last executing test programs: 18.579922522s ago: executing program 3 (id=3991): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x40044}}], 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, 0x0) 16.455694932s ago: executing program 3 (id=3995): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 13.925032861s ago: executing program 2 (id=4006): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "030600", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 13.438012821s ago: executing program 2 (id=4010): fsopen(&(0x7f0000000240)='configfs\x00', 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xa, 0x0, 0x0, 0x5096, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x8, 0x4, 0xd6d}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r1, r2, 0x0, 0x201f00) syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 13.262436726s ago: executing program 3 (id=4013): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x11, 0x0, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) r3 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r3, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) 12.180529004s ago: executing program 4 (id=4014): socket$kcm(0x21, 0x2, 0xa) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 10.592373781s ago: executing program 0 (id=4017): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioprio_set$pid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 9.517843676s ago: executing program 3 (id=4018): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) 9.3794204s ago: executing program 2 (id=4019): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r4, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @loopback, 0xfffffffd}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000080)="60e52106692855159c242b359ed2", 0xe}, {&(0x7f0000000140)="3d7a9d2d455c9073bc2df62063aa82cd6c0140eace039759ff681344a3d2286a9319a9da6011de6bb64479736df9a24de9cb1243fd715d263b72ad0ced275df42d6670b66fc89fbd", 0x48}, {&(0x7f0000000300)="4945264a73d922a90ec9a068a2093d929de5b61a1c4918d6d72b8251b774e053fee7f140d360d9657a24f87d85d22d2efdfcc50fed95d6f549a6673691017279b44c68f2242dc64d6430168e4788c38a05cf0b9e5ac5a545819d20004a0a3a38d86f5c176c542e01ffa47f1212e8b219164fdfb5b0fba6e95c94c9264194363b490ddca0ce69c7a76d8c057f489b1c3979a087392db7fdc80a", 0x99}, {&(0x7f0000000400)="a5d9c4f56147e82f634bf338d772cd79099b03e07263aa4c85d555a06a7dbaf7a9905bb73db3555677be8ca3ec6154a09f50b3a28a539057c6a803d268e683da27ae9b409f6d22cfd0b701520e7f7ca20cfa07679da60a0de41e943abe993278527d5d6c16997d935b6ef96405224772e848a0209d994204f159e96b61", 0x7d}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0], 0x8) 9.343045927s ago: executing program 4 (id=4020): syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) exit(0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r4, r3, 0x4, r3}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 9.281336524s ago: executing program 1 (id=4021): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffff8, 0x6c}) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x27]}], 0x1) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.233204331s ago: executing program 0 (id=4022): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x4002, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r2, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "6e451fd1"}]}}, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000840)={0x84, &(0x7f0000000400)={0x0, 0x15, 0x4, '=_in'}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x10}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_hci(r2, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0xd0, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x7, 0x1, 0x7, 0x3, 0x5], 0x2}, {0x4, [0x6, 0x0, 0x0, 0x4, 0x1, 0x7], 0x2, 0x7}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x81, 0x401]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0xfff9, 0x4, [0x33, 0x39, 0x1c, 0x2e, 0xc, 0x2a, 0x1a, 0xd, 0x19, 0x10, 0xa, 0x24, 0x1, 0xd, 0x20, 0xc], 0x1, 0x3}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0x0, 'batadv0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0xff, 0xb809bd5258feaf47, 0x44}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x0, 0x7, 0x4, 0x1], 0x3, 0x1}, {0x0, [0x0, 0x4, 0x2, 0x5, 0x1, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) ioctl$int_out(r1, 0x5462, &(0x7f00000001c0)) 9.05800835s ago: executing program 2 (id=4023): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r1, 0x0, 0x0, 0x6c, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c9) write$binfmt_elf64(r2, 0x0, 0xe8) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000180)={0xa, 0x8, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xff00) 8.773935498s ago: executing program 1 (id=4024): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, &(0x7f0000000000)=0x41) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 8.705693352s ago: executing program 3 (id=4025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) read(0xffffffffffffffff, 0x0, 0x0) 8.386268249s ago: executing program 0 (id=4026): socket$unix(0x1, 0x1, 0x0) unshare(0x50060100) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001400)={&(0x7f0000001380)=[{0x1, 0x8000, 0x0, 0x0}], 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c006fd6", @ANYRES16=r4, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000730000000b0034002a2cc61618275900080026006c090000"], 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 7.577434386s ago: executing program 4 (id=4027): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c2000040042801c0001800600060088"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r5, 0x2000000) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1f, 0x0, 0x1000000}) 7.137362976s ago: executing program 1 (id=4028): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x2, &(0x7f0000000040)=0x1003, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x3, 0x4) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112b400000000006113500000000000bf2000000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x8004745a, &(0x7f0000005280)) 6.379676804s ago: executing program 3 (id=4029): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4dac", 0x69, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489f", 0x3e}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.48280779s ago: executing program 0 (id=4030): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x23}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x4000080) 5.221183022s ago: executing program 4 (id=4031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000021000210400faff000000000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}]}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f00000006c0)=""/237, &(0x7f0000000300)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) 5.051817271s ago: executing program 1 (id=4032): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x16ba, &(0x7f0000000040)={0x0, 0x345a, 0xc000, 0x2, 0x123}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) syz_usb_connect(0x3, 0x36, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4.962335654s ago: executing program 2 (id=4033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x10000001, 0x20}, 0xc) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.814553301s ago: executing program 0 (id=4034): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x560f, &(0x7f0000000180)={0x1, 0x4002, 0x3f, 0x2, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) r2 = shmget(0x1, 0x3000, 0x2, &(0x7f00004dd000/0x3000)=nil) stat(0x0, 0x0) getgroups(0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xffffffffffffffff, 0xee00]) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000004c0)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000500)={{0x1, 0x0, r3, 0x0, r4, 0x1c, 0xf37}, 0x2fd9c62f, 0xe0, 0x5, 0x9, 0x0, r5, 0x8c2}) 4.683018388s ago: executing program 1 (id=4035): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) 3.194587449s ago: executing program 2 (id=4036): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.070019064s ago: executing program 4 (id=4037): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) 2.986057144s ago: executing program 0 (id=4038): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0x25, 0x0, &(0x7f0000000000)=0x41) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 2.968839578s ago: executing program 1 (id=4039): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 4 (id=4040): syz_socket_connect_nvme_tcp() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x40480c0) kernel console output (not intermixed with test programs): g attributes in process `syz.2.422'. [ 168.596560][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 168.697722][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 168.697789][ T66] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.698867][ T66] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.698915][ T66] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.698954][ T66] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.698989][ T6790] Zero length message leads to an empty skb [ 169.333451][ T5743] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 169.484632][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.484684][ T5743] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.484718][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.618327][ T5743] usb 3-1: config 0 descriptor?? [ 169.879384][ T5743] usbhid 3-1:0.0: can't add hid device: -71 [ 169.879515][ T5743] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.902163][ T5743] usb 3-1: USB disconnect, device number 2 [ 170.041937][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.192106][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 170.194993][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.195029][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.195052][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.195095][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.195118][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.211208][ T9] usb 5-1: config 0 descriptor?? [ 170.462269][ T5743] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 170.651952][ T5743] usb 3-1: Using ep0 maxpacket: 32 [ 170.672525][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.672642][ T5743] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 170.672668][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.794312][ T5743] usb 3-1: config 0 descriptor?? [ 170.800094][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800131][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800159][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800287][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800314][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800340][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800365][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800390][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800415][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 170.800441][ T9] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 171.064177][ T5743] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 171.256810][ T5743] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.370399][ T5743] usb 3-1: USB disconnect, device number 3 [ 171.407535][ T9] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 171.407573][ T9] microsoft 0003:045E:07DA.0003: no inputs found [ 171.407588][ T9] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 171.518441][ T5743] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 171.609151][ T9] usb 5-1: USB disconnect, device number 5 [ 172.271971][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 172.422326][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 172.426265][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.426289][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.426321][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.426338][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.497987][ T9] usb 5-1: config 0 descriptor?? [ 172.513979][ T9] hub 5-1:0.0: USB hub found [ 172.739191][ T9] hub 5-1:0.0: 1 port detected [ 173.393737][ T9] hub 5-1:0.0: activate --> -90 [ 173.791161][ T9] usb 5-1-port1: cannot reset (err = -71) [ 173.792291][ T9] usb 5-1-port1: cannot reset (err = -71) [ 173.792311][ T9] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 173.800363][ T9] usb 5-1-port1: cannot disable (err = -71) [ 173.813618][ T9] usb 5-1-port1: cannot reset (err = -71) [ 173.814321][ T9] usb 5-1-port1: cannot reset (err = -71) [ 173.814364][ T9] usb 5-1-port1: Cannot enable. Maybe the USB cable is bad? [ 173.829442][ T9] usb 5-1-port1: cannot disable (err = -71) [ 173.829506][ T9] usb 5-1-port1: attempt power cycle [ 173.876176][ T5621] usb 5-1: USB disconnect, device number 6 [ 174.176371][ T6884] __nla_validate_parse: 1 callbacks suppressed [ 174.176392][ T6884] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.466'. [ 174.603552][ T6888] bridge_slave_0: default FDB implementation only supports local addresses [ 174.651023][ T6890] netlink: 'syz.2.468': attribute type 12 has an invalid length. [ 174.961542][ T6899] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 177.592024][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 181.872015][ T5729] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.022003][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 182.025919][ T5729] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 182.025978][ T5729] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.026014][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.026040][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.026066][ T5729] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.026109][ T5729] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 182.026132][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.374723][ T5729] usb 3-1: GET_CAPABILITIES returned 0 [ 182.374771][ T5729] usbtmc 3-1:16.0: can't read capabilities [ 182.695011][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.761983][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.762065][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.766944][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.767037][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.767106][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.767211][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.770236][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.770321][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.770393][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.770698][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.770770][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.770839][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.771117][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.771189][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.773594][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 182.950606][ T31] usb 3-1: USB disconnect, device number 4 [ 182.994670][ T1246] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.151969][ T1246] usb 1-1: Using ep0 maxpacket: 32 [ 183.155322][ T1246] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.155373][ T1246] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.158060][ T1246] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.158088][ T1246] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 183.158109][ T1246] usb 1-1: Product: syz [ 183.158125][ T1246] usb 1-1: Manufacturer: syz [ 183.267558][ T1246] hub 1-1:4.0: USB hub found [ 183.467551][ T1246] hub 1-1:4.0: 2 ports detected [ 183.877498][ T1246] hub 1-1:4.0: set hub depth failed [ 183.930212][ T1246] usb 1-1: USB disconnect, device number 10 [ 185.372772][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.555'. [ 186.530427][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 186.739099][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.739169][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.739196][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.739233][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 186.744038][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.744064][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.744084][ T9] usb 1-1: Product: syz [ 186.744098][ T9] usb 1-1: Manufacturer: syz [ 186.744112][ T9] usb 1-1: SerialNumber: syz [ 186.848278][ T9] cdc_ncm 1-1:1.0: skipping garbage [ 187.310132][ T7124] Illegal XDP return value 4294967262 on prog (id 33) dev syz_tun, expect packet loss! [ 187.869272][ T9] cdc_ncm 1-1:1.0: bind() failure [ 187.959520][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 187.959565][ T9] cdc_ncm 1-1:1.1: bind() failure [ 188.099523][ T5621] usb 1-1: USB disconnect, device number 11 [ 188.600040][ T7151] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 189.003605][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.156647][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.157932][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.157957][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.216453][ T9] usb 5-1: string descriptor 0 read error: -22 [ 189.216626][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 189.216659][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.355691][ T7166] loop2: detected capacity change from 0 to 7 [ 189.360166][ T9] usb 5-1: selecting invalid altsetting 1 [ 189.491271][ T9] usb 5-1: unit 3 not found! [ 189.606245][ T9] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 189.606272][ T9] usb 5-1: invalid MIXER UNIT descriptor 6 [ 189.715773][ T7166] Dev loop2: unable to read RDB block 7 [ 189.715812][ T7166] loop2: AHDI p1 p2 p3 [ 189.715845][ T7166] loop2: partition table partially beyond EOD, truncated [ 189.867505][ T7166] loop2: p1 start 1601398130 is beyond EOD, truncated [ 189.867534][ T7166] loop2: p2 start 1702059890 is beyond EOD, truncated [ 191.300599][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 191.319179][ T9] usb 5-1: USB disconnect, device number 11 [ 192.070539][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 192.713869][ T820] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 192.901977][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 192.908247][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.908278][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.908317][ T820] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.908334][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.917791][ T820] usb 4-1: config 0 descriptor?? [ 192.974599][ T820] hub 4-1:0.0: USB hub found [ 193.177852][ T820] hub 4-1:0.0: 1 port detected [ 193.801983][ T9] hub 4-1:0.0: activate --> -90 [ 193.861644][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 193.865895][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'. [ 194.088666][ T7242] geneve2: entered promiscuous mode [ 194.088773][ T7242] geneve2: entered allmulticast mode [ 194.584468][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.592932][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.891684][ T9] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 195.042812][ T7262] hsr0: entered promiscuous mode [ 195.050658][ T7263] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 195.129872][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 195.202800][ T9] usb 4-1: USB disconnect, device number 4 [ 195.276739][ T7263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.314069][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 195.345508][ T7266] bond1: (slave batadv1): making interface the new active one [ 195.394871][ T7266] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 195.439084][ T7268] hsr_slave_0: left promiscuous mode [ 195.472136][ T7268] hsr_slave_1: left promiscuous mode [ 195.616269][ T7268] hsr0 (unregistering): left promiscuous mode [ 196.309402][ C0] Unknown status report in ack skb [ 196.975074][ T5621] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 197.139579][ T5621] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 197.139616][ T5621] usb 5-1: config 1 interface 0 has no altsetting 0 [ 197.147748][ T5621] usb 5-1: string descriptor 0 read error: -22 [ 197.147902][ T5621] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.147943][ T5621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.171938][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 197.325876][ T7295] syz.2.644 (7295) used greatest stack depth: 18016 bytes left [ 197.372009][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 197.387771][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.387862][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.387890][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.387916][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.387958][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.388040][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.696589][ T31] usb 4-1: GET_CAPABILITIES returned 0 [ 197.697639][ T31] usbtmc 4-1:16.0: can't read capabilities [ 197.731496][ T5621] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 197.812049][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 197.952448][ T5621] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0926:3333.0004/input/input9 [ 197.958512][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 197.958580][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 197.958632][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.008622][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.008774][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.031599][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.031674][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.060776][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.060810][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.060855][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 198.060878][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.187488][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.196396][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.196540][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.197004][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.197130][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.197587][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.197692][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.223999][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.227484][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 198.305862][ T1246] usb 4-1: USB disconnect, device number 5 [ 198.361980][ T9] usb 1-1: usb_control_msg returned -32 [ 198.362029][ T9] usbtmc 1-1:16.0: can't read capabilities [ 198.828899][ T5621] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 198.903437][ T5621] usb 5-1: USB disconnect, device number 12 [ 199.019546][ T7329] fido_id[7329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 200.626114][ T820] usb 1-1: USB disconnect, device number 12 [ 201.275769][ T7371] netlink: 'syz.4.675': attribute type 3 has an invalid length. [ 201.279066][ T7371] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 201.279088][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 201.360617][ T7371] ip6gre1: entered promiscuous mode [ 201.360639][ T7371] ip6gre1: entered allmulticast mode [ 202.253483][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.416779][ T36] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 202.416809][ T36] usb 5-1: config 1 has no interface number 0 [ 202.416852][ T36] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 202.416883][ T36] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 202.416904][ T36] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.472370][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.489945][ T36] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 202.489968][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.489982][ T36] usb 5-1: Product: syz [ 202.489992][ T36] usb 5-1: Manufacturer: syz [ 202.490003][ T36] usb 5-1: SerialNumber: syz [ 202.536332][ T7394] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.627144][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.627196][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.627220][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.680629][ T9] usb 1-1: config 0 descriptor?? [ 202.956871][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 202.957003][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 202.984864][ T9] usb 1-1: USB disconnect, device number 13 [ 203.163554][ T36] usb 5-1: Error in usbnet_get_endpoints (-71) [ 203.354661][ T36] usb 5-1: USB disconnect, device number 13 [ 203.883458][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 204.107544][ T7412] dummy0: entered promiscuous mode [ 204.144629][ T7411] dummy0: left promiscuous mode [ 204.163305][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 204.166646][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.166698][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 204.166722][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.187021][ T9] usb 1-1: config 0 descriptor?? [ 204.227169][ T9] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 204.260669][ T9] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 205.843766][ T31] usb 1-1: USB disconnect, device number 14 [ 205.919479][ T31] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 205.971513][ T7424] Process accounting resumed [ 206.561923][ T5729] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.712485][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 206.718727][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.718751][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.718779][ T5729] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 206.718796][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.791384][ T5729] usb 3-1: config 0 descriptor?? [ 207.270868][ T5729] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 207.420183][ T5729] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 207.420244][ T5729] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 207.523767][ T5729] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 207.550609][ T5729] usb 3-1: USB disconnect, device number 5 [ 207.577829][ T7462] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.715'. [ 208.543952][ T7486] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.726'. [ 208.544092][ T7486] netlink: Unknown conntrack attr (0) [ 208.792692][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 208.792717][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.730'. [ 209.633811][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 209.777201][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 210.102581][ T7525] input: syz0 as /devices/virtual/input/input10 [ 210.274072][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 210.451986][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 210.455211][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.455235][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.455263][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.455280][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.576516][ T31] usb 3-1: config 0 descriptor?? [ 210.600120][ T31] hub 3-1:0.0: USB hub found [ 210.785562][ T31] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 211.202405][ T5729] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.296626][ T31] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 211.423928][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 211.426465][ T5729] usb 4-1: config 0 has no interfaces? [ 211.426496][ T5729] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.426519][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.545432][ T5729] usb 4-1: config 0 descriptor?? [ 212.090305][ T31] usb 3-1: USB disconnect, device number 6 [ 213.609700][ T7584] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 213.609700][ T7584] The task syz.0.769 (7584) triggered the difference, watch for misbehavior. [ 213.973780][ T5729] usb 4-1: USB disconnect, device number 6 [ 214.058835][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 214.172601][ T7592] ip6erspan0: entered promiscuous mode [ 215.047508][ T7619] input: syz0 as /devices/virtual/input/input11 [ 216.178918][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 216.432012][ T820] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.585754][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.585789][ T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.585813][ T820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.585858][ T820] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 216.585882][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.628414][ T820] usb 5-1: config 0 descriptor?? [ 216.855707][ T7650] netlink: 67 bytes leftover after parsing attributes in process `syz.3.797'. [ 217.184661][ T820] hid_parser_main: 8 callbacks suppressed [ 217.184684][ T820] steelseries 0003:1038:1410.0007: unknown main item tag 0x1 [ 217.184717][ T820] steelseries 0003:1038:1410.0007: unknown main item tag 0x0 [ 217.184744][ T820] steelseries 0003:1038:1410.0007: unknown main item tag 0x0 [ 217.184771][ T820] steelseries 0003:1038:1410.0007: unknown main item tag 0x0 [ 217.184795][ T820] steelseries 0003:1038:1410.0007: item fetching failed at offset 6/7 [ 217.185619][ T820] steelseries 0003:1038:1410.0007: parse failed [ 217.185730][ T820] steelseries 0003:1038:1410.0007: probe with driver steelseries failed with error -22 [ 217.401231][ T31] usb 5-1: USB disconnect, device number 14 [ 217.508160][ T7658] Failed to get privilege flags for destination (handle=0x2:0x600) [ 217.973485][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.804'. [ 217.973515][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.804'. [ 218.261539][ T7673] netlink: 'syz.4.806': attribute type 7 has an invalid length. [ 218.261562][ T7673] netlink: 29 bytes leftover after parsing attributes in process `syz.4.806'. [ 218.261578][ T7673] netlink: 140 bytes leftover after parsing attributes in process `syz.4.806'. [ 218.261600][ T7673] netlink: 'syz.4.806': attribute type 7 has an invalid length. [ 218.261614][ T7673] netlink: 29 bytes leftover after parsing attributes in process `syz.4.806'. [ 219.595986][ T7702] syzkaller1: entered promiscuous mode [ 219.596015][ T7702] syzkaller1: entered allmulticast mode [ 219.693672][ T820] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.882193][ T820] usb 3-1: Using ep0 maxpacket: 8 [ 219.885095][ T820] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.885133][ T820] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.885160][ T820] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 219.885191][ T820] usb 3-1: config 1 interface 0 has no altsetting 0 [ 219.889130][ T820] usb 3-1: string descriptor 0 read error: -22 [ 219.889303][ T820] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 219.889332][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.501460][ T820] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 220.501500][ T820] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 220.501529][ T820] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 220.501557][ T820] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 220.501584][ T820] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 220.501611][ T820] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 220.682001][ T36] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 220.708158][ T820] zydacron 0003:13EC:0006.0008: hidraw0: USB HID v17.99 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 220.759345][ T820] usb 3-1: USB disconnect, device number 7 [ 220.794904][ T7723] fido_id[7723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 220.841885][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 220.843951][ T36] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.843981][ T36] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.843998][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.850402][ T36] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 220.850433][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.850453][ T36] usb 1-1: Product: syz [ 220.850468][ T36] usb 1-1: Manufacturer: syz [ 220.850482][ T36] usb 1-1: SerialNumber: syz [ 220.935918][ T36] usb 1-1: config 0 descriptor?? [ 221.371578][ T36] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 221.549013][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 221.778238][ T36] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 222.102638][ T5729] usb 1-1: USB disconnect, device number 15 [ 222.377169][ T7741] nbd: socks must be embedded in a SOCK_ITEM attr [ 223.528293][ T7784] loop2: detected capacity change from 0 to 7 [ 223.566527][ T7784] Dev loop2: unable to read RDB block 7 [ 223.566575][ T7784] loop2: unable to read partition table [ 223.566810][ T7784] loop2: partition table beyond EOD, truncated [ 223.566830][ T7784] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 225.059962][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 225.059980][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 225.059999][ T7817] netlink: 'syz.4.863': attribute type 6 has an invalid length. [ 225.108621][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 225.108646][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.863'. [ 225.108673][ T7817] netlink: 'syz.4.863': attribute type 6 has an invalid length. [ 225.108798][ T55] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.162213][ T5729] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.198134][ T1218] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.198182][ T1218] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.198209][ T1218] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.353279][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 225.360150][ T5729] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 225.360209][ T5729] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.360233][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.360257][ T5729] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.360281][ T5729] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.360323][ T5729] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 225.360346][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.938862][ T5729] usb 3-1: usb_control_msg returned -71 [ 225.938920][ T5729] usbtmc 3-1:16.0: can't read capabilities [ 225.961957][ T36] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 226.068503][ T5729] usb 3-1: USB disconnect, device number 8 [ 226.145809][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.145842][ T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.145881][ T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.145904][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.420666][ T36] usb 5-1: usb_control_msg returned -32 [ 226.420711][ T36] usbtmc 5-1:16.0: can't read capabilities [ 226.994976][ T9] usb 5-1: USB disconnect, device number 15 [ 227.359842][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 227.365182][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 227.365219][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 227.366032][ T5620] Bluetooth: hci0: command 0x1407 tx timeout [ 227.949916][ T7867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.884'. [ 228.621365][ T7886] input: syz0 as /devices/virtual/input/input12 [ 230.051206][ T7910] netlink: 'syz.0.905': attribute type 29 has an invalid length. [ 230.063232][ T7910] netlink: 'syz.0.905': attribute type 29 has an invalid length. [ 230.083326][ T7910] netlink: 500 bytes leftover after parsing attributes in process `syz.0.905'. [ 231.991972][ T36] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 232.177517][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.177552][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.177604][ T36] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 232.177627][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.202158][ T36] usb 5-1: config 0 descriptor?? [ 232.757300][ T36] hid_parser_main: 4009 callbacks suppressed [ 232.757327][ T36] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 232.757455][ T36] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 232.809055][ T36] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input13 [ 233.151158][ T7964] netlink: 'syz.0.930': attribute type 1 has an invalid length. [ 233.263885][ T36] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 233.337573][ T7964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.370564][ T5729] usb 5-1: USB disconnect, device number 16 [ 233.504872][ T5809] udevd[5809]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 233.616662][ T7967] fido_id[7967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 233.710250][ T7966] bond2: (slave geneve2): making interface the new active one [ 233.802542][ T7966] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 234.133437][ T7974] Bluetooth: hci0: unsupported parameter 3079 [ 234.142959][ T7974] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 234.562650][ T7986] netlink: 'syz.3.938': attribute type 11 has an invalid length. [ 234.562676][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 234.563874][ T7986] netlink: 'syz.3.938': attribute type 11 has an invalid length. [ 234.563893][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 235.011634][ T7996] sg_write: data in/out 483412/136 bytes for SCSI command 0x0-- guessing data in; [ 235.011634][ T7996] program syz.4.942 not setting count and/or reply_len properly [ 235.042816][ T1246] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 235.216303][ T1246] usb 3-1: Using ep0 maxpacket: 32 [ 235.218884][ T1246] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 235.218915][ T1246] usb 3-1: config 0 has no interface number 0 [ 235.218964][ T1246] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 235.218989][ T1246] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 235.219019][ T1246] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 235.219050][ T1246] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 235.219077][ T1246] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 235.219103][ T1246] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 235.219128][ T1246] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 235.219156][ T1246] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 235.219185][ T1246] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 235.219209][ T1246] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.281018][ T1246] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 235.281102][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.281163][ T1246] usb 3-1: Product: syz [ 235.281198][ T1246] usb 3-1: Manufacturer: syz [ 235.281242][ T1246] usb 3-1: SerialNumber: syz [ 235.418302][ T1246] usb 3-1: config 0 descriptor?? [ 235.419559][ T7989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.436391][ T7989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.475131][ T1246] usb 3-1: will this work? Response EP is not usually 3 [ 235.475157][ T1246] usb 3-1: will this work? Image data EP is not usually 2 [ 235.549932][ T1246] scsi host1: microtekX6 [ 235.579088][ T37] audit: type=1804 audit(1780146474.301:3): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.945" name="/newroot/152/file0" dev="tmpfs" ino=803 res=1 errno=0 [ 235.659195][ T1246] usb 3-1: USB disconnect, device number 9 [ 235.718764][ T57] usb 3-1: error -19 submitting URB [ 235.752475][ T32] usb 3-1: error -19 submitting URB [ 235.791922][ T32] usb 3-1: error -19 submitting URB [ 236.680968][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 236.855080][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.965985][ T8027] bridge_slave_1 (unregistering): left allmulticast mode [ 236.966023][ T8027] bridge_slave_1 (unregistering): left promiscuous mode [ 236.966119][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.277292][ T8032] veth0: entered promiscuous mode [ 237.297551][ T8031] veth0: left promiscuous mode [ 238.451943][ T36] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.611942][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 238.614198][ T36] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 238.614223][ T36] usb 5-1: config 0 has no interface number 0 [ 238.644791][ T36] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 238.644820][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.644842][ T36] usb 5-1: Product: syz [ 238.644857][ T36] usb 5-1: Manufacturer: syz [ 238.644872][ T36] usb 5-1: SerialNumber: syz [ 238.689163][ T36] usb 5-1: config 0 descriptor?? [ 239.117092][ T36] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 239.117127][ T36] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.740243][ T36] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 239.740554][ T36] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 239.885123][ T36] usb 5-1: USB disconnect, device number 17 [ 241.310342][ T8116] GUP no longer grows the stack in syz.0.994 (8116): 200000005000-200000008000 (200000004000) [ 241.310381][ T8116] CPU: 1 UID: 0 PID: 8116 Comm: syz.0.994 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 241.310403][ T8116] Tainted: [L]=SOFTLOCKUP [ 241.310408][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 241.310423][ T8116] Call Trace: [ 241.310429][ T8116] [ 241.310436][ T8116] dump_stack_lvl+0xe8/0x150 [ 241.310459][ T8116] fixup_user_fault+0x637/0x6f0 [ 241.310487][ T8116] fault_in_user_writeable+0x71/0xd0 [ 241.310511][ T8116] futex_lock_pi+0x816/0xb10 [ 241.310537][ T8116] ? __pfx_futex_lock_pi+0x10/0x10 [ 241.310575][ T8116] ? __pfx_futex_wake_mark+0x10/0x10 [ 241.310602][ T8116] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 241.310626][ T8116] do_futex+0x292/0x420 [ 241.310655][ T8116] ? __pfx_do_futex+0x10/0x10 [ 241.310679][ T8116] ? __vm_munmap+0x2e6/0x3d0 [ 241.310708][ T8116] __se_sys_futex+0x3a8/0x450 [ 241.310737][ T8116] ? __pfx___se_sys_futex+0x10/0x10 [ 241.310761][ T8116] ? rcu_is_watching+0x15/0xb0 [ 241.310790][ T8116] ? __x64_sys_futex+0x21/0xf0 [ 241.310814][ T8116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.310831][ T8116] do_syscall_64+0x174/0x580 [ 241.310855][ T8116] ? trace_irq_disable+0x3b/0x140 [ 241.310873][ T8116] ? clear_bhb_loop+0x40/0x90 [ 241.310893][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.310909][ T8116] RIP: 0033:0x7fc0e79cce59 [ 241.310928][ T8116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.310941][ T8116] RSP: 002b:00007fc0e5c26028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.310958][ T8116] RAX: ffffffffffffffda RBX: 00007fc0e7c45fa0 RCX: 00007fc0e79cce59 [ 241.310969][ T8116] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 241.310979][ T8116] RBP: 00007fc0e7a62d6f R08: 0000000000000000 R09: 0000000000000001 [ 241.310991][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.311000][ T8116] R13: 00007fc0e7c46038 R14: 00007fc0e7c45fa0 R15: 00007ffe616ac598 [ 241.311025][ T8116] [ 241.779398][ T8122] input: syz0 as /devices/virtual/input/input14 [ 242.101924][ T1246] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 242.203303][ T5745] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 242.301430][ T1246] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 242.301463][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.301483][ T1246] usb 1-1: Product: syz [ 242.301498][ T1246] usb 1-1: Manufacturer: syz [ 242.301512][ T1246] usb 1-1: SerialNumber: syz [ 242.343018][ T1246] usb 1-1: config 0 descriptor?? [ 242.351897][ T5745] usb 5-1: Using ep0 maxpacket: 16 [ 242.354907][ T5745] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.361292][ T5745] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.361324][ T5745] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 242.361345][ T5745] usb 5-1: config 1 has no interface number 0 [ 242.361417][ T5745] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 242.397834][ T5745] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 242.397865][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.397887][ T5745] usb 5-1: Product: syz [ 242.397901][ T5745] usb 5-1: Manufacturer: syz [ 242.397916][ T5745] usb 5-1: SerialNumber: syz [ 242.892626][ T8126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.892667][ T8126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.944210][ T5745] usb 5-1: 2:1 : can't get High Capability descriptor [ 243.280136][ T5745] usb 5-1: USB disconnect, device number 18 [ 243.449309][ T1246] usb 1-1: unexpected transceiver, part 0xe9 version 0x6a [ 243.651931][ T1246] usb 1-1: Firmware version (0.0) predates our first public release. [ 243.651956][ T1246] usb 1-1: Please update to version 0.2 or newer [ 243.653088][ T1246] usb 1-1: atusb_probe: initialization failed, error = -19 [ 243.710464][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.811869][ T1246] usb 1-1: USB disconnect, device number 16 [ 244.269367][ T8126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.269396][ T8126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.679777][ T8126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.679807][ T8126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.126520][ T8126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.126549][ T8126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.172774][ T5745] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 245.212011][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.321900][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 245.330654][ T5745] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 245.330685][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.330703][ T5745] usb 5-1: Product: syz [ 245.330722][ T5745] usb 5-1: Manufacturer: syz [ 245.330732][ T5745] usb 5-1: SerialNumber: syz [ 245.362398][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 245.382005][ T31] usb 4-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 245.382032][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 245.382082][ T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 228, using maximum allowed: 30 [ 245.382122][ T31] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 245.382163][ T31] usb 4-1: config 1 interface 1 altsetting 129 endpoint 0x1 has an invalid bInterval 94, changing to 7 [ 245.382191][ T31] usb 4-1: config 1 interface 1 has no altsetting 1 [ 245.384691][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 245.384719][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 245.384738][ T31] usb 4-1: Product: syz [ 245.384753][ T31] usb 4-1: Manufacturer: syz [ 245.384766][ T31] usb 4-1: SerialNumber: syz [ 245.500224][ T5745] usb 5-1: config 0 descriptor?? [ 245.511630][ T5745] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 245.899902][ T31] usb 4-1: 1:129 : no or invalid class specific endpoint descriptor [ 245.899959][ T31] usb 4-1: 1:129: invalid format type 0x1001 is detected, processed as PCM [ 245.899987][ T31] usb 4-1: 1:129 : invalid UAC_FORMAT_TYPE desc [ 246.279757][ T55] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.279791][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.293052][ T31] usb 4-1: USB disconnect, device number 7 [ 246.359919][ T1218] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.359949][ T1218] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.673674][ T3375] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.673717][ T3375] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.792028][ T5745] gspca_ov534_9: reg_w failed -71 [ 246.837983][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.860782][ T3375] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.860818][ T3375] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.094310][ T5745] gspca_ov534_9: Unknown sensor 0000 [ 247.094409][ T5745] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 247.129727][ T5745] usb 5-1: USB disconnect, device number 19 [ 248.744875][ T8219] tipc: Started in network mode [ 248.745051][ T8219] tipc: Node identity ac1414aa, cluster identity 4711 [ 248.769529][ T8219] tipc: Enabled bearer , priority 10 [ 249.071104][ T37] audit: type=1326 audit(1780146487.891:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 249.097119][ T37] audit: type=1326 audit(1780146487.901:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 249.097171][ T37] audit: type=1326 audit(1780146487.931:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 249.140837][ T37] audit: type=1326 audit(1780146487.931:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 249.141024][ T37] audit: type=1326 audit(1780146487.941:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 249.158895][ T37] audit: type=1326 audit(1780146487.991:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2fd5b0d68e code=0x7ffc0000 [ 249.203424][ T37] audit: type=1326 audit(1780146488.031:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2fd5b0d68e code=0x7ffc0000 [ 249.267117][ T37] audit: type=1326 audit(1780146488.051:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2fd5b0d68e code=0x7ffc0000 [ 249.267180][ T37] audit: type=1326 audit(1780146488.091:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2fd5b0d68e code=0x7ffc0000 [ 249.267228][ T37] audit: type=1326 audit(1780146488.091:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.2.1045" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2fd5b0d68e code=0x7ffc0000 [ 249.418570][ T8233] netlink: 'syz.0.1046': attribute type 6 has an invalid length. [ 249.888076][ T10] tipc: Node number set to 2886997162 [ 250.861924][ T820] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.019193][ T820] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 251.019223][ T820] usb 4-1: config 0 has no interface number 0 [ 251.019270][ T820] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.040771][ T820] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 251.040803][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.040824][ T820] usb 4-1: Product: syz [ 251.040839][ T820] usb 4-1: Manufacturer: syz [ 251.040854][ T820] usb 4-1: SerialNumber: syz [ 251.115226][ T820] usb 4-1: config 0 descriptor?? [ 251.164113][ T820] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 251.344495][ T8270] gtp0: entered allmulticast mode [ 251.477693][ T820] usb 4-1: USB disconnect, device number 8 [ 251.524879][ T820] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 252.091933][ T5616] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 252.248868][ T5616] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 252.248902][ T5616] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 252.253368][ T5616] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.253412][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.253434][ T5616] usb 3-1: Product: syz [ 252.253483][ T5616] usb 3-1: Manufacturer: syz [ 252.253534][ T5616] usb 3-1: SerialNumber: syz [ 252.576792][ T8287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 252.576922][ T8287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.388511][ T8287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.388656][ T8287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 253.584200][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806109b400: rx timeout, send abort [ 253.595059][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806109b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 253.629999][ T5616] cdc_ncm 3-1:1.0: failed to get mac address [ 253.632596][ T5616] cdc_ncm 3-1:1.0: bind() failure [ 253.705268][ T5616] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 253.707106][ T5616] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 253.710287][ T5616] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 253.777326][ T5616] usb 3-1: USB disconnect, device number 10 [ 254.301958][ T5621] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 254.456250][ T5621] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.456396][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.522489][ T5621] usb 4-1: config 0 descriptor?? [ 254.546994][ T5621] cp210x 4-1:0.0: cp210x converter detected [ 255.122031][ T5621] usb 4-1: cp210x converter now attached to ttyUSB0 [ 255.633625][ T5616] usb 4-1: USB disconnect, device number 9 [ 255.837618][ T5616] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.995601][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.995675][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.167936][ T5616] cp210x 4-1:0.0: device disconnected [ 257.358690][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 257.437061][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'. [ 258.069333][ T8427] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 258.069357][ T8427] netlink: 'syz.4.1119': attribute type 2 has an invalid length. [ 258.764756][ T8443] netlink: 'syz.4.1127': attribute type 2 has an invalid length. [ 258.764780][ T8443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1127'. [ 259.432306][ T5743] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.591931][ T5743] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 259.591962][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.591982][ T5743] usb 3-1: Product: syz [ 259.591995][ T5743] usb 3-1: Manufacturer: syz [ 259.592010][ T5743] usb 3-1: SerialNumber: syz [ 259.899114][ T5743] rtl8150 3-1:1.0: couldn't reset the device [ 259.899441][ T5743] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 259.935451][ T5743] usb 3-1: USB disconnect, device number 11 [ 261.159976][ T5743] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 261.313847][ T5743] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 261.313876][ T5743] usb 5-1: config 0 has no interface number 0 [ 261.313922][ T5743] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 261.313949][ T5743] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 261.313977][ T5743] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 261.315810][ T5743] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 261.315840][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 261.315861][ T5743] usb 5-1: Product: syz [ 261.315876][ T5743] usb 5-1: SerialNumber: syz [ 261.427998][ T8497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 261.487246][ T5743] usb 5-1: config 0 descriptor?? [ 261.533314][ T5743] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 261.536001][ T5743] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 261.579939][ T8497] team0 (unregistering): Port device team_slave_0 removed [ 261.650157][ T8497] team0 (unregistering): Port device team_slave_1 removed [ 262.665743][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.669130][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.680803][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.681562][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.683350][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.683943][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.684375][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.684813][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.685214][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.685627][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.839080][ T5743] usb 5-1: USB disconnect, device number 20 [ 262.839169][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 263.095734][ T5743] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 263.942122][ T8532] overlayfs: overlapping lowerdir path [ 264.745413][ T8553] tipc: Started in network mode [ 264.745431][ T8553] tipc: Node identity _, cluster identity 4711 [ 264.745503][ T8553] tipc: Enabling of bearer rejected, failed to enable media [ 266.321514][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'. [ 266.364585][ T8586] vlan2: entered promiscuous mode [ 266.364609][ T8586] batadv0: entered promiscuous mode [ 267.791512][ T8615] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1198'. [ 268.770017][ T8639] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 271.241914][ T5743] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.396434][ T5743] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.396504][ T5743] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 271.396530][ T5743] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.425881][ T5743] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.425954][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.426006][ T5743] usb 4-1: Product: syz [ 271.426047][ T5743] usb 4-1: Manufacturer: syz [ 271.426088][ T5743] usb 4-1: SerialNumber: syz [ 271.680004][ T5743] cdc_mbim 4-1:1.0: skipping garbage [ 271.722158][ T5621] kernel read not supported for file /511/net/ptype (pid: 5621 comm: kworker/1:5) [ 271.824033][ T8673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.439420][ T8673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.652795][ T5743] cdc_mbim 4-1:1.0: bind() failure [ 272.684197][ T5743] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 272.690436][ T5743] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 272.700360][ T5743] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 272.845326][ T5743] usb 4-1: USB disconnect, device number 10 [ 273.952328][ T36] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 274.124517][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 274.127392][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.127426][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.127465][ T36] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 274.127488][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.178079][ T36] usb 5-1: config 0 descriptor?? [ 274.198469][ T8713] kvm: emulating exchange as write [ 274.697570][ T36] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 274.942670][ T5742] usb 5-1: USB disconnect, device number 21 [ 278.240916][ T8773] syz.4.1264 (8773) used greatest stack depth: 17536 bytes left [ 280.369888][ T8838] loop2: detected capacity change from 0 to 7 [ 280.441238][ T8841] syzkaller1: entered promiscuous mode [ 280.441265][ T8841] syzkaller1: entered allmulticast mode [ 280.453992][ T8838] Dev loop2: unable to read RDB block 7 [ 280.454028][ T8838] loop2: AHDI p1 p2 p3 [ 280.454056][ T8838] loop2: partition table partially beyond EOD, truncated [ 280.509743][ T8838] loop2: p1 start 1601398130 is beyond EOD, truncated [ 280.509774][ T8838] loop2: p2 start 1702059890 is beyond EOD, truncated [ 282.458687][ T4921] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 285.911959][ T820] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 286.088857][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 286.103351][ T820] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 286.103379][ T820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.103399][ T820] usb 4-1: config 0 has no interface number 0 [ 286.103445][ T820] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.151166][ T820] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 286.151196][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.151217][ T820] usb 4-1: Product: syz [ 286.151231][ T820] usb 4-1: Manufacturer: syz [ 286.151246][ T820] usb 4-1: SerialNumber: syz [ 286.247112][ T820] usb 4-1: config 0 descriptor?? [ 286.264240][ T820] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 286.264329][ T820] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 286.480974][ T4921] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 286.500909][ T4921] Bluetooth: hci2: Injecting HCI hardware error event [ 286.514491][ T820] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 286.515125][ T820] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 286.534829][ T5612] Bluetooth: hci2: hardware error 0x00 [ 286.536112][ T820] usb 4-1: USB disconnect, device number 11 [ 287.537012][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'. [ 288.721913][ T5612] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 288.792048][ T5612] Bluetooth: hci4: command 0x0405 tx timeout [ 289.652103][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 289.811899][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 289.832024][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 289.832054][ T10] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 289.832074][ T10] usb 3-1: Product: syz [ 289.832088][ T10] usb 3-1: Manufacturer: syz [ 289.832103][ T10] usb 3-1: SerialNumber: syz [ 289.895149][ T10] usb 3-1: config 0 descriptor?? [ 289.907872][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 290.423575][ T10] gspca_zc3xx: reg_w_i err -110 [ 290.423673][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 291.171349][ T10] usb 3-1: USB disconnect, device number 12 [ 292.690901][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 293.662197][ T9124] tipc: Started in network mode [ 293.662220][ T9124] tipc: Node identity 2007ff, cluster identity 4711 [ 293.662233][ T9124] tipc: Node number set to 2099199 [ 294.511962][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 294.665577][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 294.671646][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.700011][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 294.700043][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.700064][ T10] usb 4-1: Product: syz [ 294.700079][ T10] usb 4-1: Manufacturer: syz [ 294.700094][ T10] usb 4-1: SerialNumber: syz [ 294.743074][ T10] usb 4-1: config 0 descriptor?? [ 294.785176][ T10] cdc_ether 4-1:0.0: skipping garbage [ 294.785203][ T10] cdc_ether 4-1:0.0: bad CDC descriptors [ 294.788113][ T10] usb 4-1: unsupported MDLM descriptors [ 294.790425][ T10] cdc_acm 4-1:0.0: skipping garbage [ 295.024258][ T5742] usb 4-1: USB disconnect, device number 12 [ 296.550782][ T9196] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 296.756861][ T9196] bond1: entered promiscuous mode [ 296.757523][ T9196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.154391][ T9202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.154928][ T9202] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 297.154966][ T9202] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 297.209267][ T9202] bond1: (slave ip6gre1): making interface the new active one [ 297.209293][ T9202] ip6gre1: entered promiscuous mode [ 297.249498][ T9202] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 299.607948][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 299.694436][ T9259] xfrm1: entered promiscuous mode [ 299.694463][ T9259] xfrm1: entered allmulticast mode [ 299.697243][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 301.507901][ T9288] netlink: 'syz.3.1499': attribute type 1 has an invalid length. [ 301.507923][ T9288] netlink: 'syz.3.1499': attribute type 2 has an invalid length. [ 304.398874][ T9348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3609444367 (231004439488 ns) > initial count (212362056448 ns). Using initial count to start timer. [ 304.400783][ T9348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1353369573 (10826956584 ns) > initial count (7827435008 ns). Using initial count to start timer. [ 307.219890][ T9403] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.016148][ T5729] IPVS: starting estimator thread 0... [ 310.101963][ T9481] IPVS: using max 7 ests per chain, 16800 per kthread [ 310.671898][ T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 310.822575][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 310.825123][ T36] usb 3-1: config 0 has no interfaces? [ 310.847390][ T36] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 310.847419][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.847440][ T36] usb 3-1: Product: syz [ 310.847455][ T36] usb 3-1: Manufacturer: syz [ 310.847470][ T36] usb 3-1: SerialNumber: syz [ 310.901416][ T36] usb 3-1: config 0 descriptor?? [ 311.134127][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.137945][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.726110][ T5742] usb 3-1: USB disconnect, device number 13 [ 311.742249][ T9506] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1597'. [ 313.224842][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1615'. [ 313.226328][ T9547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1615'. [ 313.537442][ T9555] vcan0: tx drop: invalid da for name 0x0400000000000000 [ 314.961917][ T5729] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 315.116796][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 315.118750][ T5729] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.118782][ T5729] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.120590][ T5729] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 315.120621][ T5729] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 315.120636][ T5729] usb 3-1: Product: syz [ 315.120646][ T5729] usb 3-1: Manufacturer: syz [ 315.197363][ T5729] hub 3-1:4.0: USB hub found [ 315.438784][ T5729] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 315.566020][ T5729] usb 3-1: USB disconnect, device number 14 [ 316.981685][ T9647] binder: 9645:9647 ioctl c0306201 200000000480 returned -14 [ 317.463852][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.463925][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.563333][ T5729] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 320.712308][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 320.718894][ T5729] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.718923][ T5729] usb 3-1: config 0 has no interface number 0 [ 320.722548][ T5729] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.722624][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.722659][ T5729] usb 3-1: Product: syz [ 320.722694][ T5729] usb 3-1: Manufacturer: syz [ 320.722735][ T5729] usb 3-1: SerialNumber: syz [ 320.805869][ T5729] usb 3-1: config 0 descriptor?? [ 321.131988][ T5743] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 321.223910][ T5729] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 321.223943][ T5729] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.292003][ T5743] usb 4-1: Using ep0 maxpacket: 16 [ 321.294943][ T5743] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 321.294971][ T5743] usb 4-1: config 1 has no interface number 0 [ 321.295119][ T5743] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 321.295146][ T5743] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 321.295173][ T5743] usb 4-1: config 1 interface 105 has no altsetting 0 [ 321.297963][ T5743] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 321.297997][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 321.298079][ T5743] usb 4-1: Product: syz [ 321.298090][ T5743] usb 4-1: Manufacturer: syz [ 321.298100][ T5743] usb 4-1: SerialNumber: syz [ 321.430322][ T5729] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 321.441490][ T9748] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.441615][ T9748] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.450298][ T5729] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 321.540213][ T5729] usb 3-1: USB disconnect, device number 15 [ 321.879294][ T9748] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 321.879679][ T9748] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 322.286173][ T5743] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 322.287107][ T5743] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 322.426011][ T5743] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9a:2c:18:24:2a:92 [ 322.523681][ T5743] usb 4-1: USB disconnect, device number 13 [ 322.557964][ T5743] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 322.782814][ T5743] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 322.782968][ T5743] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 322.783067][ T5743] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 323.441680][ T9798] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 323.441697][ T9798] netlink: 'syz.3.1730': attribute type 4 has an invalid length. [ 323.441706][ T9798] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1730'. [ 323.697172][ T9805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.587172][ T5729] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 326.741885][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 326.745198][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.745232][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.745248][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 326.745279][ T5729] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 326.745296][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.754446][ T5729] usb 4-1: config 0 descriptor?? [ 326.981568][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1770'. [ 327.394253][ T5729] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000B/input/input16 [ 327.531278][ T5729] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000B/input/input17 [ 327.912667][ T5729] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 328.903614][ T5742] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 329.927526][ T5616] usb 4-1: USB disconnect, device number 14 [ 329.948614][ T9958] binder: 9957:9958 ioctl c0306201 200000000280 returned -14 [ 330.297959][ T9969] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1803'. [ 331.052874][ T9991] fuse: Bad value for 'fd' [ 331.067003][ T5616] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 331.211843][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 331.217569][ T5616] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 331.217600][ T5616] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 331.217621][ T5616] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 331.217681][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 331.217704][ T5616] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 331.217728][ T5616] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 331.217768][ T5616] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 331.217791][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.332476][ T5616] usb 4-1: config 0 descriptor?? [ 331.469790][ T9998] kernel read not supported for file /file0 (pid: 9998 comm: syz.2.1815) [ 331.506118][ T37] kauditd_printk_skb: 109 callbacks suppressed [ 331.506139][ T37] audit: type=1800 audit(1780146570.301:123): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1815" name="file0" dev="mqueue" ino=26169 res=0 errno=0 [ 331.558790][ T5616] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 331.777927][ T820] usb 4-1: USB disconnect, device number 15 [ 331.778998][ C1] usblp0: nonzero read bulk status received: -71 [ 332.053030][ T9965] usblp0: removed [ 332.169886][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1825'. [ 335.612443][ T5729] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 335.763747][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 335.768791][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.768818][ T5729] usb 3-1: config 0 has no interfaces? [ 335.772160][ T5729] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.772256][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.772309][ T5729] usb 3-1: Product: syz [ 335.772520][ T5729] usb 3-1: Manufacturer: syz [ 335.772591][ T5729] usb 3-1: SerialNumber: syz [ 335.878593][ T5729] usb 3-1: config 0 descriptor?? [ 336.109063][ T5621] usb 3-1: USB disconnect, device number 16 [ 338.441908][ T5616] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 338.592324][ T5616] usb 3-1: Using ep0 maxpacket: 8 [ 338.598128][ T5616] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 338.598191][ T5616] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.598216][ T5616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.598754][ T5616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.598785][ T5616] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.598829][ T5616] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.598846][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.965507][ T5616] usb 3-1: usb_control_msg returned -32 [ 338.965559][ T5616] usbtmc 3-1:16.0: can't read capabilities [ 339.732822][T10205] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 339.878358][ T5729] usb 3-1: USB disconnect, device number 17 [ 341.478006][T10255] netlink: 'syz.4.1932': attribute type 8 has an invalid length. [ 341.478033][T10255] netlink: 1048 bytes leftover after parsing attributes in process `syz.4.1932'. [ 341.478763][T10255] netlink: 'syz.4.1932': attribute type 1 has an invalid length. [ 342.169486][T10274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1940'. [ 345.732038][ T820] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 345.881881][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 345.885081][ T820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.887024][ T820] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 345.890542][ T820] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 345.890571][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.890593][ T820] usb 3-1: Product: syz [ 345.890608][ T820] usb 3-1: Manufacturer: syz [ 345.890622][ T820] usb 3-1: SerialNumber: syz [ 346.215474][ T820] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 346.235383][ T820] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 346.619859][ T820] usb 3-1: 2:1 : can't get Cluster Descriptor [ 346.894161][ T820] usb 3-1: USB disconnect, device number 18 [ 348.061969][ T5616] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 348.212090][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 348.216227][ T5616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.216256][ T5616] usb 3-1: config 0 has no interfaces? [ 348.217871][ T5616] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 348.217901][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 348.217923][ T5616] usb 3-1: SerialNumber: syz [ 348.309081][ T5616] usb 3-1: config 0 descriptor?? [ 348.659275][ T31] usb 3-1: USB disconnect, device number 19 [ 349.596990][ T4921] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 350.105475][ T37] audit: type=1804 audit(1780146588.941:124): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2012" name="/newroot/312/file0" dev="tmpfs" ino=1607 res=1 errno=0 [ 354.242056][ T820] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 354.396084][ T820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.396113][ T820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.397558][ T820] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.397589][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.397610][ T820] usb 4-1: SerialNumber: syz [ 354.925241][ T820] usb 4-1: USB disconnect, device number 16 [ 356.521898][ T5616] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 356.671977][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 356.678846][ T5616] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 356.678884][ T5616] usb 4-1: config 0 has no interface number 0 [ 356.678935][ T5616] usb 4-1: config 0 interface 12 has no altsetting 0 [ 356.714730][ T5616] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 356.714762][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.714783][ T5616] usb 4-1: Product: syz [ 356.714799][ T5616] usb 4-1: Manufacturer: syz [ 356.714814][ T5616] usb 4-1: SerialNumber: syz [ 356.767059][ T5616] usb 4-1: config 0 descriptor?? [ 358.400843][ T5616] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 358.401004][ T5616] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 358.401048][ T5616] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 358.401148][ T5616] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 358.473857][ T5616] usb 4-1: USB disconnect, device number 17 [ 363.039242][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2146'. [ 363.212167][T10732] hsr_slave_1 (unregistering): left promiscuous mode [ 364.413730][ T5743] IPVS: starting estimator thread 0... [ 364.512004][T10760] IPVS: using max 8 ests per chain, 19200 per kthread [ 364.596844][T10763] netlink: 'syz.4.2161': attribute type 10 has an invalid length. [ 364.677913][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.830453][T10763] bond0: (slave team0): Enslaving as an active interface with an up link [ 365.300500][T10778] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.382172][ T5742] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 365.531950][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 365.534020][ T5742] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 365.534049][ T5742] usb 3-1: config 0 has no interface number 0 [ 365.534095][ T5742] usb 3-1: config 0 interface 184 has no altsetting 0 [ 365.536585][ T5742] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 365.536614][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.536641][ T5742] usb 3-1: Product: syz [ 365.536652][ T5742] usb 3-1: Manufacturer: syz [ 365.536662][ T5742] usb 3-1: SerialNumber: syz [ 365.540577][ T5742] usb 3-1: config 0 descriptor?? [ 366.151289][ T5742] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 366.151323][ T5742] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 366.961516][ T5742] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 366.961550][ T5742] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 366.961572][ T5742] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 366.992487][ T5742] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.016269][ T5742] usb 3-1: USB disconnect, device number 20 [ 367.297124][T10829] ip6tnl0: Caught tx_queue_len zero misconfig [ 368.329098][T10846] bridge0: port 3(wlan1) entered blocking state [ 368.329226][T10846] bridge0: port 3(wlan1) entered disabled state [ 368.329962][T10846] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 368.539699][T10846] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 370.544909][ T37] audit: type=1800 audit(1780146609.351:125): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2217" name="/" dev="fuse" ino=2 res=0 errno=0 [ 370.959162][T10918] fuse: fd is not a fuse device [ 372.262339][ T37] audit: type=1326 audit(1780146611.101:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.264196][ T37] audit: type=1326 audit(1780146611.101:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.266022][ T37] audit: type=1326 audit(1780146611.101:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.267259][ T37] audit: type=1326 audit(1780146611.101:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.267551][ T37] audit: type=1326 audit(1780146611.101:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.268053][ T37] audit: type=1326 audit(1780146611.101:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.268106][ T37] audit: type=1326 audit(1780146611.101:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.268814][ T37] audit: type=1326 audit(1780146611.101:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.269117][ T37] audit: type=1326 audit(1780146611.101:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10951 comm="syz.2.2245" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 372.943766][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 372.945772][T10966] l2tp_ppp: sess 2/0: no socket in recv [ 374.183065][ C0] Adjusting tsc more than 11% (6083271 vs 8464875) [ 374.194571][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2270'. [ 375.308079][T11032] loop5: detected capacity change from 0 to 7 [ 375.348282][T11032] Dev loop5: unable to read RDB block 7 [ 375.348426][T11032] loop5: unable to read partition table [ 375.348628][T11032] loop5: partition table beyond EOD, truncated [ 375.351325][T11032] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 376.407155][ T37] kauditd_printk_skb: 43 callbacks suppressed [ 376.407262][ T37] audit: type=1326 audit(1780146614.802:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11050 comm="syz.4.2290" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67e18ece59 code=0x0 [ 378.870263][T11100] fuse: fd is not a fuse device [ 379.176341][T11109] binder: 11108:11109 unknown command 0 [ 379.176363][T11109] binder: 11108:11109 ioctl c0306201 200000000480 returned -22 [ 379.730854][T11128] fuse: fd is not a fuse device [ 379.783304][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.783364][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.120535][ T5742] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 380.349098][ T5742] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 380.349149][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 380.349178][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 380.349224][ T5742] usb 4-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 380.349246][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.353694][ T5742] usb 4-1: config 0 descriptor?? [ 380.355864][T11130] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 380.833968][ T5742] wacom 0003:056A:0100.000C: ignoring exceeding usage max [ 381.076294][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.077769][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.108344][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.108994][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.125633][ T5743] usb 4-1: USB disconnect, device number 18 [ 382.058660][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2345'. [ 385.838936][T11254] comedi comedi1: 8255: I/O base address not correctly aligned [ 388.068218][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2393'. [ 388.116507][T11284] fuse: fd is not a fuse device [ 388.122748][T11281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.293070][T11281] macvlan2: entered promiscuous mode [ 388.293099][T11281] macvlan2: entered allmulticast mode [ 388.337085][T11281] bond2: entered promiscuous mode [ 388.351782][T11281] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.488902][T11281] bond2: left promiscuous mode [ 389.525318][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 390.259001][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2420'. [ 390.286022][T11338] bond0: entered promiscuous mode [ 390.286041][T11338] bond_slave_0: entered promiscuous mode [ 390.286216][T11338] bond_slave_1: entered promiscuous mode [ 390.325820][T11338] team0: entered promiscuous mode [ 390.325842][T11338] team_slave_0: entered promiscuous mode [ 390.326097][T11338] team_slave_1: entered promiscuous mode [ 390.447289][T11338] hsr1: entered promiscuous mode [ 390.447903][T11338] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 391.097514][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 397.232162][ T5742] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 397.416439][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 397.419048][ T5742] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 397.419076][ T5742] usb 3-1: config 0 has no interface number 0 [ 397.419123][ T5742] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 397.419152][ T5742] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 397.426227][ T5742] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 397.426259][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.426282][ T5742] usb 3-1: Product: syz [ 397.426657][ T5742] usb 3-1: Manufacturer: syz [ 397.426675][ T5742] usb 3-1: SerialNumber: syz [ 397.507830][ T5742] usb 3-1: config 0 descriptor?? [ 397.509066][T11473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.509284][T11473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.756506][T11473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.776585][T11473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.997626][ T5742] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 399.086727][T11515] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2496'. [ 399.527173][ T5742] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 399.527203][ T5742] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 399.527478][ T5742] asix 3-1:0.34: probe with driver asix failed with error -71 [ 399.578150][ T5742] usb 3-1: USB disconnect, device number 21 [ 404.493779][T11610] 9p: Bad value for 'rfdno' [ 405.373140][ T37] audit: type=1326 audit(1780146641.191:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.373319][ T37] audit: type=1326 audit(1780146641.191:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.376233][ T37] audit: type=1326 audit(1780146641.191:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.377906][ T37] audit: type=1326 audit(1780146641.191:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.377967][ T37] audit: type=1326 audit(1780146641.191:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.378016][ T37] audit: type=1326 audit(1780146641.191:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.378064][ T37] audit: type=1326 audit(1780146641.191:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.378316][ T37] audit: type=1326 audit(1780146641.191:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.379563][ T37] audit: type=1326 audit(1780146641.191:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 405.379742][ T37] audit: type=1326 audit(1780146641.191:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11631 comm="syz.2.2547" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7ffc0000 [ 406.211708][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2556'. [ 406.662567][ T5742] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 406.814145][ T5742] usb 3-1: device descriptor read/64, error -71 [ 407.119982][ T5742] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 407.258653][ T5742] usb 3-1: device descriptor read/64, error -71 [ 407.398146][ T5742] usb usb3-port1: attempt power cycle [ 407.833012][ T5742] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 407.853954][T11684] veth1_macvtap: entered allmulticast mode [ 407.860728][ T5742] usb 3-1: device descriptor read/8, error -71 [ 407.868869][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 408.139611][ T5742] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 408.168040][ T5742] usb 3-1: device descriptor read/8, error -71 [ 408.278014][ T5742] usb usb3-port1: unable to enumerate USB device [ 408.321626][T11684] veth1_macvtap (unregistering): left allmulticast mode [ 414.303272][ T1246] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 414.483406][ T1246] usb 4-1: unable to get BOS descriptor or descriptor too short [ 414.484664][ T1246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.488026][ T1246] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 414.488057][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.488077][ T1246] usb 4-1: Product: syz [ 414.488092][ T1246] usb 4-1: Manufacturer: syz [ 414.488106][ T1246] usb 4-1: SerialNumber: syz [ 414.859584][ T1246] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 415.193724][ T1246] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 415.292305][ T1246] usb 4-1: USB disconnect, device number 19 [ 415.351690][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.284937][T11846] netlink: 'syz.3.2644': attribute type 1 has an invalid length. [ 418.284964][T11846] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2644'. [ 418.346609][ T36] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 418.508150][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 418.524996][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.525025][ T36] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.553561][ T36] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.553592][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.553613][ T36] usb 3-1: Product: syz [ 418.553627][ T36] usb 3-1: Manufacturer: syz [ 418.553642][ T36] usb 3-1: SerialNumber: syz [ 418.640382][ T36] usb 3-1: 0:2 : does not exist [ 418.842715][ T36] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 419.003613][ T36] usb 3-1: USB disconnect, device number 26 [ 419.285492][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.488172][ T37] kauditd_printk_skb: 32 callbacks suppressed [ 419.488191][ T37] audit: type=1804 audit(1780146654.219:221): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2656" name="/newroot/407/file0" dev="tmpfs" ino=2127 res=1 errno=0 [ 423.005955][T11953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2691'. [ 424.653292][ T5745] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 424.882057][ T5745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.882140][ T5745] usb 4-1: no configurations [ 424.882153][ T5745] usb 4-1: can't read configurations, error -22 [ 428.649865][ T37] audit: type=1326 audit(1780146662.662:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12036 comm="syz.2.2729" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd5b4ce59 code=0x7fc00000 [ 428.664379][ T37] audit: type=1326 audit(1780146662.662:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12036 comm="syz.2.2729" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fd5b4ce59 code=0x7fc00000 [ 432.499635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.521314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.532140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.542975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.553810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.564648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.575581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.586331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.597171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 432.608000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 435.384091][T12129] bridge_slave_0: left allmulticast mode [ 435.384125][T12129] bridge_slave_0: left promiscuous mode [ 435.390818][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.549622][T12129] bridge_slave_1: left allmulticast mode [ 435.549645][T12129] bridge_slave_1: left promiscuous mode [ 435.553007][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.774598][T12129] bond0: (slave bond_slave_0): Releasing backup interface [ 435.860941][T12129] bond0: (slave bond_slave_1): Releasing backup interface [ 435.919651][T12129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.919684][T12129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.968068][T12129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.968099][T12129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.544609][T12153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2782'. [ 437.207824][T12174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.293645][T12174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.354036][T12177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.665775][T12183] tipc: Failed to remove unknown binding: 66,0,0/2099199:1611475433/1611475434 [ 437.679670][T12183] tipc: Failed to remove unknown binding: 66,0,0/2099199:1611475433/1611475434 [ 440.169306][T12242] input: syz0 as /devices/virtual/input/input18 [ 442.900175][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 442.900270][T12279] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 442.902822][T12279] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2837'. [ 442.902871][T12279] netlink: 'syz.2.2837': attribute type 7 has an invalid length. [ 442.902887][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 442.909932][T12279] usb usb7: usbfs: process 12279 (syz.2.2837) did not claim interface 0 before use [ 442.930576][ T36] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 443.164227][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 443.166385][ T36] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 443.166413][ T36] usb 4-1: config 0 has no interface number 0 [ 443.166463][ T36] usb 4-1: config 0 interface 184 has no altsetting 0 [ 443.169090][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 443.169126][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.169141][ T36] usb 4-1: Product: syz [ 443.169152][ T36] usb 4-1: Manufacturer: syz [ 443.169163][ T36] usb 4-1: SerialNumber: syz [ 443.173319][ T36] usb 4-1: config 0 descriptor?? [ 443.888183][ T36] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 443.888216][ T36] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.446804][ T36] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 445.446837][ T36] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 445.446857][ T36] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 445.447185][ T36] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 445.524521][ T36] usb 4-1: USB disconnect, device number 22 [ 446.547978][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.548031][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.046850][T12365] binder_alloc: 12364: binder_alloc_buf size 12312 failed, no address space [ 447.065763][T12365] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 451.686771][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'. [ 454.416235][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.416759][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.417420][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.417890][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.418490][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.418951][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.419571][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.420055][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 454.420655][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 457.837696][T12512] tipc: Enabling of bearer rejected, failed to enable media [ 461.557584][T12559] fuse: fd is not a fuse device [ 461.836374][T12567] binder: 12564:12567 ioctl c0306201 200000000080 returned -14 [ 461.852899][T12567] binder: 12564:12567 ioctl c0306201 2000000003c0 returned -14 [ 465.799555][T12616] geneve2: entered promiscuous mode [ 468.706667][T12659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.493759][T12675] bridge1: entered promiscuous mode [ 469.493786][T12675] bridge1: entered allmulticast mode [ 469.523904][T12675] team0: Port device bridge1 added [ 473.846341][T12730] __nla_validate_parse: 10 callbacks suppressed [ 473.846452][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3028'. [ 479.377139][T12771] syz.2.3046 (12771) used greatest stack depth: 16000 bytes left [ 481.263134][ T4921] Bluetooth: hci4: hcon ffff888040308000 sent 1 < count 56588 [ 481.489971][ T4921] Bluetooth: hci4: hcon ffff888040308000 sent 0 < count 16 [ 481.695154][T12825] lo: Caught tx_queue_len zero misconfig [ 484.744434][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 484.789378][T12747] Set syz1 is full, maxelem 65536 reached [ 484.906451][T12865] bond1: entered promiscuous mode [ 484.906480][T12865] bond1: entered allmulticast mode [ 485.257667][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3092'. [ 485.462009][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 492.563976][T12941] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 492.563999][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3115'. [ 492.763402][T12941] geneve1: entered promiscuous mode [ 492.766275][T12941] team0: Failed to send options change via netlink (err -105) [ 492.766303][T12941] team0: Port device geneve1 added [ 495.573017][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3125'. [ 495.930637][T12971] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5611] was attempted by " [ 513.102665][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.102743][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.880740][T13113] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 518.462901][ T4921] Bluetooth: Unknown LE signaling command 0x1d [ 518.463005][ T4921] Bluetooth: Wrong link type (-22) [ 520.263530][ T37] audit: type=1326 audit(1780146747.199:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50261ece59 code=0x7ffc0000 [ 520.277126][ T37] audit: type=1326 audit(1780146747.218:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50261ece59 code=0x7ffc0000 [ 520.278823][ T37] audit: type=1326 audit(1780146747.218:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50261ece59 code=0x7ffc0000 [ 520.278951][ T37] audit: type=1326 audit(1780146747.218:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f50261ece59 code=0x7ffc0000 [ 520.379428][ T37] audit: type=1326 audit(1780146747.310:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50261ece59 code=0x7ffc0000 [ 520.379883][ T37] audit: type=1326 audit(1780146747.310:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f50261ecbc2 code=0x7ffc0000 [ 520.380679][ T37] audit: type=1326 audit(1780146747.310:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f50261ecc57 code=0x7ffc0000 [ 520.382769][ T37] audit: type=1326 audit(1780146747.310:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f50261a9b51 code=0x7ffc0000 [ 520.382825][ T37] audit: type=1326 audit(1780146747.310:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13177 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50261ece59 code=0x7ffc0000 [ 520.382890][ T37] audit: type=1326 audit(1780146747.310:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13181 comm="syz.3.3204" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f50261ad68e code=0x7ffc0000 [ 528.348877][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3230'. [ 528.352237][T13256] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 530.797442][ T4921] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 534.514091][ T37] kauditd_printk_skb: 45 callbacks suppressed [ 534.514113][ T37] audit: type=1800 audit(1780146760.348:279): pid=13292 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3242" name="bus" dev="ramfs" ino=38309 res=0 errno=0 [ 535.209417][ T4921] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 535.209752][ T4921] Bluetooth: hci0: Injecting HCI hardware error event [ 535.216899][ T4921] Bluetooth: hci0: hardware error 0x00 [ 538.229166][ T4921] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 549.424988][T13450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3298'. [ 551.543136][T13471] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 551.545101][T13471] Error validating options; rc = [-22] [ 562.165601][T13555] netlink: 'syz.3.3335': attribute type 10 has an invalid length. [ 562.165619][T13555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3335'. [ 562.265674][T13557] fuse: fd is not a fuse device [ 568.329451][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 568.361285][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 568.364412][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 568.378991][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 568.381701][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 568.599624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.707393][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.707471][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 584.573410][ T4921] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 586.703142][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 587.006566][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.006594][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.104653][ T31] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 587.104687][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 587.104708][ T31] usb 4-1: SerialNumber: syz [ 588.147044][ T31] usb 4-1: 0:2 : does not exist [ 588.742256][ T31] usb 4-1: USB disconnect, device number 23 [ 591.206824][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.908428][T13753] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3404'. [ 593.372687][T13762] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3409'. [ 593.372714][T13762] netlink: 'syz.3.3409': attribute type 1 has an invalid length. [ 593.372729][T13762] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3409'. [ 596.623762][T13791] netlink: 132732 bytes leftover after parsing attributes in process `syz.4.3418'. [ 608.053942][ T10] IPVS: starting estimator thread 0... [ 608.153318][T13881] IPVS: using max 9 ests per chain, 21600 per kthread [ 617.035400][T13956] fuse: fd is not a fuse device [ 621.501705][T14000] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3492'. [ 621.501901][T14000] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3492'. [ 637.142558][T14119] netlink: set zone limit has 4 unknown bytes [ 638.066598][T14142] tipc: Enabled bearer , priority 16 [ 639.268696][ T5616] tipc: Node number set to 1593835523 [ 640.079919][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.079995][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 642.138286][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'. [ 646.306602][T14187] fuse: fd is not a fuse device [ 662.388488][T14277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3589'. [ 664.569932][T14295] overlayfs: failed to clone lowerpath [ 672.212757][T14338] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 672.213002][T14338] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 678.132405][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3627'. [ 678.388148][T14380] bridge1: port 1(dummy0) entered blocking state [ 678.388421][T14380] bridge1: port 1(dummy0) entered disabled state [ 678.388654][T14380] dummy0: entered allmulticast mode [ 678.393670][T14380] dummy0: entered promiscuous mode [ 685.305139][T14442] netlink: 'syz.2.3648': attribute type 4 has an invalid length. [ 691.777551][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3670'. [ 699.546767][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.546848][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.776655][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888039e01000: rx timeout, send abort [ 699.778376][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888039e01000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 700.336217][T14579] random: crng reseeded on system resumption [ 703.083346][T14601] [U]  [ 703.083386][T14601] [U] + [ 703.106146][T14601] [U] $܁P~ƊQrAe`G-Rij笨mA)߀No4gV;uQ` [ 703.106213][T14601] [U] Wg-u]}FyȘeƮ)>,>f}a&\msOHn'Ä=#$Ǧ&g C.,jP^{"Oiňo;pʪ6qwS_{CWfs+R~qu›ŸNn! [ 703.106244][T14601] [U] Zph5Laӝ8H [ 703.106310][T14601] [U] V)*Gr [ 703.106334][T14601] [U] g©MD9i^g[&TXd}y^#"Z&|JiYDX~reGiUMNkqGJcӔ0 r088D<U0P9=>ȪU[ƒuW9jl"hZG+EĖ#LY`z2 [ 703.106365][T14601] [U] }{_S|j\ptژ1b-S4!{9C5->M [ 703.106379][T14601] [U] UXBH,~nmIM/a [ 703.106392][T14601] [U] VS6e^ SHk"(*:$}<^YD?rnHEX#X3Ys6 [ 703.106403][T14601] [U] [ 703.106438][T14601] [U] 71D%}7G\4'Kp7U,"^|-B g&@bWRY [ 703.106469][T14601] [U] p~ [ 703.106494][T14601] [U] hQVOK) ƵZ>uY`XԶޖQtBhvMdR/%F8`yǥY䦈Fؾx@-d֛ 0ʩz;D")tRgiL()d6"BnBf?ӛ,ѧ`'Lq 6t2t@F@p6v]t4NξyRΓvP':J۫ۆE*̣];M4TqB_5pM [ 703.108347][T14601] [U] _mֱ9KU""^s6rP [ 703.108438][T14601] [U] ¥U[m j0zOoF|:! /$@RH(Η1K@ǚ/w4|xJ3: [ 703.108670][T14601] [U] V :p\U 5V"cd:nb3Ob,%ǯe j9>\rCˉiVE<\7;娍+ȏ"IƔ/6FNhgw~xcWö}H6TI؆6aA耹C1v]ba9xT  [ 703.108699][T14601] [U] ۼuJD⠙("wZ[(s1yXNׯtAc/piǎj Ѕ#{0`y,Hp+̄j54?@պNa^!4^3" [ 703.108746][T14601] [U] I\xezW80ܚPfzqi^@O [ 703.108767][T14601] [U] gڑ/P+ؒb=pYY1gJd!xKTa;PaoFlu 8:!VD G\zwi=)m)o!Җ>08jͻ*( sLQ@0KeVszKP?e/K MRlya?'EtU{R]ֈS$9Ou(ŀ~le/I8# a ?,#p;R{4Hw"X{\\ .KV2$Ēΐ܀6< [ 703.109088][T14601] [U] q Oulv~-_8?O6$z«eAO_NO/C .byrˋ<[DxҿWWX [ 703.109123][T14601] [U] ܲ|9$n`i(RǿDtA4o/̈́eV2Bln| :KYW&;l1; [ 703.109135][T14601] [U] ;JO6P [ 703.866417][T14601] [U] q1n#G4Y›rMnUf[Xi^='ډz;:Q7,E [ 704.728587][T14627] lo speed is unknown, defaulting to 1000 [ 704.728764][T14627] lo speed is unknown, defaulting to 1000 [ 704.735130][T14627] lo speed is unknown, defaulting to 1000 [ 704.739426][T14627] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 704.739468][T14627] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 704.739509][T14627] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 704.750261][T14627] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 705.333909][T14627] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 705.750042][T14627] lo speed is unknown, defaulting to 1000 [ 705.756114][T14627] lo speed is unknown, defaulting to 1000 [ 705.759143][T14627] lo speed is unknown, defaulting to 1000 [ 706.094793][T14627] lo speed is unknown, defaulting to 1000 [ 706.159263][T14627] lo speed is unknown, defaulting to 1000 [ 713.183926][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 713.204927][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 713.250327][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 715.182447][ T5745] vxcan1 speed is unknown, defaulting to 1000 [ 715.182678][T14680] infiniband syz2: set active [ 715.182696][T14680] infiniband syz2: added vxcan1 [ 715.306287][T14680] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 715.306329][T14680] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 715.306383][T14680] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 715.417990][T14680] RDS/IB: syz2: added [ 715.441679][T14680] smc: adding ib device syz2 with port count 1 [ 715.442231][T14680] smc: ib device syz2 port 1 has no pnetid [ 715.452122][T12372] vxcan1 speed is unknown, defaulting to 1000 [ 715.523966][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 717.335097][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 718.252182][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 719.945839][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 720.646030][T14680] vxcan1 speed is unknown, defaulting to 1000 [ 722.009479][T14814] overlayfs: failed to clone upperpath [ 725.692667][T14837] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 729.490495][T14862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3799'. [ 731.236951][T14879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3816'. [ 738.968698][ T37] audit: type=1804 audit(1780147735.314:280): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3838" name="/newroot/567/file1" dev="tmpfs" ino=2959 res=1 errno=0 [ 749.052569][T15044] lo speed is unknown, defaulting to 1000 [ 749.055269][T15044] vxcan1 speed is unknown, defaulting to 1000 [ 750.980810][T15056] fuse: fd is not a fuse device [ 757.225785][T15100] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.3891'. [ 757.225891][T15100] ksmbd: Unknown IPC event: 4, ignore. [ 757.554412][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.554486][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.845260][T15399] debugfs: 'netdev:syzkaller0' already exists in 'phy10' [ 804.060735][T15419] fuse: fd is not a fuse device [ 804.623650][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 811.854287][T15485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4027'. [ 811.854316][T15485] openvswitch: netlink: Message has 16 unknown bytes. [ 818.122699][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.122783][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.676161][ T10] ------------[ cut here ]------------ [ 818.676176][ T10] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 818.676199][ T10] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:1/10 [ 818.676422][ T10] Modules linked in: [ 818.676451][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.676510][ T10] Tainted: [L]=SOFTLOCKUP [ 818.676519][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.676535][ T10] Workqueue: events drm_fb_helper_damage_work [ 818.676587][ T10] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 818.676652][ T10] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 9d d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 818.676678][ T10] RSP: 0000:ffffc900000f78c0 EFLAGS: 00010246 [ 818.676767][ T10] RAX: 1ffff11004b9c000 RBX: ffffffff8f936870 RCX: 0000000000000000 [ 818.676783][ T10] RDX: ffffffff8bc05fe0 RSI: ffffffff8bc22700 RDI: ffffffff8f936870 [ 818.676801][ T10] RBP: ffffc900000f79a8 R08: 0000000000000000 R09: 0000000000000000 [ 818.676816][ T10] R10: dffffc0000000000 R11: fffffbfff1f10b9f R12: ffffffff8bc22700 [ 818.676834][ T10] R13: ffff888025ce0000 R14: 0000000000000000 R15: ffffffff8bc05fe0 [ 818.676851][ T10] FS: 0000000000000000(0000) GS:ffff888126186000(0000) knlGS:0000000000000000 [ 818.676868][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.676884][ T10] CR2: 0000200001000000 CR3: 0000000038182000 CR4: 00000000003526f0 [ 818.676908][ T10] Call Trace: [ 818.676939][ T10] [ 818.677005][ T10] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 818.677069][ T10] ? rt_spin_unlock+0x14f/0x200 [ 818.677170][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 818.677262][ T10] ? rt_spin_unlock+0x160/0x200 [ 818.677294][ T10] ? drm_vblank_get+0x147/0x260 [ 818.677338][ T10] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 818.677398][ T10] drm_fb_helper_damage_work+0x131/0x6f0 [ 818.677432][ T10] ? process_scheduled_works+0xa70/0x1860 [ 818.677494][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 818.677524][ T10] ? process_scheduled_works+0xa70/0x1860 [ 818.677549][ T10] ? process_scheduled_works+0xa70/0x1860 [ 818.677576][ T10] process_scheduled_works+0xb5d/0x1860 [ 818.677640][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 818.677673][ T10] ? assign_work+0x3d5/0x5e0 [ 818.677702][ T10] worker_thread+0xa53/0xfc0 [ 818.677761][ T10] kthread+0x388/0x470 [ 818.677791][ T10] ? __pfx_worker_thread+0x10/0x10 [ 818.677815][ T10] ? __pfx_kthread+0x10/0x10 [ 818.677848][ T10] ret_from_fork+0x514/0xb70 [ 818.677905][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 818.677929][ T10] ? __switch_to+0xc79/0x1410 [ 818.677967][ T10] ? __pfx_kthread+0x10/0x10 [ 818.677999][ T10] ret_from_fork_asm+0x1a/0x30 [ 818.678057][ T10] [ 818.678073][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.678093][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 818.678122][ T10] Tainted: [L]=SOFTLOCKUP [ 818.678130][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.678145][ T10] Workqueue: events drm_fb_helper_damage_work [ 818.678168][ T10] Call Trace: [ 818.678176][ T10] [ 818.678185][ T10] vpanic+0x56c/0xa60 [ 818.678225][ T10] ? __pfx__printk+0x10/0x10 [ 818.678258][ T10] ? __pfx_vpanic+0x10/0x10 [ 818.678282][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 818.678357][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 818.678397][ T10] panic+0xc5/0xd0 [ 818.678432][ T10] ? __pfx_panic+0x10/0x10 [ 818.678471][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 818.678507][ T10] __warn+0x315/0x4c0 [ 818.678533][ T10] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 818.678572][ T10] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 818.678611][ T10] __report_bug+0x29a/0x540 [ 818.678703][ T10] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 818.678742][ T10] ? __pfx___report_bug+0x10/0x10 [ 818.678799][ T10] report_bug_entry+0x19a/0x290 [ 818.678833][ T10] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 818.678869][ T10] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 818.678905][ T10] handle_bug+0xce/0x200 [ 818.678955][ T10] exc_invalid_op+0x1a/0x50 [ 818.678977][ T10] asm_exc_invalid_op+0x1a/0x20 [ 818.679017][ T10] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 818.679055][ T10] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a 9d d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 818.679074][ T10] RSP: 0000:ffffc900000f78c0 EFLAGS: 00010246 [ 818.679092][ T10] RAX: 1ffff11004b9c000 RBX: ffffffff8f936870 RCX: 0000000000000000 [ 818.679109][ T10] RDX: ffffffff8bc05fe0 RSI: ffffffff8bc22700 RDI: ffffffff8f936870 [ 818.679127][ T10] RBP: ffffc900000f79a8 R08: 0000000000000000 R09: 0000000000000000 [ 818.679142][ T10] R10: dffffc0000000000 R11: fffffbfff1f10b9f R12: ffffffff8bc22700 [ 818.679159][ T10] R13: ffff888025ce0000 R14: 0000000000000000 R15: ffffffff8bc05fe0 [ 818.679201][ T10] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 818.679234][ T10] ? rt_spin_unlock+0x14f/0x200 [ 818.679261][ T10] ? __pfx_autoremove_wake_function+0x10/0x10 [ 818.679292][ T10] ? rt_spin_unlock+0x160/0x200 [ 818.679323][ T10] ? drm_vblank_get+0x147/0x260 [ 818.679362][ T10] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 818.679397][ T10] drm_fb_helper_damage_work+0x131/0x6f0 [ 818.679431][ T10] ? process_scheduled_works+0xa70/0x1860 [ 818.679463][ T10] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 818.679491][ T10] ? process_scheduled_works+0xa70/0x1860 [ 818.679514][ T10] ? process_scheduled_works+0xa70/0x1860 [ 818.679541][ T10] process_scheduled_works+0xb5d/0x1860 [ 818.679603][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 818.679636][ T10] ? assign_work+0x3d5/0x5e0 [ 818.679668][ T10] worker_thread+0xa53/0xfc0 [ 818.679726][ T10] kthread+0x388/0x470 [ 818.679758][ T10] ? __pfx_worker_thread+0x10/0x10 [ 818.679781][ T10] ? __pfx_kthread+0x10/0x10 [ 818.679814][ T10] ret_from_fork+0x514/0xb70 [ 818.679844][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 818.679870][ T10] ? __switch_to+0xc79/0x1410 [ 818.679909][ T10] ? __pfx_kthread+0x10/0x10 [ 818.679941][ T10] ret_from_fork_asm+0x1a/0x30 [ 818.679991][ T10] [ 818.680598][ T10] Kernel Offset: disabled