00) 24.037675164s ago: executing program 4 (id=1206): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 21.775627582s ago: executing program 4 (id=1209): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 21.525359084s ago: executing program 6 (id=1210): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 19.688447819s ago: executing program 6 (id=1211): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b", 0x2f}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4", 0x61}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.511046963s ago: executing program 1 (id=1212): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 15.831298397s ago: executing program 1 (id=1213): r0 = socket$inet6(0xa, 0x3, 0x7) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$nbd(r4, &(0x7f0000000400)=ANY=[], 0x34) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 13.987395195s ago: executing program 4 (id=1214): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101", @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911", 0x2f, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={r3, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.915495552s ago: executing program 2 (id=1215): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c003022217bc875e09c00000200000000000000000000000000127dfeadd6ef9b46d2899232bf5bcdcb1e"], 0x0, 0x26}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='*(^\x00', &(0x7f0000000100)='wg2\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x110, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file2\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) brk(0x200000ffc000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r2 = memfd_create(0x0, 0x2) lseek(r2, 0x0, 0x1) sendmmsg$sock(r1, &(0x7f00000033c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="086dbf855945a567d2270fdf8b98d5daeb23b19db77031a95f13d4a0f7f2c0932b893580611103dafacee2e0395e7a81b7945c8e0f30216b8e27d671bd171a1eef1004486c1222d4d5f285071dfdfd7f9b32d962e212834e09e48aaed2ad1f087c", 0x61}, {&(0x7f0000000480)="f04f21235d3b19996c419ec6c81dadd3afbf54e2e8090eaae8d3ba36ea5f2f8be786943260e447b141dc5a96d8c87dbd1e338da97cdfa2fc38ed2bb6393a12b98e", 0x41}, {&(0x7f0000000500)="92488219a99116efb800f8ecefbb3b937c22296aa494d3bd2d876ded2b396697e940ca91e558feaa42af68fd2a3d3caef5a0a811912f74e7f8891001d42c2a0c06043e2369f82c867d507ebe16c13853ccc3d5a73f38", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="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", 0x1000}, {0x0}, {&(0x7f00000016c0)="1afa226a27806839517c6a877a280eab07f1cf494d5b8a2a3d690c554c33062110c77fe2f0322d1171bc5033c7e4d3cd9094c108ba55602e2b7815612c5dacc35ea9c9a834adc000367f124bd1c53fe354b96b430e35e4450952fb001e29cce371a0c29a127911ad873d368a3b2708695b699abffc2867a9e66172bd25ebcffbe04631e0847f7765065a9602baa664", 0x8f}, {&(0x7f0000001780)="f2905f2fc422f6b642b3730adb949add50c87edf600ebabeb3908e03d25541e48a675fa9513b691d488aa1a3d7365237e7d2c5c31ab51ba1972e38fdc063ec6653dd7099c9533f4999550f41e876efc30217b8582949dabf917a1824c63376f1cf19672721909d24f165f2bf06227fcc29964278d0699b3e5d12de62873d1aaf5d678c46960a6514981bad6d196220ceeefced11782c013c0c3aa40d4362e8af82cf8eb68ae9ba86c8cd42b1265a51f032eb0e7c23e8e69c41815041e233d260cd7d9706d1db15da0883459bac1e1e179289db6ae1fe3bf9c60270b33771b144284fca", 0xe3}, {&(0x7f0000001880)="b6c25ce894fe9cc9b8bc6331849feb076816206b3872f81575cd5a3f0170b21bf257e61ac3adc8942c56217710e2a505af6204c1a05aada7a18b45724d85f44018e6b6f1ef9b6e408f3ee183f659d7fc91b1", 0x52}, {&(0x7f0000001900)="ced5673161060c40e833b939e75b9538b36b333fc7c8418dfcb5911dbe53f21f4f193e22d05362020101b44e4ef2334f9595c1273fede1e84367fc41f208075480d5222a902bb3b335325c308f0e219b713fb3f219fe2ae70805e51447f6207ffdb4ab9dc7320897f0c638c75c1ccf3a8179614836a2306e40781ff0a4", 0x7d}], 0x7, &(0x7f0000003500)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}, {{&(0x7f0000001a80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x4, 0x1, 0x1, 0x1}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001b00)="2c5e7ac51d87e4ce16807d774dc8e53656be3e768eedc170e99a04a2b7df03911c4d989a30adf428af57aa6223ea6d3d1f47642657ec5e327c7d4f71f118f805caa92afddeab5d02bd5e046ff6cb4dc9b5ad63428a8bb74e3a14d0ea163c9dea161732572771521eac476071c7fdfae4b31b7399d241620fbb7202df803721ead6a6b1a64d8b3a7ed0198a7ca9aa2cb7275a1162f076cdeb4dfec7be461e5cd52b1a45f76ec3b05c452eae9d05626774a46f9fdfeb61c13aa0f759d734f400b5ef53174f0a578fd11544e1", 0xcb}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="8eb103d73c5457fd133ea5017fdbc16b568818847077153234061006e08f843e2909431ad74b3f6bca03e78c12d23aeae7a474c712dc6acf3663941a86222921b79eaba99f40481f5272b4ebe5bc3b392a687ddd05010ab72f540bbe8db218ad5171f6daa74fd2bc90ccad6e21cf36fdd627a4e5c873c612e77b37f99913b016093d8f60b09ecc2ab53954f1ee523285b4afc41fc825b8d8b6b5db675f4924641b304a3d9875dfd79bb76b9bacc9b052acee9c", 0xb3}, {&(0x7f0000002cc0)="139b0324b3428daedd56584ea5c0b2fe1fca0c64a6085873dc8b271b32b1052d285e8fc9d52cd1ed0a796e9d188b541e9d13f9bc532a41c1bda1b509fadded7a4990733d983cf116f4eee353a5e2ef7c377b0025ec3ab00ae43a50059c5045b0111d87f319c60b536ac78831b3b7d48ea4d69f", 0x73}, {&(0x7f0000002d40)="373c28a6f4c3d7949769cc289a14e2251fe6a97a94952368d3f220e423a7b4145419a19384538b9b225b5f", 0x2b}, {&(0x7f0000002d80)="06898834dcfb133ef7190b1b4f77533b3165660f3112bd69da0f1358a34bfa198e609dac44a2266c9f7e584922f4c3c38a75311726e0a2291255d92bf34221ad14db84ad1dbd7907b7ff9ab26fcc9cdf71ac62358d744533e28575fea31b73", 0x5f}, {&(0x7f0000002e40)="cd156ca5bf43555ef75764d227491c3113c7bbaad2ae0457f7812512b3e09a1128c6032bbc774a82a51e4121f7df8eee7e38c5e620c207cf5c5e6e617e625ee09b7b47aea86241c05c66816579748493d5e82220cef176f630100047579ee283bb13af1a2ab0b8aaca5c868ea56eb47d745dd6ef", 0x74}, {&(0x7f0000002ec0)="77f4e0dc4ccef020666a2b3572a9e1a8e315079b93e8503024383740649575f0d121e31e2a3b486bcc", 0x29}], 0x8, &(0x7f0000002fc0)}}, {{&(0x7f0000003040)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)}], 0x1}}, {{&(0x7f0000003200)=@in6={0xa, 0x4e22, 0x0, @remote, 0x6}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003280)="7426135f242a395653a0d884fe441f078cdd225312ac6cd246d058da", 0x1c}], 0x1, &(0x7f0000003300)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9c}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x74f}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xe9d}}, @timestamping={{0x14, 0x1, 0x25, 0xe7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}], 0xc0}}], 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r3, 0x40187013, &(0x7f0000000040)) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x600) write$cgroup_subtree(r1, &(0x7f0000003580)=ANY=[@ANYBLOB="2b6e6574202d70696473202d694b4c699de012b26f202d646576696365732010f1d8501cbdda530c040d908ea048c04b21e37892b54c7681fa9bb1dc59b79337abb655fd2b09fd048f8362dad46562abf58664bd50bb45b19bae22cf9ace8f8abda651fdbe18cca60cb6cf78383d9009787d39be525adf660d44bce0c6f92ed8507f7a6d332853410c105966a2a7d72508c329a66ae93bdda334ae0202d96ad97e357cb42891ed81f666"], 0x18) 11.676214963s ago: executing program 2 (id=1216): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1098, &(0x7f0000000480)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000)) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') socket$nl_route(0x10, 0x3, 0x0) 10.706023177s ago: executing program 2 (id=1217): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r1, 0x0, 0x0, 0x100004) r2 = socket$packet(0x11, 0x3, 0x300) r3 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000380)=""/45) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f00000002c0)={0x0, r0, r1, 0x3, 0x3, '\x00', {0x5, 0x7, 0x0, 0x78, 0x6, 0x0, 0x2, 0x3, {0xff, 0x5}, {0xeb, 0x6}, {0xe, 0x7}, 0x3, 0x7, 0x0, 0x64ca6757, 0x5, 0x1, 0x1, 0xc, 0x4, 0xdcf, '\x00', 0x400, 0x6, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r5, &(0x7f0000001200)="05010906a101", 0x6) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000040)={0x6, [[0x9ef8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {}, {0xffffffff}, {0x0, 0x1, 0x0, 0x1}, {0x3, 0xfffffffe}, {0x1}, {}, {0x0, 0x4}, {}, {0x2}, {0x0, 0x1}, {0xfffffff8}], '\x00', 0x1, 0x0, 0x0, 0xf8}) 8.864240478s ago: executing program 2 (id=1218): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=\fy', @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0]) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={r3, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4041) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.8243438s ago: executing program 6 (id=1219): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6.974269494s ago: executing program 1 (id=1220): syz_open_procfs(0x0, 0x0) r0 = socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6.865334849s ago: executing program 6 (id=1221): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x4}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x44000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000370200010b000000000000000400000000000000", @ANYRES32, @ANYBLOB="12002f646576b8ac6f6f702d636f6e74726f6c00"], 0x30) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xfffffffffffffffe) 5.119468682s ago: executing program 1 (id=1222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) madvise(0xffffffffffffffff, 0x0, 0x18) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000080)={0x8, 0x1, 0xfff, 0x86, 0x7, 0x0, 0x91, "e758cae9ffed00000000b24000", "39e80000000000000000e303005e000000002000"}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000440)={{0x7, 0x3, 0x400, 0x4}, 0x5, 0x1, 0xf6, r4, 0x3, 0x7a0, 'syz0\x00', &(0x7f0000000340)=['-\\(]\x00', 'gtp\x00', '#! '], 0xc}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r5 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r7, &(0x7f0000001480)='-', 0x1) splice(r6, 0x0, r0, 0x0, 0x100000000, 0x1) write$binfmt_script(r5, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x410) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000efffffff00000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000409000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) shmat(0x0, 0x0, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000009000000040000000200000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d0f2e704d95b5700"/28], 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, 0x41, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) prctl$PR_GET_NAME(0x10, &(0x7f0000000480)=""/147) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r10, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r9, 0x1}, 0x20) 4.776463872s ago: executing program 2 (id=1223): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x18, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x2, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r4}}], 0x1, 0x0, 0x0) 4.418922616s ago: executing program 4 (id=1224): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x10, &(0x7f0000000080)) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) eventfd2(0x7, 0x800) socket(0x2, 0x80805, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd94, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.086944534s ago: executing program 2 (id=1225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0', 0xa) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0xffffffffffffffff, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x8) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x544, r6) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r0, 0x7}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 3.912113794s ago: executing program 4 (id=1226): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f06ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aadb6ed6155fad3c98896658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1", 0xa2}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c47", 0xdb}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.072321131s ago: executing program 6 (id=1227): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000100081046881f782db44b90401000000e80656a1180015000600141f0300001200a800160029fca4000100000000", 0x32}], 0x1}, 0x41) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000d10ffc)=0xfffffff6, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) timer_getoverrun(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) socket$kcm(0x10, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESHEX=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4004850}, 0x40040c5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0), 0x0) 0s ago: executing program 6 (id=1228): socket$kcm(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000805) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.082319][ T5695] usb 2-1: Product: syz [ 270.082334][ T5695] usb 2-1: Manufacturer: syz [ 270.082347][ T5695] usb 2-1: SerialNumber: syz [ 270.141483][ T6348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 270.149553][ T6348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.154174][ T5695] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 270.154802][ T5695] keyspan 2-1:1.0: unsupported endpoint type 0 [ 270.343711][ T5695] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 270.417806][ T6348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.423320][ T5695] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 270.554833][ T5695] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 270.609280][ T5695] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 270.756901][ T5695] usb 2-1: USB disconnect, device number 7 [ 271.014335][ T5695] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 271.120843][ T5695] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 271.237995][ T5695] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 271.384055][ T5695] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 271.452392][ T5695] keyspan 2-1:1.0: device disconnected [ 271.569785][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.743002][ T5242] 8021q: adding VLAN 0 to HW filter on device eth8 [ 271.794440][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.892185][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.912397][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.016802][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.020734][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.022199][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.023272][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.024022][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.076746][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.076883][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.187088][ T5603] Bluetooth: hci5: command tx timeout [ 274.478581][ T6872] : renamed from bond_slave_0 (while UP) [ 274.672452][ T6884] warning: `syz.1.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.037743][ T5590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.114427][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.122361][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.129673][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.134591][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.268187][ T5590] Bluetooth: hci5: command tx timeout [ 277.291854][ T6929] : renamed from bond_slave_0 (while UP) [ 278.267484][ T5590] Bluetooth: hci1: command tx timeout [ 278.338057][ T5590] Bluetooth: hci5: command tx timeout [ 278.597133][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.2.263'. [ 280.337213][ T5590] Bluetooth: hci1: command tx timeout [ 280.415582][ T5590] Bluetooth: hci5: command tx timeout [ 280.541728][ T6844] lo speed is unknown, defaulting to 1000 [ 281.411725][ T6904] lo speed is unknown, defaulting to 1000 [ 282.415533][ T5590] Bluetooth: hci1: command tx timeout [ 282.595721][ T43] bridge_slave_1: left allmulticast mode [ 282.595758][ T43] bridge_slave_1: left promiscuous mode [ 282.601723][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.716667][ T43] bridge_slave_0: left allmulticast mode [ 282.716692][ T43] bridge_slave_0: left promiscuous mode [ 282.716913][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.206241][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.286168][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.348357][ T43] bond0 (unregistering): Released all slaves [ 283.365858][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.365943][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.366127][ T6844] bridge_slave_0: entered allmulticast mode [ 283.368002][ T6844] bridge_slave_0: entered promiscuous mode [ 283.406424][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.406564][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.406728][ T6844] bridge_slave_1: entered allmulticast mode [ 283.409364][ T6844] bridge_slave_1: entered promiscuous mode [ 283.508346][ T6904] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.508448][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.508559][ T6904] bridge_slave_0: entered allmulticast mode [ 283.510282][ T6904] bridge_slave_0: entered promiscuous mode [ 283.563695][ T6904] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.563790][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.563914][ T6904] bridge_slave_1: entered allmulticast mode [ 283.567082][ T6904] bridge_slave_1: entered promiscuous mode [ 283.602321][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.637833][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.690806][ T6904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.694615][ T6904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.761563][ T6844] team0: Port device team_slave_0 added [ 283.764979][ T6904] team0: Port device team_slave_0 added [ 283.773552][ T6844] team0: Port device team_slave_1 added [ 283.798233][ T6904] team0: Port device team_slave_1 added [ 283.915692][ T43] hsr_slave_0: left promiscuous mode [ 283.936701][ T43] hsr_slave_1: left promiscuous mode [ 283.937447][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.976758][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.386900][ T43] team0 (unregistering): Port device team_slave_1 removed [ 284.436112][ T43] team0 (unregistering): Port device team_slave_0 removed [ 284.495472][ T5590] Bluetooth: hci1: command tx timeout [ 284.832555][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.832572][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.832602][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.835018][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.835030][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.835049][ T6904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.927584][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.927600][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.927626][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.928941][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.928955][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.928983][ T6904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.246734][ T6844] hsr_slave_0: entered promiscuous mode [ 285.248050][ T6844] hsr_slave_1: entered promiscuous mode [ 285.249042][ T6844] debugfs: 'hsr0' already exists in 'hsr' [ 285.249065][ T6844] Cannot create hsr debugfs directory [ 285.263540][ T6904] hsr_slave_0: entered promiscuous mode [ 285.268811][ T6904] hsr_slave_1: entered promiscuous mode [ 285.272740][ T6904] debugfs: 'hsr0' already exists in 'hsr' [ 285.272804][ T6904] Cannot create hsr debugfs directory [ 285.890500][ T5242] 8021q: adding VLAN 0 to HW filter on device eth9 [ 286.799444][ T5242] 8021q: adding VLAN 0 to HW filter on device eth10 [ 287.537792][ T5242] 8021q: adding VLAN 0 to HW filter on device eth11 [ 287.947977][ T43] bridge_slave_1: left allmulticast mode [ 287.948011][ T43] bridge_slave_1: left promiscuous mode [ 287.948276][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.048572][ T43] bridge_slave_0: left allmulticast mode [ 288.048610][ T43] bridge_slave_0: left promiscuous mode [ 288.052717][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.836184][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.917543][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.957722][ T43] bond0 (unregistering): Released all slaves [ 288.983880][ T5242] 8021q: adding VLAN 0 to HW filter on device eth12 [ 289.456654][ T43] hsr_slave_0: left promiscuous mode [ 289.505607][ T43] hsr_slave_1: left promiscuous mode [ 289.506708][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.551211][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.116874][ T43] team0 (unregistering): Port device team_slave_1 removed [ 290.166084][ T43] team0 (unregistering): Port device team_slave_0 removed [ 291.938470][ T6904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.000875][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.015219][ T6904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.070236][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.085690][ T6904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 292.147867][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.215042][ T6904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 292.240641][ T6904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.483836][ T6844] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.502695][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.513899][ T6844] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.539935][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.555603][ T6844] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.672555][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.691173][ T6844] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.722032][ T6844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.889078][ T6904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.021155][ T6904] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.045701][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.045921][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.120902][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.121039][ T5885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.213006][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.304402][ T6844] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.357688][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.357893][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.391121][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.391292][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.278732][ T6904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.647444][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.859828][ T6904] veth0_vlan: entered promiscuous mode [ 294.891951][ T6904] veth1_vlan: entered promiscuous mode [ 295.046792][ T6904] veth0_macvtap: entered promiscuous mode [ 295.068991][ T6904] veth1_macvtap: entered promiscuous mode [ 295.139184][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.190679][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.648251][ T56] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.892258][ T5885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.892280][ T5885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.963280][ T6844] veth0_vlan: entered promiscuous mode [ 296.013602][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.013621][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.041458][ T6844] veth1_vlan: entered promiscuous mode [ 296.216985][ T6844] veth0_macvtap: entered promiscuous mode [ 296.260180][ T6844] veth1_macvtap: entered promiscuous mode [ 296.395609][ T56] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.416401][ T5885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.416442][ T5885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.577719][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 296.698524][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.741931][ T31] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 296.755141][ T31] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 296.755168][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.755188][ T31] usb 5-1: config 0 has no interface number 0 [ 296.755234][ T31] usb 5-1: config 0 interface 106 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 296.755278][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.540787][ T31] usb 5-1: config 0 descriptor?? [ 297.614604][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.645456][ T31] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 297.781369][ T43] usb 5-1: Failed to submit usb control message: -71 [ 297.781409][ T43] usb 5-1: unable to send the bmi data to the device: -71 [ 297.781429][ T43] usb 5-1: unable to get target info from device [ 297.781470][ T43] usb 5-1: could not get target info (-71) [ 297.781498][ T43] usb 5-1: could not probe fw (-71) [ 298.037687][ T5702] usb 5-1: USB disconnect, device number 8 [ 298.366117][ T7246] : renamed from bond_slave_0 (while UP) [ 299.438352][ T200] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 299.596738][ T200] usb 2-1: Using ep0 maxpacket: 16 [ 299.597559][ T200] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 299.650680][ T1638] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 299.686125][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.686151][ T200] usb 2-1: Product: syz [ 299.686165][ T200] usb 2-1: Manufacturer: syz [ 299.686178][ T200] usb 2-1: SerialNumber: syz [ 299.758341][ T200] usb 2-1: config 0 descriptor?? [ 299.796781][ T200] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 299.805490][ T1638] usb 3-1: Using ep0 maxpacket: 8 [ 299.806343][ T1638] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 299.807393][ T1638] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 299.807414][ T1638] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 299.807430][ T1638] usb 3-1: config 0 has no interface number 0 [ 299.807465][ T1638] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.807489][ T1638] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 299.807513][ T1638] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.860345][ T1638] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 299.860372][ T1638] usb 3-1: Product: syz [ 299.860387][ T1638] usb 3-1: Manufacturer: syz [ 299.919630][ T1638] usb 3-1: config 0 descriptor?? [ 299.920670][ T7258] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 300.062999][ T1276] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.066288][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.168300][ T200] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 300.168458][ T200] visor 2-1:0.0: probe with driver visor failed with error -71 [ 300.256658][ T7265] comedi comedi0: 8255: I/O base address not correctly aligned [ 300.282386][ T1638] usb 3-1: USB disconnect, device number 5 [ 300.283629][ T7250] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.307565][ T7250] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.489832][ T200] usb 2-1: USB disconnect, device number 8 [ 300.830921][ T7279] IPv6: NLM_F_REPLACE set, but no existing node found! [ 300.942470][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.942492][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.103061][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.103083][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.115480][ T5884] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 301.319617][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 301.322665][ T5884] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 301.323876][ T5884] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 301.323902][ T5884] usb 7-1: config 0 has no interface number 0 [ 301.323954][ T5884] usb 7-1: config 0 interface 12 has no altsetting 0 [ 301.362100][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.362128][ T5884] usb 7-1: Product: syz [ 301.362143][ T5884] usb 7-1: Manufacturer: syz [ 301.362158][ T5884] usb 7-1: SerialNumber: syz [ 301.449217][ T5884] usb 7-1: config 0 descriptor?? [ 301.688147][ T5884] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 301.688208][ T5884] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 301.688226][ T5884] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 301.688328][ T5884] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 301.743700][ T5884] usb 7-1: USB disconnect, device number 2 [ 305.492137][ T7351] : renamed from bond_slave_0 (while UP) [ 306.517508][ T5721] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 308.735598][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 308.907294][ T5884] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 308.914333][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 308.914356][ T5884] usb 6-1: Product: syz [ 308.914372][ T5884] usb 6-1: SerialNumber: syz [ 308.961029][ T5884] usb 6-1: config 0 descriptor?? [ 311.551148][ T5884] usb 6-1: USB disconnect, device number 2 [ 314.878696][ T5721] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 317.219428][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219499][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.221137][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.221192][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 317.222886][ T5721] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.222910][ T5721] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.222973][ T5721] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 317.249455][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.249481][ T5721] usb 3-1: Product: syz [ 317.249497][ T5721] usb 3-1: Manufacturer: syz [ 317.249511][ T5721] usb 3-1: SerialNumber: syz [ 317.382472][ T7431] ip6gre1: entered allmulticast mode [ 318.228384][ T5721] usb 3-1: USB disconnect, device number 6 [ 318.316456][ T5594] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 318.466426][ T5594] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 318.469572][ T5594] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 318.469600][ T5594] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.469621][ T5594] usb 7-1: config 0 has no interface number 0 [ 318.474019][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.474037][ T5594] usb 7-1: Product: syz [ 318.474047][ T5594] usb 7-1: Manufacturer: syz [ 318.474057][ T5594] usb 7-1: SerialNumber: syz [ 318.599068][ T5594] usb 7-1: config 0 descriptor?? [ 318.631326][ T5594] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 318.631727][ T5594] dvb-usb: bulk message failed: -22 (3/0) [ 318.695068][ T5594] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 318.706658][ T5594] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 318.706733][ T5594] usb 7-1: media controller created [ 318.709825][ T5594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.799442][ T5594] dvb-usb: bulk message failed: -22 (6/0) [ 318.799569][ T5594] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 318.872746][ T5594] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 319.045079][ T7283] udevd[7283]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.058178][ T5594] dvb-usb: schedule remote query interval to 150 msecs. [ 319.058241][ T5594] dvb-usb: bulk message failed: -22 (3/0) [ 319.097223][ T5594] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 319.106564][ T5594] usb 7-1: USB disconnect, device number 3 [ 320.450695][ T7455] block nbd2: NBD_DISCONNECT [ 320.739254][ T5594] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 320.844842][ T37] audit: type=1326 audit(1786358188.747:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.872303][ T37] audit: type=1326 audit(1786358188.747:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.907259][ T37] audit: type=1326 audit(1786358188.777:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.909337][ T37] audit: type=1326 audit(1786358188.817:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.910043][ T37] audit: type=1326 audit(1786358188.817:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.910457][ T37] audit: type=1326 audit(1786358188.817:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.911271][ T37] audit: type=1326 audit(1786358188.817:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.911323][ T37] audit: type=1326 audit(1786358188.817:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 320.913311][ T37] audit: type=1326 audit(1786358188.817:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7461 comm="syz.2.334" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbfe947e0d9 code=0x7ffc0000 [ 322.705741][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.6.342'. [ 326.317674][ T7511] netlink: 'syz.5.355': attribute type 4 has an invalid length. [ 326.317697][ T7511] netlink: 152 bytes leftover after parsing attributes in process `syz.5.355'. [ 326.626571][ T7511] .`: renamed from bond0 (while UP) [ 331.497107][ T7548] netlink: 48 bytes leftover after parsing attributes in process `syz.5.367'. [ 336.055592][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 336.219092][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 336.221958][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 336.240542][ T31] usb 3-1: config 0 interface 0 altsetting 31 endpoint 0x81 has an invalid bInterval 232, changing to 11 [ 336.240571][ T31] usb 3-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.240595][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.240623][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.274950][ T31] usb 3-1: config 0 descriptor?? [ 336.349356][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.6.390'. [ 336.762111][ T31] hid (null): global environment stack underflow [ 336.762132][ T31] hid (null): unknown global tag 0xe [ 337.087179][ T31] kye 0003:0458:5005.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 337.089614][ T31] kye 0003:0458:5005.0001: unknown main item tag 0x2 [ 337.089648][ T31] kye 0003:0458:5005.0001: global environment stack underflow [ 337.089670][ T31] kye 0003:0458:5005.0001: item 0 4 1 11 parsing failed [ 337.147366][ T31] kye 0003:0458:5005.0001: parse failed [ 337.147465][ T31] kye 0003:0458:5005.0001: probe with driver kye failed with error -22 [ 338.713760][ T31] usb 3-1: USB disconnect, device number 7 [ 339.183760][ T7626] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.398'. [ 339.975490][ T5721] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 340.135540][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 340.136528][ T5721] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 340.197948][ T5721] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 340.204837][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.204857][ T5721] usb 2-1: Product: syz [ 340.204868][ T5721] usb 2-1: Manufacturer: syz [ 340.204878][ T5721] usb 2-1: SerialNumber: syz [ 340.267875][ T5721] r8152-cfgselector 2-1: Unknown version 0x0000 [ 340.267895][ T5721] r8152-cfgselector 2-1: config 0 descriptor?? [ 340.780386][ T1638] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 340.980989][ T31] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 340.991021][ T7656] netlink: 152 bytes leftover after parsing attributes in process `syz.6.407'. [ 341.125558][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 341.127228][ T31] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 341.163423][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.163451][ T31] usb 5-1: Product: syz [ 341.163467][ T31] usb 5-1: Manufacturer: syz [ 341.163482][ T31] usb 5-1: SerialNumber: syz [ 341.222657][ T31] usb 5-1: config 0 descriptor?? [ 341.252775][ T31] gspca_main: se401-2.14.0 probing 047d:5003 [ 341.405707][ T1638] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 342.590457][ T31] gspca_se401: Wrong descriptor type [ 342.668539][ T1638] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 342.670472][ T1638] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 342.670499][ T1638] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 342.670523][ T1638] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 342.679667][ T1638] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.679691][ T1638] usb 7-1: Product: syz [ 342.679705][ T1638] usb 7-1: Manufacturer: syz [ 342.679718][ T1638] usb 7-1: SerialNumber: syz [ 342.784961][ T1638] usb 7-1: config 0 descriptor?? [ 342.787519][ T7661] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 342.787751][ T7661] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 342.807661][ T5884] usb 5-1: USB disconnect, device number 10 [ 342.812814][ T1638] usb 7-1: ucan: probing device on interface #0 [ 342.885482][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 343.035501][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 343.036933][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 343.062614][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.062642][ T31] usb 3-1: Product: syz [ 343.062720][ T31] usb 3-1: Manufacturer: syz [ 343.062737][ T31] usb 3-1: SerialNumber: syz [ 343.119106][ T31] usb 3-1: config 0 descriptor?? [ 343.135632][ T31] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 343.195722][ T1638] usb 7-1: ucan: device reported invalid device info [ 343.195744][ T1638] usb 7-1: ucan: probe failed; try to update the device firmware [ 343.399261][ T5721] usb 7-1: USB disconnect, device number 4 [ 344.943483][ T31] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 345.154538][ T1638] usb 3-1: USB disconnect, device number 8 [ 345.193201][ T1638] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 345.193953][ T1638] visor 3-1:0.0: device disconnected [ 345.556027][ T7691] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in; [ 345.556027][ T7691] program syz.6.423 not setting count and/or reply_len properly [ 348.304132][ T7709] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 348.365486][ T5721] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 348.536247][ T5721] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 348.537782][ T5721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.537806][ T5721] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 348.537856][ T5721] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.557008][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.557109][ T5721] usb 6-1: Product: syz [ 348.557159][ T5721] usb 6-1: Manufacturer: syz [ 348.557215][ T5721] usb 6-1: SerialNumber: syz [ 348.644869][ T5721] usb 6-1: config 0 descriptor?? [ 348.901080][ T5721] uvcvideo 6-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 348.901209][ T5721] uvcvideo 6-1:0.0: No valid video chain found. [ 349.024286][ T7724] netlink: 'syz.1.437': attribute type 1 has an invalid length. [ 349.024309][ T7724] netlink: 248 bytes leftover after parsing attributes in process `syz.1.437'. [ 349.122613][ T5721] usb 6-1: USB disconnect, device number 3 [ 349.447177][ T31] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 349.511867][ T7728] 0x000000000000-0x000000020000 : "" [ 349.565596][ T31] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.704589][ T7728] ftl_cs: FTL header not found. [ 352.301964][ T7731] udevd[7731]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 354.505518][ T1638] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 354.656562][ T1638] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 354.658353][ T1638] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 354.658378][ T1638] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 354.658397][ T1638] usb 6-1: config 2 has no interface number 0 [ 354.658454][ T1638] usb 6-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.658481][ T1638] usb 6-1: config 2 interface 31 has no altsetting 0 [ 354.662671][ T1638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.662694][ T1638] usb 6-1: Product: syz [ 354.662709][ T1638] usb 6-1: Manufacturer: syz [ 354.662723][ T1638] usb 6-1: SerialNumber: syz [ 354.755665][ T1638] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 355.033259][ T5716] usb 6-1: USB disconnect, device number 4 [ 355.149372][ T7756] fuse: Invalid rootmode [ 355.465454][ T1638] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 355.617483][ T1638] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 355.618960][ T1638] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 355.619009][ T1638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.711363][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.6.443'. [ 355.745755][ T1638] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 357.165508][ T5594] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 357.195115][ T1638] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 357.195137][ T1638] stv0680 3-1:4.0: Could not get descriptor 0200 [ 357.214539][ T1638] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 357.214555][ T1638] stv0680 3-1:4.0: last error: 106, command = 0x21 [ 357.240235][ T1638] usb 3-1: USB disconnect, device number 9 [ 357.253930][ T7785] netlink: 136 bytes leftover after parsing attributes in process `syz.5.459'. [ 357.341335][ T5594] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.341388][ T5594] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 357.342794][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 357.342826][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.342849][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 357.342870][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 357.342892][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 8 [ 357.374421][ T5594] usb 5-1: string descriptor 0 read error: -22 [ 357.374927][ T5594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.498414][ T5594] usb 5-1: config 0 descriptor?? [ 357.499969][ T7778] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 357.500343][ T7778] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 357.626016][ T5594] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.160735][ T5594] usb 5-1: USB disconnect, device number 11 [ 362.342905][ T7826] netlink: 100 bytes leftover after parsing attributes in process `syz.2.478'. [ 363.708929][ T5594] IPVS: starting estimator thread 0... [ 363.809980][ T7858] IPVS: using max 10 ests per chain, 24000 per kthread [ 366.245657][ T7866] program syz.6.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.564603][ T37] audit: type=1326 audit(1786358234.457:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7872 comm="syz.6.491" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62905ee0d9 code=0x0 [ 366.865516][ T36] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 367.027212][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 367.027274][ T36] usb 6-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=24.be [ 367.029639][ T36] usb 6-1: config 2 has an invalid interface number: 209 but max is 1 [ 367.029665][ T36] usb 6-1: config 2 has an invalid interface number: 68 but max is 1 [ 367.029687][ T36] usb 6-1: config 2 has no interface number 0 [ 367.029704][ T36] usb 6-1: config 2 has no interface number 1 [ 367.029765][ T36] usb 6-1: config 2 interface 209 has no altsetting 0 [ 367.029785][ T36] usb 6-1: config 2 interface 68 has no altsetting 0 [ 367.032153][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.032177][ T36] usb 6-1: Product: syz [ 367.032193][ T36] usb 6-1: Manufacturer: syz [ 367.032208][ T36] usb 6-1: SerialNumber: syz [ 367.075430][ T5594] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 367.239470][ T5594] usb 2-1: Using ep0 maxpacket: 32 [ 367.244384][ T5594] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 367.265702][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 367.312780][ T5594] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 367.312810][ T5594] usb 2-1: config 0 has no interface number 0 [ 367.318124][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.318207][ T5594] usb 2-1: Product: syz [ 367.318223][ T5594] usb 2-1: Manufacturer: syz [ 367.318238][ T5594] usb 2-1: SerialNumber: syz [ 367.401376][ T5594] usb 2-1: config 0 descriptor?? [ 367.415775][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 367.424711][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 367.458189][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.458236][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.463272][ T36] usb 6-1: USB disconnect, device number 5 [ 367.545120][ T10] usb 3-1: config 0 descriptor?? [ 367.615903][ T5594] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 367.942418][ T5594] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 368.062716][ T5594] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 368.097284][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 368.213065][ T10] hid-rmi 0003:06CB:81A7.0003: collection stack underflow [ 368.213099][ T10] hid-rmi 0003:06CB:81A7.0003: item 0 2 0 12 parsing failed [ 368.225804][ T10] hid-rmi 0003:06CB:81A7.0003: parse failed [ 368.226084][ T10] hid-rmi 0003:06CB:81A7.0003: probe with driver hid-rmi failed with error -22 [ 368.227999][ T5594] usb 2-1: USB disconnect, device number 10 [ 368.344179][ T5594] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 368.382499][ T5594] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 368.409802][ T5594] quatech2 2-1:0.51: device disconnected [ 368.452516][ T36] usb 3-1: USB disconnect, device number 10 [ 369.335431][ T5695] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 369.486302][ T5695] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 369.487781][ T5695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.487834][ T5695] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.487856][ T5695] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 369.487896][ T5695] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.487940][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.615451][ T36] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 369.827754][ T36] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 369.829484][ T36] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 369.829580][ T36] usb 7-1: config 0 interface 0 has no altsetting 0 [ 369.829617][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.901879][ T36] usb 7-1: config 0 descriptor?? [ 369.903798][ T7924] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 369.992226][ T5695] gud 6-1:1.0: No supported pixel formats found [ 369.992263][ T5695] gud 6-1:1.0: probe with driver gud failed with error -22 [ 370.077818][ T7936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 370.206035][ T5695] usb 6-1: USB disconnect, device number 6 [ 370.349261][ T36] hid (null): global environment stack underflow [ 370.351011][ T36] hid (null): usage index exceeded [ 370.374717][ T36] kye 0003:0458:5016.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 370.386615][ T36] kye 0003:0458:5016.0004: unknown main item tag 0x1 [ 370.386644][ T36] kye 0003:0458:5016.0004: collection stack underflow [ 370.386667][ T36] kye 0003:0458:5016.0004: item 0 2 0 12 parsing failed [ 370.387495][ T36] kye 0003:0458:5016.0004: parse failed [ 370.387564][ T36] kye 0003:0458:5016.0004: probe with driver kye failed with error -22 [ 370.554748][ T5594] usb 7-1: USB disconnect, device number 5 [ 370.943726][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.527'. [ 370.995479][ T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.145480][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 371.148315][ T36] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 371.150375][ T36] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 371.150393][ T36] usb 3-1: config 252 has no interface number 0 [ 371.185657][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.185675][ T36] usb 3-1: Product: syz [ 371.185685][ T36] usb 3-1: Manufacturer: syz [ 371.185694][ T36] usb 3-1: SerialNumber: syz [ 371.370448][ T36] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 371.482500][ T5594] usb 3-1: USB disconnect, device number 11 [ 371.526989][ T43] usb 3-1: Failed to submit usb control message: -71 [ 371.527020][ T43] usb 3-1: unable to send the bmi data to the device: -71 [ 371.527036][ T43] usb 3-1: unable to get target info from device [ 371.527063][ T43] usb 3-1: could not get target info (-71) [ 371.541821][ T43] usb 3-1: could not probe fw (-71) [ 372.031779][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.5.534'. [ 372.338416][ T7982] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 373.172468][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.5.540'. [ 373.454269][ T8008] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 373.454269][ T8008] program syz.2.545 not setting count and/or reply_len properly [ 374.076779][ T5594] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 374.336419][ T5594] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 374.486978][ T5594] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 374.487010][ T5594] usb 3-1: config 0 has an invalid interface number: 255 but max is 128 [ 374.487032][ T5594] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 374.487053][ T5594] usb 3-1: config 0 has no interface number 0 [ 374.487089][ T5594] usb 3-1: config 0 interface 255 has no altsetting 0 [ 374.487124][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.738270][ T5594] usb 3-1: config 0 descriptor?? [ 374.770966][ T5594] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 374.962865][ T5594] usb 3-1: USB disconnect, device number 12 [ 375.065481][ T5695] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 375.111472][ T8022] capability: warning: `syz.4.550' uses deprecated v2 capabilities in a way that may be insecure [ 375.219121][ T5695] usb 7-1: Using ep0 maxpacket: 16 [ 375.220013][ T5695] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 375.221346][ T5695] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.221373][ T5695] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.221411][ T5695] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 375.221437][ T5695] usb 7-1: config 0 interface 0 has no altsetting 0 [ 375.221470][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.300223][ T5695] usb 7-1: config 0 descriptor?? [ 375.696672][ T5716] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 375.788386][ T5695] hid (null): unknown global tag 0xd [ 375.788443][ T5695] hid (null): unknown global tag 0xd [ 375.788497][ T5695] hid (null): invalid report_size 388792778 [ 375.788523][ T5695] hid (null): report_id 46988 is invalid [ 375.847168][ T5721] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 375.847170][ T5716] usb 2-1: New USB device found, idVendor=0b48, idProduct=1071, bcdDevice= 1.00 [ 375.848678][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.848731][ T5716] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.852477][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.852501][ T5716] usb 2-1: Product: syz [ 375.852515][ T5716] usb 2-1: Manufacturer: syz [ 375.852533][ T5716] usb 2-1: SerialNumber: syz [ 375.992533][ T5695] usb 7-1: USB disconnect, device number 6 [ 376.002155][ T5721] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 376.022439][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.022465][ T5721] usb 5-1: Product: syz [ 376.022480][ T5721] usb 5-1: Manufacturer: syz [ 376.022494][ T5721] usb 5-1: SerialNumber: syz [ 376.094474][ T8032] gretap0: entered promiscuous mode [ 376.150772][ T5721] usb 5-1: config 0 descriptor?? [ 376.164251][ T8032] macsec1: entered allmulticast mode [ 376.164272][ T8032] gretap0: entered allmulticast mode [ 376.198080][ T5721] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 012 [ 376.262877][ T8032] gretap0: left allmulticast mode [ 376.275763][ T8032] gretap0: left promiscuous mode [ 376.804530][ T5721] i2c i2c-1: failure reading functionality [ 376.859181][ T5721] i2c i2c-1: connected i2c-tiny-usb device [ 376.878256][ T5721] usb 5-1: USB disconnect, device number 12 [ 376.944906][ T5590] Bluetooth: hci1: link tx timeout [ 376.945108][ T5590] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 378.462853][ T5695] usb 2-1: USB disconnect, device number 11 [ 378.702580][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.733477][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.978209][ T5590] Bluetooth: hci1: command 0x0406 tx timeout [ 382.906193][ T8083] syz.4.570 (8083) used greatest stack depth: 19392 bytes left [ 383.581886][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.575'. [ 383.995449][ T5702] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 384.147606][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 384.150417][ T5702] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 384.152447][ T5702] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 384.156403][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.156459][ T5702] usb 2-1: Product: syz [ 384.156500][ T5702] usb 2-1: Manufacturer: syz [ 384.156550][ T5702] usb 2-1: SerialNumber: syz [ 384.207013][ T5702] r8152-cfgselector 2-1: Unknown version 0x0000 [ 384.207039][ T5702] r8152-cfgselector 2-1: config 0 descriptor?? [ 384.627198][ T5702] r8152-cfgselector 2-1: Needed 1 retries to read version [ 384.627244][ T5702] r8152-cfgselector 2-1: Unknown version 0x0000 [ 384.627719][ T5702] r8152-cfgselector 2-1: No union descriptors [ 385.906769][ T5695] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 388.978180][ T5884] hid-generic 0001:046D:B012.0006: unknown main item tag 0x1 [ 388.978216][ T5884] hid-generic 0001:046D:B012.0006: unknown main item tag 0x0 [ 388.978243][ T5884] hid-generic 0001:046D:B012.0006: unknown main item tag 0x1 [ 388.978317][ T5884] hid-generic 0001:046D:B012.0006: unbalanced collection at end of report description [ 389.023971][ T5884] hid-generic 0001:046D:B012.0006: probe with driver hid-generic failed with error -22 [ 390.073137][ T8168] capability: warning: `syz.1.599' uses 32-bit capabilities (legacy support in use) [ 390.577738][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 390.736926][ T5884] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.740101][ T5884] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 390.740156][ T5884] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 390.740179][ T5884] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.740219][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.371672][ T5884] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.742021][ T5603] block nbd1: Receive control failed (result -32) [ 393.760817][ T5603] block nbd1: Receive control failed (result -32) [ 394.104298][ T5884] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 394.127848][ T5884] usb 6-1: USB disconnect, device number 7 [ 394.156261][ T8193] program syz.6.607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.655500][ T200] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 394.806388][ T200] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 394.810109][ T200] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.810135][ T200] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.811408][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 394.811434][ T200] usb 5-1: SerialNumber: syz [ 394.935426][ T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 395.018718][ T5702] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 395.093956][ T200] usb 5-1: 0:2 : does not exist [ 395.168924][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 395.171661][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 395.171707][ T5702] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 395.181947][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.182019][ T5702] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.230670][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.230697][ T5702] usb 2-1: Product: syz [ 395.230712][ T5702] usb 2-1: Manufacturer: syz [ 395.230727][ T5702] usb 2-1: SerialNumber: syz [ 395.241599][ T36] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 395.246145][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.246218][ T36] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 395.307492][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.307519][ T36] usb 6-1: Product: syz [ 395.307532][ T36] usb 6-1: Manufacturer: syz [ 395.307546][ T36] usb 6-1: SerialNumber: syz [ 395.435004][ T200] usb 5-1: USB disconnect, device number 13 [ 395.591768][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.623626][ T36] usb 6-1: Limiting number of CPorts to U8_MAX [ 395.754739][ T5702] usb 2-1: unit 4 not found! [ 395.754756][ T5702] usb 2-1: unit 0 not found! [ 396.095430][ T5590] Bluetooth: hci5: command 0x0406 tx timeout [ 396.184306][ C1] usb 6-1: invalid arpc response id received: 0 [ 396.538718][ T5702] usb 2-1: USB disconnect, device number 13 [ 396.584243][ T36] usb 6-1: failed to send ARPC request 1: -71 [ 396.589523][ T36] usb 6-1: failed to execute ARPC: -71 [ 396.589540][ T36] usb 6-1: failed to set connected state for cport 0: -71 [ 396.589768][ T36] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 396.590853][ T36] usb 6-1: failed to send ARPC request 3: -71 [ 396.591045][ T36] usb 6-1: failed to execute ARPC: -71 [ 396.591172][ T36] usb 6-1: failed to clear cport 0: -71 [ 396.591185][ T36] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 396.888433][ T36] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 397.000584][ T36] usb 6-1: USB disconnect, device number 8 [ 397.184610][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.518325][ T8241] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 398.031693][ T8250] program syz.4.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.466072][ T8257] block2mtd: device name too long [ 399.150520][ T8282] jffs2: notice: (8282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 399.169904][ T36] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 399.365423][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 399.366351][ T36] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 399.367971][ T36] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 399.367994][ T36] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 399.368015][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 399.368036][ T36] usb 5-1: config 1 has no interface number 0 [ 399.368076][ T36] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 399.368103][ T36] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 399.368142][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.631128][ T36] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 399.934175][ T36] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 400.033255][ T5594] kernel read not supported for file /video7 (pid: 5594 comm: kworker/0:4) [ 400.375805][ T5594] usb 5-1: USB disconnect, device number 14 [ 400.382923][ T5594] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 400.550800][ T8303] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.800955][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.650'. [ 400.922071][ T8316] sg_read: process 195 (syz.6.660) changed security contexts after opening file descriptor, this is not allowed. [ 401.395539][ T5716] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 401.545720][ T5716] usb 7-1: Using ep0 maxpacket: 32 [ 401.548827][ T5716] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.550442][ T5716] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.550467][ T5716] usb 7-1: config 0 has no interface number 0 [ 401.560358][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.560466][ T5716] usb 7-1: Product: syz [ 401.560509][ T5716] usb 7-1: Manufacturer: syz [ 401.560550][ T5716] usb 7-1: SerialNumber: syz [ 401.623137][ T8330] program syz.2.667 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.639229][ T5716] usb 7-1: config 0 descriptor?? [ 401.666165][ T5716] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 401.906362][ T200] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 401.991539][ T5716] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 402.057348][ T200] usb 5-1: Using ep0 maxpacket: 32 [ 402.061936][ T200] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 402.084415][ T200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.116915][ T200] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 402.182909][ T5716] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 402.344881][ T5594] usb 7-1: USB disconnect, device number 7 [ 402.347517][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 402.473584][ T5594] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 402.577272][ T5594] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.582906][ T5594] quatech2 7-1:0.51: device disconnected [ 402.997484][ T200] gspca_nw80x: reg_r err -71 [ 402.997578][ T200] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 403.068878][ T200] usb 5-1: USB disconnect, device number 15 [ 403.511102][ T8355] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.793737][ T8361] 0x000000000007-0x000000020000 : "" [ 403.806450][ T8361] ftl_cs: FTL header corrupt! [ 404.915487][ T5594] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 405.066769][ T5594] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 405.068603][ T5594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.068658][ T5594] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.068682][ T5594] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 405.068708][ T5594] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 405.068753][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.081659][ T5594] gud 3-1:1.0: Failed to get connectors (error=-71) [ 406.081692][ T5594] gud 3-1:1.0: probe with driver gud failed with error -71 [ 406.114432][ T5594] usb 3-1: USB disconnect, device number 13 [ 406.856399][ T8415] netlink: 64 bytes leftover after parsing attributes in process `syz.2.696'. [ 406.857058][ T8415] netlink: 64 bytes leftover after parsing attributes in process `syz.2.696'. [ 407.673637][ T8426] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 407.673852][ T8426] syzkaller1: linktype set to 1 [ 408.617568][ T8442] netlink: 144 bytes leftover after parsing attributes in process `syz.2.710'. [ 409.278758][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.6.712'. [ 410.575111][ T36] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 410.822403][ T8443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.709'. [ 411.209613][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 411.210637][ T36] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 411.211943][ T36] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.211967][ T36] usb 6-1: config 0 has no interface number 0 [ 411.215034][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.215061][ T36] usb 6-1: Product: syz [ 411.215077][ T36] usb 6-1: Manufacturer: syz [ 411.215093][ T36] usb 6-1: SerialNumber: syz [ 411.331187][ T36] usb 6-1: config 0 descriptor?? [ 411.358406][ T36] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 412.159557][ T36] gspca_spca1528: reg_w err -71 [ 412.177166][ T36] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 412.222164][ T36] usb 6-1: USB disconnect, device number 9 [ 412.874163][ T8494] program syz.4.726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.390133][ T8530] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 414.390133][ T8530] program syz.6.740 not setting count and/or reply_len properly [ 414.532314][ T8534] program syz.2.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.431059][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.750'. [ 416.675702][ T5594] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 416.903542][ T5594] usb 7-1: not running at top speed; connect to a high speed hub [ 416.903583][ T5594] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 416.933352][ T5594] usb 7-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 416.933647][ T5594] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.153655][ T5594] uvcvideo 7-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 417.153765][ T5594] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 417.153865][ T5594] uvcvideo 7-1:1.1: No supported video formats found. [ 417.153876][ T5594] uvcvideo 7-1:1.1: Failed to initialize the device (-22). [ 417.168111][ T5594] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -22 [ 417.292138][ T5594] usb 7-1: USB disconnect, device number 8 [ 418.398232][ T8591] program syz.1.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.073806][ T37] audit: type=1326 audit(1786358287.977:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8608 comm="syz.2.770" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfe947e0d9 code=0x0 [ 420.365500][ T1242] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 420.516361][ T1242] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 420.518054][ T1242] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 420.518078][ T1242] usb 7-1: config 0 has no interface number 0 [ 420.521118][ T1242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.521141][ T1242] usb 7-1: Product: syz [ 420.521156][ T1242] usb 7-1: Manufacturer: syz [ 420.521170][ T1242] usb 7-1: SerialNumber: syz [ 420.581228][ T1242] usb 7-1: config 0 descriptor?? [ 420.665553][ T5695] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 420.827095][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 420.829513][ T5695] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 420.831279][ T5695] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.831329][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.877033][ T5695] usb 6-1: config 0 descriptor?? [ 421.213419][ T1242] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 421.213453][ T1242] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 421.214727][ T1242] asix 7-1:0.251: probe with driver asix failed with error -71 [ 421.284670][ T1242] usb 7-1: USB disconnect, device number 9 [ 421.362006][ T5695] logitech 0003:046D:C211.0007: unknown main item tag 0x1 [ 421.362043][ T5695] logitech 0003:046D:C211.0007: unknown main item tag 0x0 [ 421.362072][ T5695] logitech 0003:046D:C211.0007: unknown main item tag 0x0 [ 421.362097][ T5695] logitech 0003:046D:C211.0007: unknown main item tag 0x0 [ 421.779764][ T8634] udevd[8634]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 421.808809][ T5695] logitech 0003:046D:C211.0007: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.5-1/input0 [ 421.808955][ T5695] logitech 0003:046D:C211.0007: no inputs found [ 422.104128][ T8647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.780'. [ 422.260423][ T5695] usb 6-1: USB disconnect, device number 10 [ 422.732188][ T5695] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 422.763259][ T8654] input: syz1 as /devices/virtual/input/input10 [ 422.905456][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 422.906202][ T5695] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 422.907642][ T5695] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.907668][ T5695] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.907694][ T5695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 422.912795][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.912820][ T5695] usb 6-1: Product: syz [ 422.912835][ T5695] usb 6-1: Manufacturer: syz [ 422.912850][ T5695] usb 6-1: SerialNumber: syz [ 423.100047][ T5695] usb 6-1: config 0 descriptor?? [ 423.533918][ T5695] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 423.680700][ T8663] loop8: detected capacity change from 0 to 7 [ 423.769701][ T8663] Dev loop8: unable to read RDB block 7 [ 423.769746][ T8663] loop8: unable to read partition table [ 423.769989][ T8663] loop8: partition table beyond EOD, truncated [ 423.770024][ T8663] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 423.822290][ T5695] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 423.889053][ T5695] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 423.987565][ T8665] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 424.152267][ T5695] usb 6-1: USB disconnect, device number 11 [ 427.123663][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz.5.793'. [ 427.594013][ T8687] netlink: 'syz.4.797': attribute type 2 has an invalid length. [ 427.594039][ T8687] netlink: 'syz.4.797': attribute type 2 has an invalid length. [ 427.814213][ T8691] Invalid argument reading file caps for ./file0 [ 430.835462][ T36] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 430.883279][ T5603] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 431.025442][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 431.027572][ T36] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 431.073262][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.073285][ T36] usb 5-1: Product: syz [ 431.073299][ T36] usb 5-1: Manufacturer: syz [ 431.073313][ T36] usb 5-1: SerialNumber: syz [ 431.103427][ T36] usb 5-1: config 0 descriptor?? [ 431.154432][ T36] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 431.739969][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.808'. [ 431.967037][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.807'. [ 432.116790][ T36] gspca_ov534_9: reg_w failed -71 [ 432.425599][ T36] gspca_ov534_9: Unknown sensor 0000 [ 432.425714][ T36] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 432.432375][ T36] usb 5-1: USB disconnect, device number 16 [ 434.415559][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.816'. [ 434.645484][ T1242] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 434.805499][ T1242] usb 2-1: Using ep0 maxpacket: 32 [ 434.806593][ T1242] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 434.808721][ T1242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.852888][ T1242] usb 2-1: config 0 descriptor?? [ 434.895583][ T200] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 435.047017][ T200] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 435.074808][ T1242] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 435.083508][ T200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.083534][ T200] usb 7-1: Product: syz [ 435.083549][ T200] usb 7-1: Manufacturer: syz [ 435.083562][ T200] usb 7-1: SerialNumber: syz [ 435.158970][ T200] usb 7-1: config 0 descriptor?? [ 435.457349][ T1242] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 435.481172][ T1242] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 435.481324][ T1242] usb 2-1: media controller created [ 435.593247][ T1242] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.633043][ T200] usb 7-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32) [ 435.744448][ T1242] az6027: usb out operation failed. (-71) [ 435.754896][ T1242] az6027: usb out operation failed. (-71) [ 435.754915][ T1242] stb0899_attach: Driver disabled by Kconfig [ 435.755073][ T1242] az6027: no front-end attached [ 435.755073][ T1242] [ 435.774983][ T1242] az6027: usb out operation failed. (-71) [ 435.775006][ T1242] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 435.821344][ T1242] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 435.843505][ T200] usb 7-1: failed to fetch extended address, random address set [ 435.843628][ T200] usb 7-1: atusb_probe: initialization failed, error = -524 [ 435.844250][ T200] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 435.873698][ T1242] dvb-usb: schedule remote query interval to 400 msecs. [ 435.873722][ T1242] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 435.897791][ T200] usb 7-1: USB disconnect, device number 10 [ 435.917960][ T1242] usb 2-1: USB disconnect, device number 14 [ 435.960596][ T7449] udevd[7449]: setting mode of /dev/bus/usb/007/010 to 020664 failed: No such file or directory [ 435.960725][ T7449] udevd[7449]: setting owner of /dev/bus/usb/007/010 to uid=0, gid=0 failed: No such file or directory [ 436.439012][ T1242] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 436.769993][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.6.819'. [ 438.165544][ T31] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 438.331890][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.831'. [ 438.364499][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 438.371504][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 438.383997][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 438.384114][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.447319][ T31] usb 2-1: config 0 descriptor?? [ 438.917452][ T31] hid (null): invalid report_count 23011 [ 438.917478][ T31] hid (null): unknown global tag 0xe [ 438.952642][ T31] kye 0003:0458:5012.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 438.953033][ T31] kye 0003:0458:5012.0008: unknown main item tag 0x2 [ 438.953053][ T31] kye 0003:0458:5012.0008: unknown main item tag 0x6 [ 438.953070][ T31] kye 0003:0458:5012.0008: invalid report_count 23011 [ 438.953081][ T31] kye 0003:0458:5012.0008: item 0 2 1 9 parsing failed [ 438.953530][ T31] kye 0003:0458:5012.0008: parse failed [ 438.953572][ T31] kye 0003:0458:5012.0008: probe with driver kye failed with error -22 [ 439.148435][ T5716] usb 2-1: USB disconnect, device number 15 [ 440.744502][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.744571][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.466655][ T8812] IPVS: Scheduler module ip_vs_sip not found [ 441.867992][ T5603] Bluetooth: hci4: unexpected event for opcode 0x0405 [ 441.965448][ T5884] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 442.116922][ T5884] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 442.125181][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 442.125201][ T5884] usb 6-1: Product: syz [ 442.125212][ T5884] usb 6-1: SerialNumber: syz [ 442.169420][ T5884] usb 6-1: config 0 descriptor?? [ 442.430295][ T5884] hso 6-1:0.0: Failed to find BULK eps [ 442.726235][ T8838] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 442.726235][ T8838] program syz.2.856 not setting count and/or reply_len properly [ 443.254308][ T5884] usb 6-1: USB disconnect, device number 12 [ 443.374651][ T8852] loop5: detected capacity change from 0 to 7 [ 443.454722][ T8852] Dev loop5: unable to read RDB block 7 [ 443.454769][ T8852] loop5: AHDI p1 p4 [ 443.454791][ T8852] loop5: partition table partially beyond EOD, truncated [ 443.519681][ T8852] loop5: p1 size 83886208 extends beyond EOD, truncated [ 443.745428][ T8861] tun0: tun_chr_ioctl cmd 1074025675 [ 443.745452][ T8861] tun0: persist enabled [ 443.745492][ T8857] tun0: tun_chr_ioctl cmd 1074025675 [ 443.745507][ T8857] tun0: persist disabled [ 443.876386][ T7449] udevd[7449]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 444.757327][ T5594] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 444.955485][ T5594] usb 2-1: Using ep0 maxpacket: 16 [ 444.957130][ T5594] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 444.959034][ T5594] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.959063][ T5594] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.959085][ T5594] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 444.959113][ T5594] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.960979][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.042551][ T5594] usb 2-1: config 0 descriptor?? [ 445.278965][ T8879] loop5: detected capacity change from 0 to 7 [ 445.321686][ T8879] Dev loop5: unable to read RDB block 7 [ 445.321730][ T8879] loop5: unable to read partition table [ 445.321942][ T8879] loop5: partition table beyond EOD, truncated [ 445.321962][ T8879] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.413304][ T8881] netlink: 36 bytes leftover after parsing attributes in process `syz.4.872'. [ 445.426212][ T31] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 445.474959][ T5594] hid (null): unknown global tag 0x5e [ 445.482354][ T5594] hid (null): unknown global tag 0xd [ 445.482402][ T5594] hid (null): global environment stack underflow [ 445.482447][ T5594] hid (null): report_id 3016947009 is invalid [ 445.482475][ T5594] hid (null): report_id 0 is invalid [ 445.577758][ T31] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 445.635106][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.693760][ T31] usb 7-1: config 0 descriptor?? [ 445.729889][ T31] cp210x 7-1:0.0: cp210x converter detected [ 445.767957][ T5695] usb 2-1: USB disconnect, device number 16 [ 445.955884][ T5603] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 445.975917][ T5603] Bluetooth: hci4: Injecting HCI hardware error event [ 445.989225][ T5590] Bluetooth: hci4: hardware error 0x00 [ 446.147849][ T31] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 446.351222][ T8894] netlink: 32 bytes leftover after parsing attributes in process `syz.5.875'. [ 446.527316][ T31] usb 7-1: cp210x converter now attached to ttyUSB0 [ 446.629378][ T31] usb 7-1: USB disconnect, device number 11 [ 446.645958][ T8898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.821730][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 447.021957][ T31] cp210x 7-1:0.0: device disconnected [ 448.175512][ T5590] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 448.391632][ T8935] netlink: 32 bytes leftover after parsing attributes in process `syz.6.891'. [ 448.523426][ T8941] loop2: detected capacity change from 0 to 7 [ 448.599392][ T8941] Dev loop2: unable to read RDB block 7 [ 448.599444][ T8941] loop2: unable to read partition table [ 448.599631][ T8941] loop2: partition table beyond EOD, truncated [ 448.599668][ T8941] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 448.825485][ T36] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 448.995498][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 448.996461][ T36] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 448.998227][ T36] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 448.998253][ T36] usb 6-1: config 0 has no interface number 0 [ 448.998284][ T36] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.998305][ T36] usb 6-1: config 0 interface 85 has no altsetting 0 [ 449.003060][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.003084][ T36] usb 6-1: Product: syz [ 449.003099][ T36] usb 6-1: Manufacturer: syz [ 449.003114][ T36] usb 6-1: SerialNumber: syz [ 449.114714][ T36] usb 6-1: config 0 descriptor?? [ 449.395480][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 449.546493][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 449.549473][ T5884] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 449.576641][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.600410][ T5884] usb 2-1: config 0 descriptor?? [ 449.614046][ T5884] gspca_main: sunplus-2.14.0 probing 041e:400b [ 449.783695][ T36] appletouch 6-1:0.85: Geyser mode initialized. [ 449.809885][ T36] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input12 [ 450.113860][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 450.232202][ T36] usb 6-1: USB disconnect, device number 13 [ 450.232309][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 450.624122][ T5884] gspca_sunplus: reg_w_riv err -71 [ 450.624192][ T5884] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 450.673295][ T5884] usb 2-1: USB disconnect, device number 17 [ 450.757892][ T36] appletouch 6-1:0.85: input: appletouch disconnected [ 450.848549][ T8966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 453.349145][ T5702] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 453.546085][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 453.550493][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.550556][ T5702] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 453.552960][ T5702] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 453.552988][ T5702] usb 5-1: config 117 has no interface number 0 [ 453.553020][ T5702] usb 5-1: config 117 interface 163 has no altsetting 0 [ 453.608287][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.608305][ T5702] usb 5-1: Product: syz [ 453.608314][ T5702] usb 5-1: Manufacturer: syz [ 453.608323][ T5702] usb 5-1: SerialNumber: syz [ 454.544614][ T9008] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 454.718941][ T5702] usb 5-1: USB disconnect, device number 17 [ 454.720018][ T5702] f81534a_ctrl 5-1:117.163: failed to enable ports: -19 [ 455.055454][ T5590] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 455.605578][ T36] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 455.668413][ T9029] netlink: 32 bytes leftover after parsing attributes in process `syz.4.928'. [ 455.766274][ T36] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 455.769112][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.812056][ T36] usb 2-1: config 0 descriptor?? [ 455.879445][ T36] cp210x 2-1:0.0: cp210x converter detected [ 456.273886][ T36] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 456.275228][ T36] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 456.326119][ T36] usb 2-1: cp210x converter now attached to ttyUSB0 [ 456.502071][ T36] usb 2-1: USB disconnect, device number 18 [ 456.529647][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 456.539189][ T36] cp210x 2-1:0.0: device disconnected [ 456.872598][ T9040] input: syz0 as /devices/virtual/input/input13 [ 457.245474][ T5594] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 457.402680][ T5594] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 457.420737][ T5594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.420771][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.457862][ T5594] usb 3-1: config 0 descriptor?? [ 457.635471][ T36] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.680576][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.683162][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.709854][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.714221][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.749906][ T5594] usbhid 3-1:0.0: can't add hid device: -71 [ 457.750036][ T5594] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 457.787345][ T5594] usb 3-1: USB disconnect, device number 14 [ 457.806383][ T36] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.808106][ T36] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.808132][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.808151][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.808224][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.808251][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.813042][ T36] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.813071][ T36] usb 2-1: Product: syz [ 457.813082][ T36] usb 2-1: Manufacturer: syz [ 457.958456][ T36] cdc_wdm 2-1:1.0: skipping garbage [ 457.958477][ T36] cdc_wdm 2-1:1.0: skipping garbage [ 458.355490][ T5594] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 458.463625][ T9056] input: syz1 as /devices/virtual/input/input14 [ 458.468919][ T36] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 458.468986][ T36] cdc_wdm 2-1:1.0: Unknown control protocol [ 458.506346][ T5594] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 458.507529][ T5594] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 458.507553][ T5594] usb 3-1: config 8 has no interface number 0 [ 458.507600][ T5594] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 458.507626][ T5594] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 458.507644][ T5594] usb 3-1: config 8 interface 177 has no altsetting 0 [ 458.507665][ T5594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.627820][ T36] usb 2-1: USB disconnect, device number 19 [ 458.665416][ T5884] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 458.699783][ C0] ir_toy 3-1:8.177: out urb status: -71 [ 458.882306][ T5884] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 458.940773][ T5884] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 458.940970][ T5884] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 459.034066][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.034163][ T5884] usb 7-1: Product: syz [ 459.034180][ T5884] usb 7-1: Manufacturer: syz [ 459.034198][ T5884] usb 7-1: SerialNumber: syz [ 459.363887][ T5594] ir_toy 3-1:8.177: could not write reset command: -110 [ 459.370717][ T5594] ir_toy 3-1:8.177: probe with driver ir_toy failed with error -110 [ 460.551196][ T5884] usb 7-1: config 0 descriptor?? [ 460.707156][ T5594] usb 3-1: USB disconnect, device number 15 [ 461.010183][ T9065] netlink: 48 bytes leftover after parsing attributes in process `syz.4.941'. [ 461.321617][ T5884] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 461.827637][ T5884] gspca_sunplus: reg_r err -110 [ 461.827753][ T5884] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 461.932236][ T36] usb 7-1: USB disconnect, device number 12 [ 462.061409][ T9076] netlink: 108 bytes leftover after parsing attributes in process `syz.2.944'. [ 463.117225][ T9100] jffs2: notice: (9100) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 463.626432][ T9088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 463.626827][ T9088] block device autoloading is deprecated and will be removed. [ 464.286111][ T9120] netlink: 'syz.5.961': attribute type 1 has an invalid length. [ 464.519277][ T9124] input: syz0 as /devices/virtual/input/input16 [ 465.360711][ T9129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.962'. [ 469.972660][ T9168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.975'. [ 470.948186][ T9186] netlink: NAT attribute has 1 unknown bytes [ 470.948231][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.237182][ T36] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 473.407339][ T9199] netlink: 48 bytes leftover after parsing attributes in process `syz.6.983'. [ 473.517531][ T36] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 473.697304][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.697364][ T36] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 473.697393][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 473.697422][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 473.697446][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 473.901705][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 473.901734][ T36] usb 3-1: Product: syz [ 473.901749][ T36] usb 3-1: Manufacturer: syz [ 473.901763][ T36] usb 3-1: SerialNumber: syz [ 474.529244][ T9211] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿ, name , dev 7 [ 474.683266][ T36] usb 3-1: config 0 descriptor?? [ 474.732603][ T36] usb 3-1: can't set config #0, error -71 [ 474.814768][ T36] usb 3-1: USB disconnect, device number 16 [ 474.995545][ T5695] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 475.145515][ T5594] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 475.158199][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 475.185585][ T5695] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 475.191603][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.191632][ T5695] usb 6-1: Product: syz [ 475.191648][ T5695] usb 6-1: Manufacturer: syz [ 475.191664][ T5695] usb 6-1: SerialNumber: syz [ 475.311151][ T5594] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.314623][ T5594] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 475.314658][ T5594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 475.314687][ T5594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 475.314713][ T5594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 475.314758][ T5594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.384798][ T36] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 475.406398][ T5594] usb 2-1: config 0 descriptor?? [ 475.453863][ T5695] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 476.405369][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 476.616066][ T36] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 476.982057][ T36] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 476.987902][ T36] usb 3-1: config 0 has no interface number 0 [ 476.987948][ T36] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 476.987971][ T36] usb 3-1: config 0 interface 89 has no altsetting 0 [ 477.463111][ T9227] netlink: 48 bytes leftover after parsing attributes in process `syz.4.990'. [ 477.909762][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.909790][ T36] usb 3-1: Product: syz [ 477.909803][ T36] usb 3-1: Manufacturer: syz [ 477.909817][ T36] usb 3-1: SerialNumber: syz [ 478.137492][ T5695] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 478.156000][ T5695] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 478.156153][ T5695] usb 6-1: media controller created [ 478.253280][ T5594] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 478.280073][ T36] usb 3-1: config 0 descriptor?? [ 478.280518][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 478.283743][ T36] usb 3-1: can't set config #0, error -32 [ 478.284215][ T9236] udevd[9236]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 478.492039][ T36] usb 3-1: USB disconnect, device number 17 [ 478.494860][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.647870][ T5594] usb 2-1: USB disconnect, device number 20 [ 478.996841][ T36] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 479.209085][ T5695] zl10353_read_register: readreg error (reg=127, ret==-71) [ 479.265449][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 479.266396][ T36] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 479.273973][ T36] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 479.273991][ T36] usb 3-1: config 0 has no interface number 0 [ 479.274024][ T36] usb 3-1: config 0 interface 184 has no altsetting 0 [ 479.317011][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.317039][ T36] usb 3-1: Product: syz [ 479.317054][ T36] usb 3-1: Manufacturer: syz [ 479.317067][ T36] usb 3-1: SerialNumber: syz [ 479.396682][ T36] usb 3-1: config 0 descriptor?? [ 479.738529][ T5695] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 479.832452][ T5695] usb 6-1: USB disconnect, device number 14 [ 480.040425][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 480.040542][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 480.371017][ T9273] jffs2: notice: (9273) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 480.564358][ T9279] binder: 9278:9279 ioctl 4018620d 0 returned -22 [ 480.575020][ T9279] binder: 9278:9279 ioctl c018620b 200000000100 returned -14 [ 480.656243][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 480.656277][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 480.656299][ T36] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 480.656616][ T36] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 480.742441][ T36] usb 3-1: USB disconnect, device number 18 [ 480.895563][ T9287] syz.4.1007 uses obsolete (PF_INET,SOCK_PACKET) [ 480.923953][ T9287] syzkaller1: entered promiscuous mode [ 480.923979][ T9287] syzkaller1: entered allmulticast mode [ 481.015807][ T31] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 481.206305][ T31] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 481.210186][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.210213][ T31] usb 7-1: Product: syz [ 481.210229][ T31] usb 7-1: Manufacturer: syz [ 481.210245][ T31] usb 7-1: SerialNumber: syz [ 481.244595][ T31] usb 7-1: config 0 descriptor?? [ 481.500942][ T31] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.050026][ T9299] can0: slcan on ptm0. [ 484.095613][ T31] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 484.133274][ T31] usb 7-1: USB disconnect, device number 13 [ 484.436455][ T9299] can0 (unregistered): slcan off ptm0. [ 485.098931][ T9329] jffs2: notice: (9329) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 485.391982][ T9336] binder: BINDER_SET_CONTEXT_MGR already set [ 485.391999][ T9336] binder: 9335:9336 ioctl 4018620d 200000000040 returned -16 [ 486.957858][ T9361] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1030'. [ 487.175419][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 487.345808][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 487.349642][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 487.351466][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.351510][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.351531][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 487.351558][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 487.351590][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.441176][ T10] usb 3-1: config 0 descriptor?? [ 488.090303][ T10] hid (null): unknown global tag 0xc [ 488.090330][ T10] hid (null): unknown global tag 0xc [ 488.090347][ T10] hid (null): unknown global tag 0xe [ 488.120910][ T10] hid (null): unknown global tag 0xe [ 488.120940][ T10] hid (null): unknown global tag 0xe [ 488.143143][ T10] hid (null): unknown global tag 0xd [ 488.143738][ T10] hid (null): invalid report_size 18142 [ 488.143749][ T10] hid (null): global environment stack overflow [ 488.323326][ T5594] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 488.366333][ T10] usb 3-1: USB disconnect, device number 19 [ 488.466781][ T5594] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 488.488279][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.488316][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.488369][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.551892][ T5594] usb 5-1: config 0 descriptor?? [ 488.977333][ T5594] usbhid 5-1:0.0: can't add hid device: -71 [ 488.977459][ T5594] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 489.028052][ T5594] usb 5-1: USB disconnect, device number 18 [ 489.438229][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 489.502765][ T9376] gretap1: entered promiscuous mode [ 489.531356][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 489.605517][ T5594] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 489.684139][ T31] kernel write not supported for file /393/clear_refs (pid: 31 comm: kworker/1:0) [ 489.806366][ T5594] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 489.809032][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.809060][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.809095][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.868500][ T5594] usb 5-1: config 0 descriptor?? [ 489.958230][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 490.107672][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 490.127125][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 490.127195][ T31] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 490.134157][ T31] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 490.134190][ T31] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 490.134215][ T31] usb 3-1: config 14 has no interface number 0 [ 490.134241][ T31] usb 3-1: config 14 has no interface number 1 [ 490.134330][ T31] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 490.134362][ T31] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 490.134395][ T31] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 490.134425][ T31] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 490.134462][ T31] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 490.134486][ T31] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.134535][ T31] usb 3-1: config 14 interface 57 has no altsetting 0 [ 490.134557][ T31] usb 3-1: config 14 interface 228 has no altsetting 0 [ 490.286464][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.286497][ T31] usb 3-1: Product: syz [ 490.286509][ T31] usb 3-1: Manufacturer: syz [ 490.286541][ T31] usb 3-1: SerialNumber: syz [ 490.937281][ T5594] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 491.007605][ T5594] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 491.052022][ T31] legousbtower 3-1:14.57: interrupt endpoints not found [ 491.078596][ T1242] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 491.286916][ T1242] usb 2-1: Using ep0 maxpacket: 16 [ 491.287393][ T5594] input: failed to attach handler kbd to device input18, error: -5 [ 491.305089][ T1242] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.329566][ T1242] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.329594][ T1242] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.341179][ T1242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.341208][ T1242] usb 2-1: Product: syz [ 491.341224][ T1242] usb 2-1: Manufacturer: syz [ 491.341241][ T1242] usb 2-1: SerialNumber: syz [ 491.412398][ T31] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 491.510593][ T1242] usb 2-1: 0:2 : does not exist [ 491.752929][ T5594] usb 5-1: USB disconnect, device number 19 [ 491.767445][ T1242] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 494.031388][ T31] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 494.486162][ T1242] usb 2-1: USB disconnect, device number 21 [ 494.680210][ T9411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.725686][ T200] usb 3-1: USB disconnect, device number 20 [ 494.857907][ T200] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 494.999978][ T7449] udevd[7449]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.903990][ T9434] binder: 9433:9434 ioctl c0306201 2000000001c0 returned -22 [ 497.015945][ T36] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 497.166655][ T36] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 497.173160][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.173188][ T36] usb 3-1: Product: syz [ 497.173204][ T36] usb 3-1: Manufacturer: syz [ 497.173219][ T36] usb 3-1: SerialNumber: syz [ 497.294752][ T36] usb 3-1: config 0 descriptor?? [ 497.315686][ T36] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 498.884362][ T1276] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.972908][ T36] gspca_stk1135: reg_w 0x200 err -71 [ 498.974107][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974119][ T36] gspca_stk1135: Sensor write failed [ 498.974145][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974152][ T36] gspca_stk1135: Sensor write failed [ 498.974178][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974185][ T36] gspca_stk1135: Sensor read failed [ 498.974211][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974218][ T36] gspca_stk1135: Sensor read failed [ 498.974223][ T36] gspca_stk1135: Detected sensor type unknown (0x0) [ 498.974253][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974260][ T36] gspca_stk1135: Sensor read failed [ 498.974285][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974292][ T36] gspca_stk1135: Sensor read failed [ 498.974318][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974325][ T36] gspca_stk1135: Sensor write failed [ 498.974351][ T36] gspca_stk1135: serial bus timeout: status=0x00 [ 498.974358][ T36] gspca_stk1135: Sensor write failed [ 498.974423][ T36] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 499.001920][ T36] usb 3-1: USB disconnect, device number 21 [ 499.055450][ T200] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 499.225307][ T200] usb 7-1: Using ep0 maxpacket: 32 [ 499.226125][ T200] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 499.252439][ T200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.252468][ T200] usb 7-1: Product: syz [ 499.252488][ T200] usb 7-1: Manufacturer: syz [ 499.252504][ T200] usb 7-1: SerialNumber: syz [ 499.378891][ T200] usb 7-1: config 0 descriptor?? [ 499.418366][ T200] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 499.874023][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 499.904711][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 499.916497][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 499.977207][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 500.021345][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 500.282644][ T9486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.284046][ T9487] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 501.032145][ T200] gspca_ov534_9: reg_r err -71 [ 501.329357][ T200] gspca_ov534_9: Unknown sensor 0000 [ 501.329445][ T200] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 501.335148][ T200] usb 7-1: USB disconnect, device number 14 [ 501.367543][ T1276] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.538325][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.538397][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.176589][ T5590] Bluetooth: hci2: command tx timeout [ 503.494692][ T1276] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.113606][ T9527] binder: 9526:9527 ioctl c0306201 200000000640 returned -14 [ 504.255478][ T1242] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 504.255544][ T5590] Bluetooth: hci2: command tx timeout [ 504.328799][ T9530] binder: 9529:9530 ioctl c0306201 2000000003c0 returned -14 [ 504.427686][ T1242] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.483698][ T1242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.483750][ T1242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.598947][ T1242] usb 3-1: config 0 descriptor?? [ 505.041137][ T1242] usbhid 3-1:0.0: can't add hid device: -71 [ 505.041266][ T1242] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 505.105097][ T1242] usb 3-1: USB disconnect, device number 22 [ 505.232817][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1089'. [ 505.615528][ T1242] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 505.772690][ T1242] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 505.775503][ T1242] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.775653][ T1242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.824587][ T1242] usb 3-1: config 0 descriptor?? [ 506.336527][ T5590] Bluetooth: hci2: command tx timeout [ 506.453553][ T9523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.467127][ T9523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.660986][ T1242] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 506.663824][ T1242] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 507.245629][ T5695] usb 3-1: USB disconnect, device number 23 [ 507.245631][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 507.823018][ T9514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.888732][ T9514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.415379][ T5590] Bluetooth: hci2: command tx timeout [ 509.089729][ T36] lo speed is unknown, defaulting to 1000 [ 509.089933][ T36] syz2: Port: 1 Link DOWN [ 509.124016][ T9545] netlink: 'syz.6.1092': attribute type 3 has an invalid length. [ 509.695773][ T31] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 509.696146][ T1276] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.795491][ T5943] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.795542][ T5943] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.795591][ T5943] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.806467][ T5943] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.852841][ T31] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 509.858956][ T31] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 509.858979][ T31] usb 7-1: config 0 has no interface number 0 [ 509.859021][ T31] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 509.859047][ T31] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 509.859071][ T31] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 509.879320][ T31] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 509.879346][ T31] usb 7-1: Product: syz [ 509.879361][ T31] usb 7-1: SerialNumber: syz [ 509.948206][ T31] usb 7-1: config 0 descriptor?? [ 509.976648][ T31] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 510.054898][ T31] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input20 [ 510.168910][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 510.250734][ T9481] lo speed is unknown, defaulting to 1000 [ 510.685278][ C0] cm109_urb_ctl_callback: 2275 callbacks suppressed [ 510.685309][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.685566][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.685808][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.686038][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.692771][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.693052][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.693273][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.693509][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.693724][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.693939][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 510.782531][ T5702] usb 7-1: USB disconnect, device number 15 [ 510.782528][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 510.879215][ T5702] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 514.045183][ T9586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1101'. [ 514.115385][ T36] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 514.267271][ T36] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 514.269156][ T36] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 514.269183][ T36] usb 5-1: config 0 has no interface number 0 [ 514.269223][ T36] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 514.269248][ T36] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 514.269274][ T36] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 514.271390][ T36] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 514.271412][ T36] usb 5-1: Product: syz [ 514.271427][ T36] usb 5-1: SerialNumber: syz [ 514.405970][ T36] usb 5-1: config 0 descriptor?? [ 514.465490][ T36] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 514.490972][ T36] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input21 [ 514.660908][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 515.185032][ T1242] usb 5-1: USB disconnect, device number 20 [ 515.185037][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 515.315194][ T1242] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 516.801205][ T9623] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1107'. [ 517.253284][ T1276] bridge_slave_1: left allmulticast mode [ 517.253318][ T1276] bridge_slave_1: left promiscuous mode [ 517.277212][ T1276] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.482162][ T1276] bridge_slave_0: left allmulticast mode [ 517.482200][ T1276] bridge_slave_0: left promiscuous mode [ 517.482451][ T1276] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.427467][ T1276] .` (unregistering): (slave 30): Releasing backup interface [ 520.465896][ T1276] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.498711][ T1276] .` (unregistering): Released all slaves [ 520.684373][ T5242] 8021q: adding VLAN 0 to HW filter on device eth9 [ 522.684301][ T9681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1116'. [ 523.038829][ T9672] overlayfs: failed to clone lowerpath [ 523.390382][ T9682] syz.6.1117 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 524.059887][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.059990][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.060202][ T9481] bridge_slave_0: entered allmulticast mode [ 524.142185][ T9481] bridge_slave_0: entered promiscuous mode [ 524.274278][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.274406][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.274660][ T9481] bridge_slave_1: entered allmulticast mode [ 524.295012][ T9481] bridge_slave_1: entered promiscuous mode [ 524.371202][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.375131][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.279069][ T9481] team0: Port device team_slave_0 added [ 528.169627][ T9481] team0: Port device team_slave_1 added [ 528.369538][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.369554][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.369580][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.374611][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.374624][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.374645][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.377456][ T9481] hsr_slave_0: entered promiscuous mode [ 530.379064][ T9481] hsr_slave_1: entered promiscuous mode [ 530.380149][ T9481] debugfs: 'hsr0' already exists in 'hsr' [ 530.380175][ T9481] Cannot create hsr debugfs directory [ 531.724625][ T1276] hsr_slave_0: left promiscuous mode [ 531.802413][ T1276] hsr_slave_1: left promiscuous mode [ 531.803545][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.803573][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.122094][ T1276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.122123][ T1276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.969623][ T36] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 533.002725][ T1276] veth1_macvtap: left promiscuous mode [ 533.002847][ T1276] veth0_macvtap: left promiscuous mode [ 533.003415][ T1276] veth1_vlan: left promiscuous mode [ 533.003613][ T1276] veth0_vlan: left promiscuous mode [ 533.115373][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 533.116194][ T36] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 533.117726][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 533.117761][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.117785][ T36] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.117817][ T36] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.117861][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.208144][ T36] usb 7-1: config 0 descriptor?? [ 533.538518][ T37] audit: type=1804 audit(1786358401.407:23): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1134" name="/newroot/273/file0" dev="tmpfs" ino=1455 res=1 errno=0 [ 534.095792][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 534.194879][ T9765] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 534.316170][ T31] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 534.317776][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.317806][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 534.317848][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.369452][ T31] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 534.394505][ T31] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 535.001695][ T9769] binder: 9768:9769 ioctl c00c6211 0 returned -14 [ 535.737352][ T5594] usb 7-1: USB disconnect, device number 16 [ 535.757450][ T1276] team0 (unregistering): Port device team_slave_1 removed [ 536.037674][ T1276] team0 (unregistering): Port device team_slave_0 removed [ 536.178819][ T9776] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1137'. [ 537.599779][ T9761] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 540.130873][ T5594] usb 5-1: USB disconnect, device number 21 [ 540.812612][ T5594] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 540.840227][ T5594] spcp8x5 5-1:1.0: device disconnected [ 542.717818][ T5242] 8021q: adding VLAN 0 to HW filter on device eth10 [ 542.723899][ T9766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1135'. [ 542.723928][ T9766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1135'. [ 543.122996][ T9806] /dev/nullb0: Can't open blockdev [ 548.224230][ T9815] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1147'. [ 548.300928][ T5702] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 549.583862][ T5702] usb 3-1: Using ep0 maxpacket: 16 [ 549.584823][ T5702] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 549.611638][ T5702] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 549.611668][ T5702] usb 3-1: config 0 has an invalid descriptor of length 162, skipping remainder of the config [ 549.611689][ T5702] usb 3-1: config 0 has no interface number 0 [ 549.648573][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.648606][ T5702] usb 3-1: Product: syz [ 549.648623][ T5702] usb 3-1: Manufacturer: syz [ 549.648638][ T5702] usb 3-1: SerialNumber: syz [ 549.689270][ T5702] usb 3-1: config 0 descriptor?? [ 549.724260][ T5702] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 549.929094][ T9845] syz.6.1150 (9845) used greatest stack depth: 19168 bytes left [ 549.957309][ T5702] usb 3-1: USB disconnect, device number 24 [ 559.226974][ T9890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1162'. [ 559.666059][ T5242] 8021q: adding VLAN 0 to HW filter on device eth11 [ 562.344721][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 562.383173][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 562.414683][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 562.460997][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 562.472342][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 562.885451][ T200] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 562.978579][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.978652][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.096162][ T200] usb 2-1: Using ep0 maxpacket: 8 [ 563.102002][ T200] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 563.126807][ T200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 563.126858][ T200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.126899][ T200] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.126924][ T200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 563.126949][ T200] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 563.126991][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.226139][ T200] usb 2-1: config 0 descriptor?? [ 563.603965][ T9922] lo speed is unknown, defaulting to 1000 [ 564.585520][ T5603] Bluetooth: hci5: command tx timeout [ 565.212083][ T5603] Bluetooth: hci6: urb ffff88802b6d8200 submission failed (90) [ 565.317567][ T36] usb 2-1: USB disconnect, device number 22 [ 566.207824][ T5242] 8021q: adding VLAN 0 to HW filter on device eth12 [ 566.755846][ T5603] Bluetooth: hci5: command tx timeout [ 568.378621][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'. [ 568.885529][ T5716] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 568.975630][ T5603] Bluetooth: hci5: command tx timeout [ 569.025550][ T5716] usb 5-1: device descriptor read/64, error -71 [ 569.305393][ T5716] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 569.446900][ T5716] usb 5-1: device descriptor read/64, error -71 [ 569.585702][ T5716] usb usb5-port1: attempt power cycle [ 569.641613][ T9993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1178'. [ 570.847138][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.855705][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.855909][ T9922] bridge_slave_0: entered allmulticast mode [ 570.858857][ T9922] bridge_slave_0: entered promiscuous mode [ 570.864275][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.864607][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.864796][ T9922] bridge_slave_1: entered allmulticast mode [ 570.867125][ T9922] bridge_slave_1: entered promiscuous mode [ 571.083397][ T5716] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 571.105081][ T5603] Bluetooth: hci5: command tx timeout [ 571.349864][ T5716] usb 5-1: device descriptor read/8, error -71 [ 571.457546][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.486155][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.126788][ T9922] team0: Port device team_slave_0 added [ 574.149668][ T9922] team0: Port device team_slave_1 added [ 574.264539][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.264576][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.264610][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.321762][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.321780][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.321812][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.174609][ T9922] hsr_slave_0: entered promiscuous mode [ 579.182521][ T9922] hsr_slave_1: entered promiscuous mode [ 579.193811][ T9922] debugfs: 'hsr0' already exists in 'hsr' [ 579.193840][ T9922] Cannot create hsr debugfs directory [ 579.381112][ T987] bridge_slave_1: left allmulticast mode [ 579.381148][ T987] bridge_slave_1: left promiscuous mode [ 579.381404][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.629580][ T987] bridge_slave_0: left allmulticast mode [ 579.629635][ T987] bridge_slave_0: left promiscuous mode [ 579.642237][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.656177][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 586.349343][T10107] netlink: 'syz.4.1200': attribute type 4 has an invalid length. [ 586.456203][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.536343][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.597413][ T987] bond0 (unregistering): Released all slaves [ 586.713712][ T5242] 8021q: adding VLAN 0 to HW filter on device eth13 [ 587.469297][T10120] program syz.4.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.468497][ T987] hsr_slave_0: left promiscuous mode [ 591.516667][ T987] hsr_slave_1: left promiscuous mode [ 591.517636][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.580296][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.271375][ T987] team0 (unregistering): Port device team_slave_1 removed [ 593.317993][ T987] team0 (unregistering): Port device team_slave_0 removed [ 601.501245][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.040579][T10177] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 602.040631][T10177] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 602.040685][T10177] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 602.484659][T10177] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 604.202900][ T5242] 8021q: adding VLAN 0 to HW filter on device eth14 [ 611.718096][T10242] vhci_hcd vhci_hcd.0: remove, state 4 [ 611.718603][T10242] usb usb34: USB disconnect, device number 1 [ 613.121289][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 613.287414][ T9922] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 614.238412][T10264] openvswitch: netlink: ct_state flags 0001010a unsupported [ 614.428126][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.546203][ T9922] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 614.852251][T10242] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 614.939147][ T5943] vhci_hcd vhci_hcd.0: stop threads [ 614.939167][ T5943] vhci_hcd vhci_hcd.0: release socket [ 614.939202][ T5943] vhci_hcd vhci_hcd.0: disconnect device [ 615.634707][T10242] vhci_hcd vhci_hcd.0: remove, state 4 [ 615.634754][T10242] usb usb33: USB disconnect, device number 1 [ 615.843754][ T5943] ================================================================== [ 615.843773][ T5943] BUG: KASAN: slab-use-after-free in mutex_lock_nested+0x5a/0x1d0 [ 615.843883][ T5943] Read of size 1 at addr ffff88802af248f8 by task kworker/u8:14/5943 [ 615.843901][ T5943] [ 615.843922][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.843952][ T5943] Tainted: [L]=SOFTLOCKUP [ 615.843961][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.843975][ T5943] Workqueue: usbip_event event_handler [ 615.844075][ T5943] Call Trace: [ 615.844116][ T5943] [ 615.844177][ T5943] dump_stack_lvl+0xe8/0x150 [ 615.844300][ T5943] print_address_description+0x55/0x1e0 [ 615.844339][ T5943] ? mutex_lock_nested+0x5a/0x1d0 [ 615.844386][ T5943] print_report+0x58/0x70 [ 615.844414][ T5943] kasan_report+0x117/0x150 [ 615.844482][ T5943] ? mutex_lock_nested+0x5a/0x1d0 [ 615.844510][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.844539][ T5943] __kasan_check_byte+0x2a/0x40 [ 615.844563][ T5943] lock_acquire+0x84/0x350 [ 615.844620][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.844649][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.844674][ T5943] mutex_lock_nested+0x5a/0x1d0 [ 615.844696][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.844725][ T5943] event_handler+0x1e3/0x4a0 [ 615.844752][ T5943] ? process_scheduled_works+0xa20/0x14e0 [ 615.844805][ T5943] process_scheduled_works+0xa8e/0x14e0 [ 615.844844][ T5943] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.844873][ T5943] ? assign_work+0x3cf/0x5d0 [ 615.844899][ T5943] worker_thread+0xa47/0xfb0 [ 615.844939][ T5943] kthread+0x388/0x470 [ 615.844993][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 615.845018][ T5943] ? __pfx_kthread+0x10/0x10 [ 615.845049][ T5943] ret_from_fork+0x514/0xb70 [ 615.845127][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 615.845159][ T5943] ? __switch_to+0xc89/0x1420 [ 615.845214][ T5943] ? __pfx_kthread+0x10/0x10 [ 615.845245][ T5943] ret_from_fork_asm+0x1a/0x30 [ 615.845297][ T5943] [ 615.845371][ T5943] [ 615.845376][ T5943] Allocated by task 1: [ 615.845413][ T5943] kasan_save_track+0x3e/0x80 [ 615.845467][ T5943] __kasan_kmalloc+0x93/0xb0 [ 615.845486][ T5943] __kmalloc_noprof+0x41a/0x780 [ 615.845528][ T5943] __usb_create_hcd+0x67/0x900 [ 615.845579][ T5943] vhci_hcd_probe+0x1e6/0x3f0 [ 615.845629][ T5943] platform_probe+0xf9/0x190 [ 615.845712][ T5943] really_probe+0x254/0xae0 [ 615.845770][ T5943] __driver_probe_device+0x1e8/0x360 [ 615.845797][ T5943] driver_probe_device+0x4f/0x240 [ 615.845823][ T5943] __device_attach_driver+0x270/0x410 [ 615.845851][ T5943] bus_for_each_drv+0x25b/0x2f0 [ 615.845869][ T5943] __device_attach+0x2c7/0x450 [ 615.845894][ T5943] device_initial_probe+0xa1/0xd0 [ 615.845920][ T5943] bus_probe_device+0x12d/0x220 [ 615.845938][ T5943] device_add+0x7d7/0xb80 [ 615.845960][ T5943] platform_device_add+0x4bd/0x860 [ 615.845981][ T5943] platform_device_register_full+0x62d/0x710 [ 615.846004][ T5943] vhci_hcd_init+0x227/0x370 [ 615.846056][ T5943] do_one_initcall+0x250/0x870 [ 615.846085][ T5943] do_initcall_level+0x10a/0x1a0 [ 615.846117][ T5943] do_initcalls+0x59/0xa0 [ 615.846139][ T5943] kernel_init_freeable+0x29d/0x3e0 [ 615.846163][ T5943] kernel_init+0x1d/0x1d0 [ 615.846183][ T5943] ret_from_fork+0x514/0xb70 [ 615.846212][ T5943] ret_from_fork_asm+0x1a/0x30 [ 615.846243][ T5943] [ 615.846249][ T5943] Freed by task 10242: [ 615.846259][ T5943] kasan_save_track+0x3e/0x80 [ 615.846299][ T5943] kasan_save_free_info+0x40/0x50 [ 615.846356][ T5943] __kasan_slab_free+0x5c/0x80 [ 615.846374][ T5943] kfree+0x1c5/0x6c0 [ 615.846426][ T5943] vhci_hcd_remove+0xa4/0x110 [ 615.846452][ T5943] device_release_driver_internal+0x48b/0x880 [ 615.846480][ T5943] unbind_store+0x1a4/0x1d0 [ 615.846512][ T5943] kernfs_fop_write_iter+0x3a5/0x540 [ 615.846581][ T5943] vfs_write+0x61e/0xbb0 [ 615.846629][ T5943] ksys_write+0x156/0x270 [ 615.846650][ T5943] do_syscall_64+0x174/0x580 [ 615.846725][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.846766][ T5943] [ 615.846771][ T5943] Last potentially related work creation: [ 615.846780][ T5943] kasan_save_stack+0x3e/0x60 [ 615.846811][ T5943] kasan_record_aux_stack+0xbd/0xd0 [ 615.846838][ T5943] insert_work+0x3d/0x330 [ 615.846857][ T5943] __queue_work+0xd1d/0x10f0 [ 615.846906][ T5943] queue_work_on+0x106/0x1d0 [ 615.846929][ T5943] unlink1+0x33d/0x3e0 [ 615.846951][ T5943] usb_hcd_unlink_urb+0xda/0x1d0 [ 615.846974][ T5943] usb_kill_urb+0x10b/0x2f0 [ 615.847003][ T5943] hub_quiesce+0x20f/0x320 [ 615.847022][ T5943] hub_suspend+0x904/0xad0 [ 615.847038][ T5943] usb_suspend_both+0x285/0x1040 [ 615.847087][ T5943] usb_runtime_suspend+0x58/0x110 [ 615.847111][ T5943] __rpm_callback+0x2d6/0x930 [ 615.847184][ T5943] rpm_suspend+0x8a0/0x17a0 [ 615.847206][ T5943] __pm_runtime_suspend+0x12c/0x1a0 [ 615.847225][ T5943] usb_new_device+0xade/0x1680 [ 615.847247][ T5943] register_root_hub+0x250/0x5c0 [ 615.847267][ T5943] usb_add_hcd+0xac7/0xf80 [ 615.847293][ T5943] vhci_hcd_probe+0x1fa/0x3f0 [ 615.847315][ T5943] platform_probe+0xf9/0x190 [ 615.847333][ T5943] really_probe+0x254/0xae0 [ 615.847354][ T5943] __driver_probe_device+0x1e8/0x360 [ 615.847375][ T5943] driver_probe_device+0x4f/0x240 [ 615.847397][ T5943] __device_attach_driver+0x270/0x410 [ 615.847420][ T5943] bus_for_each_drv+0x25b/0x2f0 [ 615.847434][ T5943] __device_attach+0x2c7/0x450 [ 615.847454][ T5943] device_initial_probe+0xa1/0xd0 [ 615.847475][ T5943] bus_probe_device+0x12d/0x220 [ 615.847492][ T5943] device_add+0x7d7/0xb80 [ 615.847511][ T5943] platform_device_add+0x4bd/0x860 [ 615.847528][ T5943] platform_device_register_full+0x62d/0x710 [ 615.847545][ T5943] vhci_hcd_init+0x227/0x370 [ 615.847563][ T5943] do_one_initcall+0x250/0x870 [ 615.847587][ T5943] do_initcall_level+0x10a/0x1a0 [ 615.847605][ T5943] do_initcalls+0x59/0xa0 [ 615.847621][ T5943] kernel_init_freeable+0x29d/0x3e0 [ 615.847639][ T5943] kernel_init+0x1d/0x1d0 [ 615.847656][ T5943] ret_from_fork+0x514/0xb70 [ 615.847680][ T5943] ret_from_fork_asm+0x1a/0x30 [ 615.847704][ T5943] [ 615.847709][ T5943] Second to last potentially related work creation: [ 615.847717][ T5943] kasan_save_stack+0x3e/0x60 [ 615.847746][ T5943] kasan_record_aux_stack+0xbd/0xd0 [ 615.847773][ T5943] insert_work+0x3d/0x330 [ 615.847790][ T5943] __queue_work+0xd1d/0x10f0 [ 615.847809][ T5943] queue_work_on+0x106/0x1d0 [ 615.847825][ T5943] usb_hcd_submit_urb+0xa2d/0x1b40 [ 615.847843][ T5943] usb_start_wait_urb+0x13f/0x5b0 [ 615.847867][ T5943] usb_control_msg+0x234/0x3e0 [ 615.847890][ T5943] hub_suspend+0x891/0xad0 [ 615.847902][ T5943] usb_suspend_both+0x285/0x1040 [ 615.847920][ T5943] usb_runtime_suspend+0x58/0x110 [ 615.847939][ T5943] __rpm_callback+0x2d6/0x930 [ 615.847961][ T5943] rpm_suspend+0x8a0/0x17a0 [ 615.847979][ T5943] __pm_runtime_suspend+0x12c/0x1a0 [ 615.847997][ T5943] usb_new_device+0xade/0x1680 [ 615.848020][ T5943] register_root_hub+0x250/0x5c0 [ 615.848052][ T5943] usb_add_hcd+0xac7/0xf80 [ 615.848070][ T5943] vhci_hcd_probe+0x1fa/0x3f0 [ 615.848090][ T5943] platform_probe+0xf9/0x190 [ 615.848107][ T5943] really_probe+0x254/0xae0 [ 615.848127][ T5943] __driver_probe_device+0x1e8/0x360 [ 615.848148][ T5943] driver_probe_device+0x4f/0x240 [ 615.848170][ T5943] __device_attach_driver+0x270/0x410 [ 615.848192][ T5943] bus_for_each_drv+0x25b/0x2f0 [ 615.848206][ T5943] __device_attach+0x2c7/0x450 [ 615.848224][ T5943] device_initial_probe+0xa1/0xd0 [ 615.848243][ T5943] bus_probe_device+0x12d/0x220 [ 615.848257][ T5943] device_add+0x7d7/0xb80 [ 615.848274][ T5943] platform_device_add+0x4bd/0x860 [ 615.848302][ T5943] platform_device_register_full+0x62d/0x710 [ 615.848321][ T5943] vhci_hcd_init+0x227/0x370 [ 615.848340][ T5943] do_one_initcall+0x250/0x870 [ 615.848361][ T5943] do_initcall_level+0x10a/0x1a0 [ 615.848378][ T5943] do_initcalls+0x59/0xa0 [ 615.848393][ T5943] kernel_init_freeable+0x29d/0x3e0 [ 615.848410][ T5943] kernel_init+0x1d/0x1d0 [ 615.848424][ T5943] ret_from_fork+0x514/0xb70 [ 615.848445][ T5943] ret_from_fork_asm+0x1a/0x30 [ 615.848468][ T5943] [ 615.848472][ T5943] The buggy address belongs to the object at ffff88802af24000 [ 615.848472][ T5943] which belongs to the cache kmalloc-8k of size 8192 [ 615.848489][ T5943] The buggy address is located 2296 bytes inside of [ 615.848489][ T5943] freed 8192-byte region [ffff88802af24000, ffff88802af26000) [ 615.848523][ T5943] [ 615.848528][ T5943] The buggy address belongs to the physical page: [ 615.848556][ T5943] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2af20 [ 615.848574][ T5943] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 615.848589][ T5943] flags: 0x80000000000040(head|node=0|zone=1) [ 615.848604][ T5943] page_type: f5(slab) [ 615.848621][ T5943] raw: 0080000000000040 ffff88813ffb2280 dead000000000122 0000000000000000 [ 615.848636][ T5943] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 615.848654][ T5943] head: 0080000000000040 ffff88813ffb2280 dead000000000122 0000000000000000 [ 615.848671][ T5943] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 615.848691][ T5943] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 615.848707][ T5943] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 615.848718][ T5943] page dumped because: kasan: bad access detected [ 615.848733][ T5943] page_owner tracks the page as allocated [ 615.848740][ T5943] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15997201357, free_ts 0 [ 615.848774][ T5943] post_alloc_hook+0x1f9/0x250 [ 615.848839][ T5943] get_page_from_freelist+0x262a/0x26a0 [ 615.848857][ T5943] __alloc_frozen_pages_noprof+0x18d/0x380 [ 615.848873][ T5943] allocate_slab+0x79/0x5e0 [ 615.848892][ T5943] refill_objects+0x2d8/0x350 [ 615.848912][ T5943] __pcs_replace_empty_main+0x330/0x690 [ 615.848931][ T5943] __kmalloc_noprof+0x544/0x780 [ 615.848945][ T5943] __usb_create_hcd+0x67/0x900 [ 615.848964][ T5943] vhci_hcd_probe+0x1e6/0x3f0 [ 615.848984][ T5943] platform_probe+0xf9/0x190 [ 615.849002][ T5943] really_probe+0x254/0xae0 [ 615.849022][ T5943] __driver_probe_device+0x1e8/0x360 [ 615.849042][ T5943] driver_probe_device+0x4f/0x240 [ 615.849063][ T5943] __device_attach_driver+0x270/0x410 [ 615.849086][ T5943] bus_for_each_drv+0x25b/0x2f0 [ 615.849100][ T5943] __device_attach+0x2c7/0x450 [ 615.849121][ T5943] page_owner free stack trace missing [ 615.849128][ T5943] [ 615.849132][ T5943] Memory state around the buggy address: [ 615.849142][ T5943] ffff88802af24780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 615.849156][ T5943] ffff88802af24800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 615.849168][ T5943] >ffff88802af24880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 615.849177][ T5943] ^ [ 615.849187][ T5943] ffff88802af24900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 615.849198][ T5943] ffff88802af24980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 615.849207][ T5943] ================================================================== [ 615.855722][ T5943] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 615.855743][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.855768][ T5943] Tainted: [L]=SOFTLOCKUP [ 615.855775][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.855787][ T5943] Workqueue: usbip_event event_handler [ 615.855813][ T5943] Call Trace: [ 615.855821][ T5943] [ 615.855829][ T5943] vpanic+0x56c/0xa60 [ 615.855859][ T5943] ? __pfx_vpanic+0x10/0x10 [ 615.855884][ T5943] ? __pfx___schedule+0x10/0x10 [ 615.855910][ T5943] panic+0xc5/0xd0 [ 615.855935][ T5943] ? __pfx_panic+0x10/0x10 [ 615.855960][ T5943] ? preempt_schedule_thunk+0x16/0x40 [ 615.855983][ T5943] ? mutex_lock_nested+0x5a/0x1d0 [ 615.856003][ T5943] check_panic_on_warn+0x89/0xb0 [ 615.856032][ T5943] ? mutex_lock_nested+0x5a/0x1d0 [ 615.856051][ T5943] end_report+0x73/0x170 [ 615.856071][ T5943] ? mutex_lock_nested+0x5a/0x1d0 [ 615.856091][ T5943] kasan_report+0x128/0x150 [ 615.856110][ T5943] ? mutex_lock_nested+0x5a/0x1d0 [ 615.856130][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.856150][ T5943] __kasan_check_byte+0x2a/0x40 [ 615.856168][ T5943] lock_acquire+0x84/0x350 [ 615.856186][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.856209][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.856228][ T5943] mutex_lock_nested+0x5a/0x1d0 [ 615.856245][ T5943] ? event_handler+0x1e3/0x4a0 [ 615.856267][ T5943] event_handler+0x1e3/0x4a0 [ 615.856299][ T5943] ? process_scheduled_works+0xa20/0x14e0 [ 615.856320][ T5943] process_scheduled_works+0xa8e/0x14e0 [ 615.856350][ T5943] ? __pfx_process_scheduled_works+0x10/0x10 [ 615.856372][ T5943] ? assign_work+0x3cf/0x5d0 [ 615.856392][ T5943] worker_thread+0xa47/0xfb0 [ 615.856425][ T5943] kthread+0x388/0x470 [ 615.856452][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 615.856471][ T5943] ? __pfx_kthread+0x10/0x10 [ 615.856494][ T5943] ret_from_fork+0x514/0xb70 [ 615.856520][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 615.856544][ T5943] ? __switch_to+0xc89/0x1420 [ 615.856566][ T5943] ? __pfx_kthread+0x10/0x10 [ 615.856589][ T5943] ret_from_fork_asm+0x1a/0x30 [ 615.856623][ T5943] [ 615.857510][ T5943] Kernel Offset: disabled