last executing test programs: 20.727072678s ago: executing program 4 (id=2034): r0 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="30020000", @ANYRES16=r1, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x801}, 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) 19.370911113s ago: executing program 4 (id=2041): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}, 0xef35}], 0x1, 0x2000, 0x0) 18.358370114s ago: executing program 4 (id=2046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xd8, 0x7ff, 0x2, 0x9, 0x6, 0x20000002, 0xfffffff9, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x4}, {0x2, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) 15.323895078s ago: executing program 3 (id=2053): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2dd}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000b00)="f610e61fc81cc3edc86f2800194d27a5a42cf1880bb51d15e205b734057c", 0x1e}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 15.161092179s ago: executing program 3 (id=2054): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001010000000000010000000000", @ANYRES32=r3], 0x20}}, 0x2000c004) close(r0) 13.686645186s ago: executing program 3 (id=2057): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0x0, 0x6, &(0x7f0000000340)={0x9, "bd1200000000000000a884dfcc00"}}) r1 = syz_open_dev$vim2m(0x0, 0xffff7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x33, 0x1, 0x0, "800000000000f4ba89591da86b870000000000000000000000002000"}) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x4}, &(0x7f0000000000)=0x90) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = gettid() sched_setattr(r6, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xc, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000002c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace(0x10, 0x1) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r9 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) listen(r9, 0xda8c) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace80000000002ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a0000000000", 0xd7}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 13.606002227s ago: executing program 4 (id=2059): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000140)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="04eead", 0x3}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12.697523687s ago: executing program 3 (id=2061): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/6, 0x11c, 0x6, 0x1, 0x9}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0xd6, 0x1, {{0x0, 0x9, 0x0, 0x0, 0x16e}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x914, 0x80) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002c00070100000000ffd9df25037c0000080001800400060004000235e227ac675d80"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="db00000f102c0e0000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') 10.454969792s ago: executing program 0 (id=2068): r0 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="30020000", @ANYRES16=r1, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x801}, 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) 8.644789633s ago: executing program 2 (id=2071): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000380)={0x0, 0x0, 0x6, &(0x7f0000000340)={0x9, "bd1200000000000000a884dfcc00"}}) r1 = syz_open_dev$vim2m(0x0, 0xffff7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x33, 0x1, 0x0, "800000000000f4ba89591da86b870000000000000000000000002000"}) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x4}, &(0x7f0000000000)=0x90) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = gettid() sched_setattr(r6, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xc, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000002c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ptrace(0x10, 0x1) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) r9 = socket$inet_sctp(0x2, 0x400000000001, 0x84) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) listen(r9, 0xda8c) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace80000000002ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a0000000000", 0xd7}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 7.745567463s ago: executing program 0 (id=2072): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000004000000000000008510000003000000180000000000000000000000000000009500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000140)={0x3, 0x0, 0x2, 0xffffffffffffffff, 0x11}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x5}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000540)='./file1\x00', r4}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0xa) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.674791513s ago: executing program 4 (id=2073): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r3 = socket(0x2b, 0x80801, 0x1) listen(r3, 0x7e5a) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x1000000000000d0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000540), 0x0, r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x6, 0x19, &(0x7f0000000100)=r6, 0xfebf) sendmsg$nl_generic(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x14, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_route(0x10, 0x3, 0x0) 6.17975205s ago: executing program 2 (id=2075): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x22) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000007, 0x50, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x2000000000003]}}) 5.959032413s ago: executing program 0 (id=2076): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ftruncate(r3, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) 5.520255528s ago: executing program 1 (id=2077): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) 5.239819401s ago: executing program 4 (id=2078): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xffffffff, {}, [{0x90, 0x1, [@m_ct={0x31, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 4.990298384s ago: executing program 3 (id=2079): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x8b}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f00000059c0)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000009a40)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 4.959882074s ago: executing program 2 (id=2080): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00ad, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.804153236s ago: executing program 2 (id=2081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r1, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000005060101000000000000000000809db2a97a3cafddc99e84ff4bd7c7f700030504000007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20081}, 0x100) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c804}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, 0x2, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x100}, @CTA_EXPECT_NAT={0x6c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0xb8}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f0000000140)={@void, @void, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x1c, 0x3c, 0x68, 0x0, 0x4, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2d}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3df7, 0x0, 0x1, 0x0, 0x7, 0x1, 0x4e21, 0x4e21, 0x1}}}}, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x2, [0x2, r10, 0x0, r10], [0x800], [], [0x8]}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.798346167s ago: executing program 1 (id=2082): r0 = socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000680)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) 3.589735139s ago: executing program 3 (id=2083): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000140)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="04eead", 0x3}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 3.475747551s ago: executing program 0 (id=2084): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x7ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) 2.553625011s ago: executing program 2 (id=2085): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r1, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1}, 0xef35}], 0x1, 0x2000, 0x0) 2.379170203s ago: executing program 1 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4) 2.259375514s ago: executing program 0 (id=2087): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') r1 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$panthor(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x10003, 0x3, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x7, r6}) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000440)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x100000000000000, r6}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) setuid(0xee01) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r8 = gettid() r9 = getpid() rt_tgsigqueueinfo(r9, r8, 0xb, &(0x7f0000000000)={0x200c, 0x3, 0x4}) 1.235413386s ago: executing program 2 (id=2088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a360000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2741400000011000100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x1e4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x2, 0x2, 0x6}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r3, 0x8b32, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x1f9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x49) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000d0a010300000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x24000905}, 0x8000) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.127774227s ago: executing program 1 (id=2089): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) dup3(0xffffffffffffffff, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0) 895.770649ms ago: executing program 0 (id=2090): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x22) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000007, 0x50, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x2000000000003]}}) 772.438361ms ago: executing program 1 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00ad, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 1 (id=2092): socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ttyprintk(0xffffff9c, 0x0, 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) kernel console output (not intermixed with test programs): 16 [ 220.390662][ T4273] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 220.402684][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.445717][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.468797][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.515516][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.528730][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.558656][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.601531][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.630740][ T4273] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.648872][ T4273] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 220.669725][ T4273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 220.683618][ T4273] usb 2-1: SerialNumber: syz [ 220.695665][ T4273] usb 2-1: config 0 descriptor?? [ 220.714505][ T4273] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 220.850501][ T5493] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 221.003514][ T14] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 221.056565][ T5493] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 221.081386][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.092598][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.108956][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.128029][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.146006][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.163121][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.173723][ T14] usb 3-1: device descriptor read/64, error -71 [ 221.190362][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.214261][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.226581][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.246209][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.264618][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.276203][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.304456][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.313617][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.325251][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.349042][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.358194][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.369635][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.394397][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.403561][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.417099][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.442471][ T5493] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.443559][ T14] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 221.451644][ T5493] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 221.475709][ T5493] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.503154][ T5493] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.521922][ T5493] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.530855][ T5493] usb 5-1: Product: syz [ 221.535562][ T5493] usb 5-1: Manufacturer: syz [ 221.540199][ T5493] usb 5-1: SerialNumber: syz [ 221.554118][ T5493] usb 5-1: config 0 descriptor?? [ 221.593174][ T5493] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 221.614163][ T14] usb 3-1: device descriptor read/64, error -71 [ 221.733789][ T14] usb usb3-port1: attempt power cycle [ 221.983671][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 221.994067][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 221.994422][ T5493] usb 5-1: USB disconnect, device number 9 [ 222.017724][ T5493] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 222.143574][ T14] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 222.184751][ T14] usb 3-1: device descriptor read/8, error -71 [ 222.459443][ T14] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 222.494280][ T14] usb 3-1: device descriptor read/8, error -71 [ 222.614570][ T14] usb usb3-port1: unable to enumerate USB device [ 223.422654][ T6500] netlink: 14 bytes leftover after parsing attributes in process `syz.1.698'. [ 223.499038][ T6500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.537043][ T6500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.559627][ T6500] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 223.583340][ T6500] bond0 (unregistering): Released all slaves [ 223.784078][ T3622] bcm5974 2-1:0.0: could not read from device [ 223.811749][ T4273] usb 2-1: USB disconnect, device number 20 [ 223.829890][ T3622] bcm5974 2-1:0.0: could not read from device [ 225.780846][ T6545] device syzkaller0 entered promiscuous mode [ 226.049158][ T5488] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 226.231329][ T5488] usb 2-1: device descriptor read/64, error -71 [ 226.253891][ T4273] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 226.461002][ T4273] usb 4-1: Using ep0 maxpacket: 16 [ 226.469423][ T4273] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 226.496354][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.525017][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.529191][ T5488] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 226.546881][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.583139][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.622410][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.644720][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.667253][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.682034][ T4273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.716638][ T4273] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 226.726218][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 226.730872][ T5488] usb 2-1: device descriptor read/64, error -71 [ 226.734561][ T4273] usb 4-1: SerialNumber: syz [ 226.755801][ T4273] usb 4-1: config 0 descriptor?? [ 226.766944][ T4273] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 226.867525][ T5488] usb usb2-port1: attempt power cycle [ 226.960743][ T5493] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 227.177552][ T5493] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 227.191643][ T5493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.200215][ T5493] usb 1-1: Product: syz [ 227.211371][ T5493] usb 1-1: Manufacturer: syz [ 227.219869][ T5493] usb 1-1: SerialNumber: syz [ 227.273556][ T5488] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 227.336131][ T5488] usb 2-1: device descriptor read/8, error -71 [ 227.603840][ T5488] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 227.665128][ T5488] usb 2-1: device descriptor read/8, error -71 [ 227.671763][ T5493] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 227.804731][ T5488] usb usb2-port1: unable to enumerate USB device [ 228.320722][ T5493] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 228.332518][ T5493] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 228.342689][ T5493] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 228.366599][ T5493] lan78xx: probe of 1-1:1.0 failed with error -71 [ 228.386655][ T5493] usb 1-1: USB disconnect, device number 8 [ 228.853104][ T6556] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 228.896730][ T6556] device netdevsim0 entered promiscuous mode [ 228.930617][ T6556] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 228.981190][ T6559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.718'. [ 229.204939][ T6559] device bond0 left promiscuous mode [ 229.210355][ T6559] device bond_slave_0 left promiscuous mode [ 229.224095][ T6559] device bond_slave_1 left promiscuous mode [ 229.230479][ T6559] device netdevsim0 left promiscuous mode [ 229.250900][ T6559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.294347][ T6559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.317782][ T6559] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 229.341294][ T6559] bond0 (unregistering): Released all slaves [ 230.234033][ T3622] bcm5974 4-1:0.0: could not read from device [ 230.246306][ T4273] usb 4-1: USB disconnect, device number 16 [ 230.624423][ T6570] loop2: detected capacity change from 0 to 32768 [ 230.648002][ T6570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.723 (6570) [ 230.680877][ T6570] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.703130][ T6570] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 230.722895][ T6570] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 230.747295][ T6570] BTRFS info (device loop2): trying to use backup root at mount time [ 230.765232][ T6570] BTRFS info (device loop2): setting nodatasum [ 230.781204][ T6570] BTRFS info (device loop2): enabling ssd optimizations [ 230.805161][ T6570] BTRFS info (device loop2): using spread ssd allocation scheme [ 230.813100][ T6570] BTRFS info (device loop2): turning on flush-on-commit [ 230.820833][ T6570] BTRFS info (device loop2): force zlib compression, level 3 [ 230.833348][ T6570] BTRFS info (device loop2): using free space tree [ 230.847034][ T5488] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 230.887588][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 230.887607][ T26] audit: type=1800 audit(1778178700.431:21): pid=6570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.723" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 231.013492][ T5488] usb 5-1: device descriptor read/64, error -71 [ 231.263512][ T5492] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 231.305083][ T5488] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 231.463557][ T5492] usb 3-1: Using ep0 maxpacket: 8 [ 231.468794][ T5488] usb 5-1: device descriptor read/64, error -71 [ 231.480765][ T5492] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 231.510433][ T5492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.520051][ T5492] usb 3-1: Product: syz [ 231.524660][ T5492] usb 3-1: Manufacturer: syz [ 231.529585][ T5492] usb 3-1: SerialNumber: syz [ 231.586769][ T6621] device syzkaller0 entered promiscuous mode [ 231.603900][ T5488] usb usb5-port1: attempt power cycle [ 231.916905][ T6627] loop2: detected capacity change from 32768 to 0 [ 232.053507][ T5488] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 232.104227][ T5488] usb 5-1: device descriptor read/8, error -71 [ 232.383515][ T5488] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 232.424295][ T5488] usb 5-1: device descriptor read/8, error -71 [ 232.556277][ T5488] usb usb5-port1: unable to enumerate USB device [ 233.809372][ T5492] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 233.868444][ T5492] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 233.911674][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.934038][ T5492] usb 3-1: USB disconnect, device number 29 [ 234.132918][ T4270] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.913562][ T6649] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 237.119921][ T6649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 237.143830][ T6649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 237.169408][ T6649] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 237.186703][ T6649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.206660][ T6649] usb 1-1: Product: syz [ 237.210979][ T6649] usb 1-1: Manufacturer: syz [ 237.217487][ T6649] usb 1-1: SerialNumber: syz [ 237.236682][ T6649] usb 1-1: config 0 descriptor?? [ 237.243587][ T6649] hub 1-1:0.0: bad descriptor, ignoring hub [ 237.253566][ T6649] hub: probe of 1-1:0.0 failed with error -5 [ 237.261287][ T6649] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 237.408632][ T6675] device syzkaller0 entered promiscuous mode [ 237.485408][ T4314] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 237.515248][ T6676] tipc: Enabled bearer , priority 0 [ 237.522720][ T6678] loop4: detected capacity change from 0 to 1024 [ 237.537138][ T6678] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 237.550489][ T6678] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 237.566424][ T6678] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: comm syz.4.749: inode #63: comm syz.4.749: iget: illegal inode # [ 237.580116][ T6678] EXT4-fs (loop4): no journal found [ 237.586061][ T6678] EXT4-fs (loop4): can't get journal size [ 237.600797][ T6678] EXT4-fs (loop4): failed to initialize system zone (-22) [ 237.612152][ T6678] EXT4-fs (loop4): mount failed [ 237.663476][ T4314] usb 4-1: device descriptor read/64, error -71 [ 237.833986][ T6648] usb 1-1: USB disconnect, device number 9 [ 237.941983][ T4314] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 237.961823][ T6678] loop4: detected capacity change from 0 to 40427 [ 237.995461][ T6678] F2FS-fs (loop4): invalid crc value [ 238.011694][ T6678] F2FS-fs (loop4): Found nat_bits in checkpoint [ 238.113614][ T4314] usb 4-1: device descriptor read/64, error -71 [ 238.120095][ T6678] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.233770][ T4314] usb usb4-port1: attempt power cycle [ 238.239714][ T6674] tipc: Resetting bearer [ 238.306720][ T6674] tipc: Disabling bearer [ 238.459265][ T6678] syz.4.749: attempt to access beyond end of device [ 238.459265][ T6678] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.524860][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 238.643611][ T4314] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.684208][ T4314] usb 4-1: device descriptor read/8, error -71 [ 238.975402][ T4314] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 239.039152][ T4314] usb 4-1: device descriptor read/8, error -71 [ 239.175758][ T4314] usb usb4-port1: unable to enumerate USB device [ 240.620195][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 240.693743][ T6649] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 240.886839][ T6649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.905523][ T6649] usb 4-1: not running at top speed; connect to a high speed hub [ 240.937882][ T6649] usb 4-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 240.965689][ T6649] usb 4-1: too many endpoints for config 1 interface 2 altsetting 133: 135, using maximum allowed: 30 [ 241.038888][ T6649] usb 4-1: config 1 interface 2 altsetting 133 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 241.112291][ T6649] usb 4-1: config 1 interface 2 has no altsetting 0 [ 241.151903][ T6649] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 241.163744][ T6649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.180852][ T6649] usb 4-1: Product: syz [ 241.221421][ T6649] usb 4-1: Manufacturer: syz [ 241.233677][ T6649] usb 4-1: SerialNumber: syz [ 241.512307][ T6649] usb 4-1: interface 3 not found [ 241.594623][ T6649] usb 4-1: USB disconnect, device number 21 [ 241.717472][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 242.273586][ T6648] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 242.469563][ T6648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.490903][ T6648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.534889][ T6648] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.588848][ T6648] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.622772][ T6648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.657241][ T6648] usb 1-1: config 0 descriptor?? [ 243.076763][ T6648] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 243.158505][ T6648] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 243.208571][ T6648] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 243.297184][ T6648] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 243.332929][ T6648] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 243.347549][ T6648] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 243.360620][ T6648] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 243.404346][ T6648] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 243.482008][ T6648] usb 1-1: USB disconnect, device number 10 [ 243.483018][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 243.702398][ T6765] fido_id[6765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 245.233036][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.787'. [ 245.243656][ T6648] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 245.303872][ T6647] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 245.437433][ T6648] usb 2-1: Using ep0 maxpacket: 8 [ 245.448037][ T6648] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 245.466823][ T6648] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 245.483194][ T6648] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 245.501153][ T6648] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 245.515797][ T6647] usb 5-1: unable to get BOS descriptor or descriptor too short [ 245.531905][ T6648] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 245.542944][ T6647] usb 5-1: not running at top speed; connect to a high speed hub [ 245.566362][ T6647] usb 5-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 245.600982][ T6806] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6806] [ 245.618357][ T6648] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.642742][ T6647] usb 5-1: too many endpoints for config 1 interface 2 altsetting 133: 135, using maximum allowed: 30 [ 245.664892][ T6648] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.676034][ T6647] usb 5-1: config 1 interface 2 altsetting 133 has 0 endpoint descriptors, different from the interface descriptor's value: 135 [ 245.691534][ T6648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.702496][ T6647] usb 5-1: config 1 interface 2 has no altsetting 0 [ 245.722941][ T6647] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 245.737891][ T6647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.748840][ T6647] usb 5-1: Product: syz [ 245.756791][ T6647] usb 5-1: Manufacturer: syz [ 245.764406][ T6647] usb 5-1: SerialNumber: syz [ 245.849885][ T6806] netlink: 'syz.0.789': attribute type 21 has an invalid length. [ 245.859229][ T6806] netlink: 128 bytes leftover after parsing attributes in process `syz.0.789'. [ 245.868673][ T6806] netlink: 'syz.0.789': attribute type 5 has an invalid length. [ 245.877040][ T6806] netlink: 'syz.0.789': attribute type 6 has an invalid length. [ 245.887064][ T6806] netlink: 3 bytes leftover after parsing attributes in process `syz.0.789'. [ 245.918930][ T6648] usb 2-1: GET_CAPABILITIES returned 0 [ 245.925739][ T6648] usbtmc 2-1:16.0: can't read capabilities [ 246.019012][ T6647] usb 5-1: interface 3 not found [ 246.060540][ T6647] usb 5-1: USB disconnect, device number 14 [ 246.130661][ T6648] usb 2-1: USB disconnect, device number 25 [ 247.613549][ T6648] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 247.829388][ T6648] usb 2-1: Using ep0 maxpacket: 16 [ 248.309885][ T6648] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.511220][ T6648] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 248.551454][ T6648] usb 2-1: config 0 interface 0 has no altsetting 0 [ 248.579152][ T6648] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 248.617010][ T6648] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.649161][ T6648] usb 2-1: config 0 descriptor?? [ 249.494765][ T6865] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 249.502832][ T6865] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 250.370889][ T6648] usbhid 2-1:0.0: can't add hid device: -71 [ 250.382608][ T6648] usbhid: probe of 2-1:0.0 failed with error -71 [ 250.453256][ T6648] usb 2-1: USB disconnect, device number 26 [ 251.133787][ T5041] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 251.343827][ T5041] usb 3-1: Using ep0 maxpacket: 8 [ 251.351468][ T5041] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.370942][ T5041] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.395993][ T5041] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.421702][ T5041] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 251.506705][ T5041] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.559076][ T5041] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.603334][ T5041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.683246][ T5041] usbtmc 3-1:16.0: bulk endpoints not found [ 252.759724][ T6923] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 253.982195][ T6950] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 254.018238][ T6950] rdma_rxe: rxe_register_device failed with error -23 [ 254.029392][ T6950] rdma_rxe: failed to add wg2 [ 254.098038][ T6648] usb 3-1: USB disconnect, device number 30 [ 255.857601][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.864345][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.397945][ T7005] tipc: Enabling of bearer rejected, failed to enable media [ 258.153805][ T6648] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 258.330269][ T7019] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 258.343612][ T6648] usb 3-1: Using ep0 maxpacket: 16 [ 258.350519][ T6648] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.366493][ T7019] rdma_rxe: already configured on wg2 [ 258.431973][ T6648] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 258.487801][ T6648] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.520904][ T6648] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 258.625917][ T6648] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.691507][ T6648] usb 3-1: config 0 descriptor?? [ 261.340789][ T6648] usbhid 3-1:0.0: can't add hid device: -71 [ 261.353634][ T6648] usbhid: probe of 3-1:0.0 failed with error -71 [ 261.422827][ T6648] usb 3-1: USB disconnect, device number 31 [ 264.849680][ T7087] loop3: detected capacity change from 0 to 32768 [ 264.875836][ T7087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.869 (7087) [ 264.947512][ T7087] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 264.981337][ T7087] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 265.018641][ T7087] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 265.062523][ T7087] BTRFS info (device loop3): trying to use backup root at mount time [ 265.093017][ T7087] BTRFS info (device loop3): setting nodatasum [ 265.109951][ T7087] BTRFS info (device loop3): enabling ssd optimizations [ 265.158398][ T7087] BTRFS info (device loop3): using spread ssd allocation scheme [ 265.197341][ T7087] BTRFS info (device loop3): turning on flush-on-commit [ 265.218780][ T7087] BTRFS info (device loop3): force zlib compression, level 3 [ 265.247833][ T7087] BTRFS info (device loop3): using free space tree [ 265.374860][ T7087] BTRFS error (device loop3): open_ctree failed: -12 [ 266.964433][ T7161] binder: 7160:7161 unknown command 0 [ 266.969872][ T7161] binder: 7160:7161 ioctl c0306201 200000000080 returned -22 [ 267.983499][ T6647] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 268.185434][ T6647] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.226636][ T6647] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.258319][ T6647] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.292721][ T6647] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 268.348792][ T6647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.378732][ T6647] usb 5-1: Product: syz [ 268.392980][ T6647] usb 5-1: Manufacturer: syz [ 268.405387][ T6647] usb 5-1: SerialNumber: syz [ 268.642792][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.678603][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.688824][ T4273] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 268.781520][ T6647] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 268.827176][ T6647] usb 5-1: USB disconnect, device number 15 [ 268.876691][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.892880][ T4273] usb 4-1: Using ep0 maxpacket: 8 [ 268.905259][ T4273] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 268.938475][ T4273] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.960275][ T7181] loop2: detected capacity change from 0 to 32768 [ 268.969292][ T4273] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.005854][ T7181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.892 (7181) [ 269.038578][ T4273] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 269.076898][ T4273] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 269.110766][ T4273] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.161353][ T4273] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.190302][ T4273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.246321][ T4273] usbtmc: probe of 4-1:16.0 failed with error -22 [ 269.257250][ T7181] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.273614][ T7181] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 269.307003][ T7181] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 269.348995][ T7181] BTRFS info (device loop2): trying to use backup root at mount time [ 269.388432][ T7181] BTRFS info (device loop2): setting nodatasum [ 269.418558][ T7181] BTRFS info (device loop2): enabling ssd optimizations [ 269.449647][ T7181] BTRFS info (device loop2): using spread ssd allocation scheme [ 269.481433][ T7181] BTRFS info (device loop2): turning on flush-on-commit [ 269.498737][ T7181] BTRFS info (device loop2): force zlib compression, level 3 [ 269.523787][ T7181] BTRFS info (device loop2): using free space tree [ 269.699310][ T26] audit: type=1800 audit(1778178739.241:22): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.892" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 270.043730][ T5033] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 270.259334][ T5033] usb 3-1: Using ep0 maxpacket: 8 [ 270.270827][ T5033] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 270.309390][ T5033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.328256][ T5033] usb 3-1: Product: syz [ 270.332526][ T5033] usb 3-1: Manufacturer: syz [ 270.343656][ T5033] usb 3-1: SerialNumber: syz [ 270.741175][ T7227] loop2: detected capacity change from 32768 to 0 [ 271.719619][ T4273] usb 4-1: USB disconnect, device number 22 [ 272.223592][ T4273] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 272.422988][ T4273] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 272.470095][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.529786][ T4273] usb 1-1: Product: syz [ 272.556501][ T4273] usb 1-1: Manufacturer: syz [ 272.561361][ T4273] usb 1-1: SerialNumber: syz [ 272.779598][ T5033] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 272.823616][ T7181] syz.2.892 (7181) used greatest stack depth: 20272 bytes left [ 272.884899][ T5033] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 272.954722][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.973824][ T5033] usb 3-1: USB disconnect, device number 32 [ 273.030487][ T4270] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.041615][ T4273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 273.309408][ T6647] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 273.482649][ T4273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 273.513287][ T4273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 273.530535][ T6647] usb 2-1: unable to get BOS descriptor or descriptor too short [ 273.539398][ T4273] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 273.550257][ T6647] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.578133][ T6647] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.615996][ T6647] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 273.626853][ T4273] lan78xx: probe of 1-1:1.0 failed with error -71 [ 273.646169][ T4273] usb 1-1: USB disconnect, device number 11 [ 273.657086][ T6647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.681668][ T6647] usb 2-1: Product: syz [ 273.694851][ T6647] usb 2-1: Manufacturer: syz [ 273.699671][ T6647] usb 2-1: SerialNumber: syz [ 273.964862][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.003794][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.096973][ T7281] device syzkaller0 entered promiscuous mode [ 274.114589][ T7282] binder: 7278:7282 ioctl c0306201 200000000480 returned -14 [ 274.148671][ T6647] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 274.216320][ T6647] usb 2-1: USB disconnect, device number 27 [ 274.226872][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.455694][ T7288] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7288] [ 274.479918][ T7288] netlink: 'syz.0.914': attribute type 21 has an invalid length. [ 274.491505][ T7288] netlink: 128 bytes leftover after parsing attributes in process `syz.0.914'. [ 274.515921][ T7288] netlink: 'syz.0.914': attribute type 5 has an invalid length. [ 274.531265][ T7288] netlink: 'syz.0.914': attribute type 6 has an invalid length. [ 274.539326][ T7288] netlink: 3 bytes leftover after parsing attributes in process `syz.0.914'. [ 278.003618][ T4273] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 278.028203][ T7343] binder: 7338:7343 ioctl c0306201 200000000480 returned -14 [ 278.058886][ T7341] device syzkaller0 entered promiscuous mode [ 278.074460][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.930'. [ 278.202824][ T7349] device syzkaller0 entered promiscuous mode [ 278.215693][ T4273] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.231074][ T4273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.258517][ T4273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.293664][ T4273] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 278.303129][ T4273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.311775][ T4273] usb 1-1: Product: syz [ 278.316035][ T4273] usb 1-1: Manufacturer: syz [ 278.320658][ T4273] usb 1-1: SerialNumber: syz [ 278.560768][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.591292][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.648994][ T4273] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 278.672691][ T4273] usb 1-1: USB disconnect, device number 12 [ 278.721540][ T7363] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7363] [ 278.770176][ T7363] netlink: 'syz.3.936': attribute type 21 has an invalid length. [ 278.788289][ T7363] netlink: 128 bytes leftover after parsing attributes in process `syz.3.936'. [ 278.840438][ T7363] netlink: 'syz.3.936': attribute type 5 has an invalid length. [ 278.848621][ T7363] netlink: 'syz.3.936': attribute type 6 has an invalid length. [ 278.859857][ T7363] netlink: 3 bytes leftover after parsing attributes in process `syz.3.936'. [ 278.896635][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.032845][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 280.636694][ T7411] binder: 7405:7411 ioctl c0306201 200000000480 returned -14 [ 281.005675][ T7417] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7417] [ 281.109005][ T7417] netlink: 'syz.3.952': attribute type 21 has an invalid length. [ 281.132852][ T7417] netlink: 128 bytes leftover after parsing attributes in process `syz.3.952'. [ 281.161186][ T7417] netlink: 'syz.3.952': attribute type 5 has an invalid length. [ 281.169329][ T7417] netlink: 'syz.3.952': attribute type 6 has an invalid length. [ 281.179266][ T7417] netlink: 3 bytes leftover after parsing attributes in process `syz.3.952'. [ 283.108072][ T7450] device syzkaller0 entered promiscuous mode [ 283.391696][ T7456] binder: 7454:7456 ioctl c0306201 200000000480 returned -14 [ 286.204081][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 286.269042][ T7498] capability: warning: `syz.1.975' uses 32-bit capabilities (legacy support in use) [ 286.413504][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 286.423284][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 286.451753][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.486478][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.517012][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.559025][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.593691][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.633440][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.655721][ T7504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 286.918903][ T22] usb 1-1: usb_control_msg returned -32 [ 286.924237][ T7509] binder: 7506:7509 ioctl c0306201 200000000480 returned -14 [ 286.924772][ T22] usbtmc 1-1:16.0: can't read capabilities [ 287.301122][ T7508] wg2 speed is unknown, defaulting to 1000 [ 287.471356][ T7513] device syzkaller0 entered promiscuous mode [ 287.627174][ T7514] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 288.029162][ T7527] binfmt_misc: register: failed to install interpreter file ./file0 [ 288.982007][ T5033] usb 1-1: USB disconnect, device number 13 [ 289.302785][ T7545] device syzkaller0 entered promiscuous mode [ 289.349056][ T7547] device syzkaller0 entered promiscuous mode [ 289.569022][ T7550] tipc: Started in network mode [ 289.617428][ T7550] tipc: Node identity d27fdadef145, cluster identity 4711 [ 289.653991][ T7550] tipc: Enabled bearer , priority 0 [ 290.023830][ T7542] tipc: Resetting bearer [ 290.076493][ T7542] tipc: Disabling bearer [ 291.608168][ T7587] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 291.859096][ T7587] rdma_rxe: rxe_register_device failed with error -23 [ 291.869331][ T7587] rdma_rxe: failed to add wg2 [ 292.589569][ T7601] device syzkaller0 entered promiscuous mode [ 292.725975][ T7602] tipc: Started in network mode [ 292.748049][ T7602] tipc: Node identity b2085d850c6b, cluster identity 4711 [ 292.763231][ T7602] tipc: Enabled bearer , priority 0 [ 293.406911][ T7600] tipc: Resetting bearer [ 293.460325][ T7600] tipc: Disabling bearer [ 296.337665][ T7677] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 296.368353][ T7677] rdma_rxe: rxe_register_device failed with error -23 [ 296.377698][ T7677] rdma_rxe: failed to add wg2 [ 297.503654][ T5033] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 297.713441][ T5033] usb 5-1: Using ep0 maxpacket: 8 [ 297.720108][ T5033] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 297.776304][ T5033] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 297.836637][ T5033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.872101][ T5033] usb 5-1: Product: syz [ 297.882258][ T5033] usb 5-1: Manufacturer: syz [ 297.901404][ T5033] usb 5-1: SerialNumber: syz [ 297.942305][ T5033] usb 5-1: config 0 descriptor?? [ 297.960516][ T5033] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 297.993736][ T5033] usb 5-1: setting power ON [ 297.998584][ T5033] dvb-usb: bulk message failed: -22 (2/0) [ 298.022580][ T5033] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.055230][ T5033] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 298.083502][ T5033] usb 5-1: media controller created [ 298.133276][ T5033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.158890][ T7680] dvb-usb: bulk message failed: -22 (3/0) [ 298.183441][ T7680] cxusb: i2c wr: len=80 is too big! [ 298.183441][ T7680] [ 298.434098][ T5033] usb 5-1: selecting invalid altsetting 6 [ 298.440304][ T5033] usb 5-1: digital interface selection failed (-22) [ 298.477702][ T5033] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 298.501652][ T5033] usb 5-1: setting power OFF [ 298.519437][ T5033] dvb-usb: bulk message failed: -22 (2/0) [ 298.529527][ T5033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 298.582602][ T5033] (NULL device *): no alternate interface [ 298.695911][ T5033] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 298.809137][ T5033] usb 5-1: USB disconnect, device number 16 [ 299.371400][ T7704] netlink: 'syz.2.1039': attribute type 16 has an invalid length. [ 299.443286][ T7704] netlink: 'syz.2.1039': attribute type 17 has an invalid length. [ 299.490475][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.512733][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.685055][ T46] tipc: Subscription rejected, illegal request [ 301.589731][ T7737] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 301.604742][ T7737] rdma_rxe: rxe_register_device failed with error -23 [ 301.611867][ T7737] rdma_rxe: failed to add wg2 [ 305.413633][ T5492] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 305.603477][ T5492] usb 2-1: Using ep0 maxpacket: 16 [ 305.610233][ T5492] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.624737][ T5492] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 305.637960][ T5492] usb 2-1: config 0 interface 0 has no altsetting 0 [ 305.644705][ T5492] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 305.654263][ T5492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.669121][ T5492] usb 2-1: config 0 descriptor?? [ 305.930968][ T7796] device syzkaller0 entered promiscuous mode [ 305.998308][ T7797] tipc: Enabled bearer , priority 0 [ 306.752795][ T7795] tipc: Resetting bearer [ 306.788633][ T7795] tipc: Disabling bearer [ 307.734629][ T7827] device syzkaller0 entered promiscuous mode [ 308.077010][ T7829] tipc: Started in network mode [ 308.085425][ T7829] tipc: Node identity 6ec0445ce02, cluster identity 4711 [ 308.147767][ T7829] tipc: Enabled bearer , priority 0 [ 308.212105][ T5492] usbhid 2-1:0.0: can't add hid device: -71 [ 308.232149][ T5492] usbhid: probe of 2-1:0.0 failed with error -71 [ 308.291101][ T5492] usb 2-1: USB disconnect, device number 28 [ 308.551052][ T7826] tipc: Resetting bearer [ 308.581622][ T7826] tipc: Disabling bearer [ 310.013728][ T22] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 310.219174][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 310.228545][ T22] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.272766][ T22] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 310.288116][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.295282][ T22] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 310.304803][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.316493][ T22] usb 3-1: config 0 descriptor?? [ 311.106793][ T7880] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1103'. [ 312.845350][ T22] usbhid 3-1:0.0: can't add hid device: -71 [ 312.863851][ T22] usbhid: probe of 3-1:0.0 failed with error -71 [ 312.905094][ T22] usb 3-1: USB disconnect, device number 33 [ 313.238833][ T7911] netlink: 'syz.4.1115': attribute type 16 has an invalid length. [ 313.272844][ T7911] netlink: 'syz.4.1115': attribute type 17 has an invalid length. [ 313.365477][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.400925][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.447095][ T7913] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1114'. [ 314.173577][ T22] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 314.353511][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 314.360487][ T22] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.371591][ T22] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 314.384738][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 314.391385][ T22] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 314.400581][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.410485][ T22] usb 5-1: config 0 descriptor?? [ 315.283499][ T4273] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 315.476399][ T4273] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.496151][ T4273] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.513427][ T4273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.536582][ T4273] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 315.554016][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.571716][ T4273] usb 4-1: Product: syz [ 315.577189][ T4273] usb 4-1: Manufacturer: syz [ 315.582942][ T4273] usb 4-1: SerialNumber: syz [ 315.830380][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.854232][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.908071][ T4273] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 315.938284][ T4273] usb 4-1: USB disconnect, device number 23 [ 316.179582][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.348856][ T7954] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1129'. [ 316.421679][ T7956] netlink: 'syz.1.1130': attribute type 16 has an invalid length. [ 316.438109][ T7956] netlink: 'syz.1.1130': attribute type 17 has an invalid length. [ 316.477809][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.488655][ T7956] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.896753][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 316.905422][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 316.946676][ T22] usb 5-1: USB disconnect, device number 17 [ 317.116902][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'. [ 317.135253][ T7976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.235404][ T7976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.298028][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.309858][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.545139][ T7984] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1141'. [ 318.183456][ T5033] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 318.375332][ T5033] usb 2-1: unable to get BOS descriptor or descriptor too short [ 318.394319][ T5033] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.449635][ T5033] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.487690][ T5033] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 318.522627][ T5033] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.547946][ T5033] usb 2-1: Product: syz [ 318.556278][ T5033] usb 2-1: Manufacturer: syz [ 318.573764][ T5033] usb 2-1: SerialNumber: syz [ 318.848977][ T7989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.914250][ T7989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.958577][ T5033] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 318.982875][ T5033] usb 2-1: USB disconnect, device number 29 [ 319.236192][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.459966][ T7998] netlink: 'syz.0.1145': attribute type 39 has an invalid length. [ 320.124156][ T5033] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 320.512697][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 320.522103][ T5033] usb 2-1: Using ep0 maxpacket: 16 [ 320.535270][ T5033] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.543491][ T8017] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1152'. [ 320.563058][ T5033] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 320.590180][ T5033] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.605255][ T5033] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 320.626427][ T5033] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.664074][ T5033] usb 2-1: config 0 descriptor?? [ 321.520249][ T5492] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 321.667842][ T26] audit: type=1326 audit(1778178791.211:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 321.708636][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.756300][ T5492] usb 4-1: unable to get BOS descriptor or descriptor too short [ 321.782031][ T5492] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.788327][ T26] audit: type=1326 audit(1778178791.291:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 321.819063][ T26] audit: type=1326 audit(1778178791.291:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 321.848751][ T5492] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.891144][ T5492] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 321.896300][ T26] audit: type=1326 audit(1778178791.291:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 321.908188][ T5492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.924931][ T26] audit: type=1326 audit(1778178791.291:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 321.944973][ T5492] usb 4-1: Product: syz [ 321.962698][ T26] audit: type=1326 audit(1778178791.291:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 321.981057][ T5492] usb 4-1: Manufacturer: syz [ 322.001599][ T26] audit: type=1326 audit(1778178791.291:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 322.002485][ T5492] usb 4-1: SerialNumber: syz [ 322.067413][ T26] audit: type=1326 audit(1778178791.291:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.2.1159" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f8eb9cdd9 code=0x7ffc0000 [ 322.277208][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.319432][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.412675][ T5492] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 322.486016][ T5492] usb 4-1: USB disconnect, device number 24 [ 322.724727][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.792949][ T5033] usbhid 2-1:0.0: can't add hid device: -71 [ 322.805075][ T5033] usbhid: probe of 2-1:0.0 failed with error -71 [ 322.847278][ T5033] usb 2-1: USB disconnect, device number 30 [ 323.044169][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1164'. [ 323.069049][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1164'. [ 325.333469][ T4319] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 325.450873][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1176'. [ 325.473440][ T8087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 325.549355][ T4319] usb 4-1: Using ep0 maxpacket: 16 [ 325.573295][ T4319] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.603443][ T4319] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 325.623440][ T4319] usb 4-1: config 0 interface 0 has no altsetting 0 [ 325.630174][ T4319] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 325.653460][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.672392][ T5033] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 325.674307][ T4319] usb 4-1: config 0 descriptor?? [ 325.885842][ T5033] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.907025][ T5033] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.951565][ T5033] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.022470][ T5033] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 326.058567][ T5033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.089856][ T5033] usb 3-1: Product: syz [ 326.119971][ T5033] usb 3-1: Manufacturer: syz [ 326.128432][ T5033] usb 3-1: SerialNumber: syz [ 326.375069][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.394063][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.455264][ T5033] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 326.533601][ T5033] usb 3-1: USB disconnect, device number 34 [ 326.535168][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.361261][ T8103] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 327.428515][ T8103] rdma_rxe: rxe_register_device failed with error -23 [ 327.458708][ T8103] rdma_rxe: failed to add wg2 [ 328.098069][ T4319] usbhid 4-1:0.0: can't add hid device: -71 [ 328.106794][ T4319] usbhid: probe of 4-1:0.0 failed with error -71 [ 328.204660][ T4319] usb 4-1: USB disconnect, device number 25 [ 329.468417][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1187'. [ 329.490972][ T8125] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1187'. [ 330.783628][ T4319] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 330.978968][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.996580][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.008714][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.023132][ T4319] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 331.036097][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.045489][ T4319] usb 2-1: Product: syz [ 331.049805][ T4319] usb 2-1: Manufacturer: syz [ 331.057256][ T4319] usb 2-1: SerialNumber: syz [ 331.103676][ T6647] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 331.280467][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.293499][ T6647] usb 3-1: Using ep0 maxpacket: 16 [ 331.300838][ T6647] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.323895][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.373320][ T6647] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 331.427336][ T4319] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 331.493277][ T4319] usb 2-1: USB disconnect, device number 31 [ 331.500400][ T6647] usb 3-1: config 0 interface 0 has no altsetting 0 [ 331.526269][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.546083][ T6647] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 331.564334][ T6647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.594671][ T6647] usb 3-1: config 0 descriptor?? [ 332.752502][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1199'. [ 332.830861][ T8165] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1199'. [ 333.933027][ T6647] usbhid 3-1:0.0: can't add hid device: -71 [ 333.952452][ T6647] usbhid: probe of 3-1:0.0 failed with error -71 [ 334.013989][ T6647] usb 3-1: USB disconnect, device number 35 [ 334.243449][ T4319] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 334.265279][ T8196] capability: warning: `syz.2.1211' uses deprecated v2 capabilities in a way that may be insecure [ 334.456329][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 334.494037][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.550349][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.567340][ T4319] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 334.578972][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.595787][ T4319] usb 2-1: Product: syz [ 334.621332][ T4319] usb 2-1: Manufacturer: syz [ 334.645627][ T4319] usb 2-1: SerialNumber: syz [ 334.650521][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1213'. [ 334.681730][ T8200] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1213'. [ 334.899908][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.934364][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.024094][ T4319] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 335.090182][ T4319] usb 2-1: USB disconnect, device number 32 [ 335.120454][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.221452][ T8204] netlink: 'syz.4.1215': attribute type 16 has an invalid length. [ 335.243592][ T8204] netlink: 'syz.4.1215': attribute type 17 has an invalid length. [ 335.586883][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 335.612561][ T8214] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 335.612561][ T8214] program syz.2.1219 not setting count and/or reply_len properly [ 336.195294][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 336.204566][ T8229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1224'. [ 336.459480][ T8234] device syzkaller0 entered promiscuous mode [ 336.687788][ T8241] netlink: 'syz.4.1228': attribute type 16 has an invalid length. [ 336.721036][ T8241] netlink: 'syz.4.1228': attribute type 17 has an invalid length. [ 337.091571][ T8239] wg2 speed is unknown, defaulting to 1000 [ 337.839939][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1235'. [ 337.853692][ T8261] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1235'. [ 338.274753][ T8271] device syzkaller0 entered promiscuous mode [ 339.442036][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1246'. [ 339.459957][ T8292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1246'. [ 341.900642][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1257'. [ 341.973469][ T8321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1257'. [ 342.013749][ T8324] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1256'. [ 342.443448][ T5492] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 342.510511][ T8334] wg2 speed is unknown, defaulting to 1000 [ 342.636978][ T5492] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 342.656700][ T5492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.698721][ T5492] usb 4-1: Product: syz [ 342.703792][ T5041] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 342.717334][ T5492] usb 4-1: Manufacturer: syz [ 342.741044][ T5492] usb 4-1: SerialNumber: syz [ 343.029922][ T5492] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 343.134868][ T5041] usb 5-1: Using ep0 maxpacket: 16 [ 343.145042][ T5041] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.158367][ T5492] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 343.169942][ T5041] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 343.213496][ T5041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 343.243465][ T5041] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 343.296302][ T5041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.560268][ T5041] usb 5-1: config 0 descriptor?? [ 343.968942][ T5492] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 343.992055][ T5492] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 344.039936][ T5492] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 344.059422][ T5492] lan78xx: probe of 4-1:1.0 failed with error -71 [ 344.073921][ T5492] usb 4-1: USB disconnect, device number 26 [ 344.213430][ T4319] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 344.425946][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 344.444747][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.472962][ T4319] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.496424][ T4319] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 344.516994][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.530710][ T4319] usb 1-1: Product: syz [ 344.536357][ T4319] usb 1-1: Manufacturer: syz [ 344.541214][ T4319] usb 1-1: SerialNumber: syz [ 344.782910][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.823912][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.930797][ T4319] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 344.957938][ T4319] usb 1-1: USB disconnect, device number 14 [ 345.039244][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1269'. [ 345.063517][ T8359] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1269'. [ 345.210608][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 345.409574][ T5041] usbhid 5-1:0.0: can't add hid device: -71 [ 345.416345][ T5041] usbhid: probe of 5-1:0.0 failed with error -71 [ 345.426595][ T5041] usb 5-1: USB disconnect, device number 18 [ 345.711473][ T8375] device syzkaller0 entered promiscuous mode [ 345.752464][ T8375] tipc: Enabled bearer , priority 0 [ 345.760836][ T8374] tipc: Resetting bearer [ 345.816969][ T8374] tipc: Disabling bearer [ 346.498193][ T8384] netlink: 'syz.4.1277': attribute type 16 has an invalid length. [ 346.514155][ T8384] netlink: 'syz.4.1277': attribute type 17 has an invalid length. [ 346.865621][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1281'. [ 346.875872][ T8393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1281'. [ 347.383436][ T5041] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 347.523427][ T5492] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 347.573405][ T5041] usb 3-1: Using ep0 maxpacket: 16 [ 347.581011][ T5041] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.606377][ T5041] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 347.623093][ T5041] usb 3-1: config 0 interface 0 has no altsetting 0 [ 347.639744][ T5041] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 347.649355][ T5041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.678879][ T5041] usb 3-1: config 0 descriptor?? [ 347.705238][ T5492] usb 1-1: unable to get BOS descriptor or descriptor too short [ 347.718752][ T5492] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.729979][ T5492] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.746600][ T5492] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 347.759597][ T5492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.769369][ T5492] usb 1-1: Product: syz [ 347.779218][ T5492] usb 1-1: Manufacturer: syz [ 347.791528][ T5492] usb 1-1: SerialNumber: syz [ 348.038117][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.052791][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.106668][ T5492] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 348.143938][ T5492] usb 1-1: USB disconnect, device number 15 [ 348.304004][ T8412] device syzkaller0 entered promiscuous mode [ 348.385314][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.410599][ T8412] tipc: Enabled bearer , priority 0 [ 348.455764][ T8411] tipc: Resetting bearer [ 348.535129][ T8411] tipc: Disabling bearer [ 350.046334][ T8432] netlink: 'syz.4.1293': attribute type 16 has an invalid length. [ 350.101758][ T5041] usbhid 3-1:0.0: can't add hid device: -71 [ 350.128671][ T5041] usbhid: probe of 3-1:0.0 failed with error -71 [ 350.147440][ T8432] netlink: 'syz.4.1293': attribute type 17 has an invalid length. [ 350.175498][ T5041] usb 3-1: USB disconnect, device number 36 [ 351.343446][ T4319] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 351.415253][ T8460] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8460] [ 351.514034][ T8460] netlink: 'syz.2.1301': attribute type 21 has an invalid length. [ 351.529559][ T8460] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1301'. [ 351.540835][ T8460] netlink: 'syz.2.1301': attribute type 5 has an invalid length. [ 351.555123][ T4319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 351.581953][ T4319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.612633][ T4319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.633572][ T8460] netlink: 'syz.2.1301': attribute type 6 has an invalid length. [ 351.642423][ T4319] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 351.661587][ T8460] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1301'. [ 351.685607][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.699325][ T4319] usb 5-1: Product: syz [ 351.704161][ T4319] usb 5-1: Manufacturer: syz [ 351.720590][ T4319] usb 5-1: SerialNumber: syz [ 351.970435][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.072989][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.179992][ T26] audit: type=1804 audit(1778178821.721:31): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1304" name="/newroot/247/file1" dev="fuse" ino=1 res=1 errno=0 [ 352.229897][ T8468] device syzkaller0 entered promiscuous mode [ 352.258788][ T4319] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 352.293990][ T26] audit: type=1800 audit(1778178821.751:32): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1304" name="/" dev="fuse" ino=1 res=0 errno=0 [ 352.322874][ T4319] usb 5-1: USB disconnect, device number 19 [ 352.564513][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.703543][ T6647] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 353.143431][ T6647] usb 3-1: Using ep0 maxpacket: 16 [ 353.150835][ T6647] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.176249][ T6647] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 353.218981][ T6647] usb 3-1: config 0 interface 0 has no altsetting 0 [ 353.251193][ T6647] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 353.297669][ T6647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.342577][ T6647] usb 3-1: config 0 descriptor?? [ 354.273450][ T4319] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 354.513610][ T4319] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 354.523087][ T4319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.301890][ T4319] usb 4-1: Product: syz [ 356.333189][ T4319] usb 4-1: Manufacturer: syz [ 356.338175][ T4319] usb 4-1: SerialNumber: syz [ 356.485296][ T6647] usbhid 3-1:0.0: can't add hid device: -71 [ 356.492502][ T6647] usbhid: probe of 3-1:0.0 failed with error -71 [ 356.513294][ T6647] usb 3-1: USB disconnect, device number 37 [ 356.560985][ T4319] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 356.579099][ T4319] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 356.592229][ T4319] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 356.621270][ T8504] device syzkaller0 entered promiscuous mode [ 356.627876][ T4319] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 356.645029][ T4319] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 356.685391][ T4319] lan78xx: probe of 4-1:1.0 failed with error -32 [ 356.741810][ T8504] tipc: Enabled bearer , priority 0 [ 356.775877][ T8502] tipc: Resetting bearer [ 356.844651][ T8502] tipc: Disabling bearer [ 357.784371][ T6647] usb 4-1: USB disconnect, device number 27 [ 359.813464][ T5492] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 360.026361][ T5492] usb 1-1: Using ep0 maxpacket: 16 [ 360.033772][ T5492] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.073629][ T5492] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 360.116501][ T5492] usb 1-1: config 0 interface 0 has no altsetting 0 [ 360.133743][ T5492] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 360.168780][ T5492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.199473][ T5492] usb 1-1: config 0 descriptor?? [ 360.673465][ T5041] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 361.628902][ T5041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.643177][ T5041] usb 5-1: not running at top speed; connect to a high speed hub [ 361.654473][ T5041] usb 5-1: config 3 has an invalid interface number: 166 but max is 0 [ 361.663224][ T5041] usb 5-1: config 3 has no interface number 0 [ 361.669881][ T5041] usb 5-1: config 3 interface 166 has no altsetting 0 [ 361.681902][ T5041] usb 5-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 361.691696][ T5041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.704145][ T5041] usb 5-1: Product: syz [ 361.721859][ T5041] usb 5-1: Manufacturer: syz [ 361.730961][ T5041] usb 5-1: SerialNumber: syz [ 361.956989][ T8566] fuse: Bad value for 'fd' [ 362.695421][ T5492] usbhid 1-1:0.0: can't add hid device: -71 [ 362.702523][ T5492] usbhid: probe of 1-1:0.0 failed with error -71 [ 362.722972][ T5492] usb 1-1: USB disconnect, device number 16 [ 365.664849][ T5041] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 365.695826][ T5041] gspca_sn9c20x: Write register 1000 failed -71 [ 365.715059][ T5041] gspca_sn9c20x: Device initialization failed [ 365.732125][ T5041] gspca_sn9c20x: probe of 5-1:3.166 failed with error -71 [ 365.758091][ T5041] usb 5-1: USB disconnect, device number 20 [ 365.986270][ T8598] device syzkaller0 entered promiscuous mode [ 366.130227][ T8608] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8608] [ 368.000796][ T8617] fuse: Bad value for 'fd' [ 369.239627][ T8627] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 369.434149][ T8608] netlink: 'syz.3.1342': attribute type 21 has an invalid length. [ 369.442029][ T8608] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1342'. [ 369.478137][ T8608] netlink: 'syz.3.1342': attribute type 5 has an invalid length. [ 369.519187][ T8608] netlink: 'syz.3.1342': attribute type 6 has an invalid length. [ 369.538761][ T8608] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1342'. [ 370.073443][ T5041] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 370.275457][ T5041] usb 4-1: unable to get BOS descriptor or descriptor too short [ 370.292660][ T5041] usb 4-1: config 8 has an invalid interface number: 196 but max is 0 [ 370.347072][ T5041] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 370.380403][ T5041] usb 4-1: config 8 has no interface number 0 [ 370.399274][ T5041] usb 4-1: config 8 interface 196 has no altsetting 0 [ 370.427425][ T5041] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=3c.b5 [ 370.454827][ T5041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.531374][ T5041] usb 4-1: Product: syz [ 370.537575][ T5041] usb 4-1: Manufacturer: syz [ 370.567872][ T5041] usb 4-1: SerialNumber: syz [ 371.937058][ T8658] fuse: Bad value for 'fd' [ 373.003479][ T5041] usb 4-1: USB disconnect, device number 28 [ 373.312822][ T8674] device syzkaller0 entered promiscuous mode [ 373.417255][ T8677] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8677] [ 373.578433][ T8665] loop1: detected capacity change from 0 to 32768 [ 373.621943][ T8665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1358 (8665) [ 373.728583][ T8665] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.740304][ T8665] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 373.759715][ T8665] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 373.782247][ T8665] BTRFS info (device loop1): trying to use backup root at mount time [ 373.802164][ T8665] BTRFS info (device loop1): setting nodatasum [ 373.809851][ T8665] BTRFS info (device loop1): enabling ssd optimizations [ 373.817711][ T8665] BTRFS info (device loop1): using spread ssd allocation scheme [ 373.850190][ T8665] BTRFS info (device loop1): turning on flush-on-commit [ 373.870491][ T8665] BTRFS info (device loop1): force zlib compression, level 3 [ 373.879360][ T8665] BTRFS info (device loop1): using free space tree [ 374.119133][ T26] audit: type=1800 audit(1778178843.671:33): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1358" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 374.443489][ T4319] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 374.633432][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 374.663520][ T4319] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 374.718947][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.773728][ T4319] usb 2-1: Product: syz [ 374.778058][ T4319] usb 2-1: Manufacturer: syz [ 374.831395][ T4319] usb 2-1: SerialNumber: syz [ 375.143794][ T8697] loop1: detected capacity change from 32768 to 0 [ 376.268036][ T4319] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 376.315669][ T4319] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 376.355273][ T4319] usb 2-1: USB disconnect, device number 33 [ 376.361191][ T4412] udevd[4412]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.489986][ T4271] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.288060][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 377.518192][ T8721] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 377.518192][ T8721] program syz.0.1370 not setting count and/or reply_len properly [ 378.739773][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.749130][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.960118][ T8677] netlink: 'syz.3.1362': attribute type 21 has an invalid length. [ 379.968677][ T8677] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1362'. [ 379.978055][ T8677] netlink: 'syz.3.1362': attribute type 5 has an invalid length. [ 379.987451][ T8677] netlink: 'syz.3.1362': attribute type 6 has an invalid length. [ 380.037097][ T8677] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1362'. [ 380.096887][ T26] audit: type=1800 audit(1778178849.641:34): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1371" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 380.107506][ T8730] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 380.117350][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.173710][ T8730] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 380.202466][ T8730] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 380.370991][ T8730] syz.0.1371 (8730) used greatest stack depth: 20120 bytes left [ 381.744672][ T8764] device syzkaller0 entered promiscuous mode [ 382.842431][ T8781] wg2 speed is unknown, defaulting to 1000 [ 384.477440][ T8794] tipc: Enabled bearer , priority 0 [ 384.520727][ T8793] tipc: Disabling bearer [ 385.233979][ T8803] 9pnet_virtio: no channels available for device syz [ 385.827735][ T8801] sched: RT throttling activated [ 385.866600][ T8806] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 386.834436][ T4314] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 387.325813][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 387.346910][ T4314] usb 5-1: config 8 has an invalid interface number: 196 but max is 0 [ 387.369155][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 387.393459][ T5492] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 387.416972][ T4314] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 387.448940][ T4314] usb 5-1: config 8 has no interface number 0 [ 387.479466][ T4314] usb 5-1: config 8 interface 196 has no altsetting 0 [ 387.514051][ T4314] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=3c.b5 [ 387.569030][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.608797][ T4314] usb 5-1: Product: syz [ 387.628561][ T5492] usb 4-1: Using ep0 maxpacket: 16 [ 387.635022][ T5492] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 387.673405][ T4314] usb 5-1: Manufacturer: syz [ 387.694840][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.706172][ T4314] usb 5-1: SerialNumber: syz [ 387.746333][ T4314] usb 5-1: can't set config #8, error -71 [ 387.753725][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.780768][ T4314] usb 5-1: USB disconnect, device number 21 [ 387.798806][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.820955][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.832606][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.845828][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.879221][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.910925][ T5492] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.981334][ T5492] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 388.006589][ T5492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 388.035248][ T5492] usb 4-1: SerialNumber: syz [ 388.050472][ T5492] usb 4-1: config 0 descriptor?? [ 388.072312][ T5492] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 388.960948][ T8806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1394'. [ 390.795429][ T3622] bcm5974 4-1:0.0: could not read from device [ 390.815662][ T5492] usb 4-1: USB disconnect, device number 29 [ 390.822469][ T3622] bcm5974 4-1:0.0: could not read from device [ 391.122666][ T8839] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 391.483524][ T4314] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 391.713473][ T4314] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.738805][ T4314] usb 1-1: config 8 has an invalid interface number: 196 but max is 0 [ 391.773566][ T4314] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 391.787291][ T4314] usb 1-1: config 8 has no interface number 0 [ 391.818145][ T4314] usb 1-1: config 8 interface 196 has no altsetting 0 [ 391.858339][ T4314] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=3c.b5 [ 391.896872][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.923517][ T4314] usb 1-1: Product: syz [ 391.928746][ T4314] usb 1-1: Manufacturer: syz [ 391.935889][ T4314] usb 1-1: SerialNumber: syz [ 392.538963][ T4314] usb 1-1: USB disconnect, device number 17 [ 393.125138][ T8874] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 393.224616][ T8876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1419'. [ 397.016543][ T8927] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 398.492623][ T8916] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 398.975297][ T4317] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 399.168625][ T4317] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 399.222834][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.252230][ T4317] usb 2-1: Product: syz [ 399.273293][ T4317] usb 2-1: Manufacturer: syz [ 399.324661][ T4317] usb 2-1: SerialNumber: syz [ 399.569221][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 399.641221][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 400.018200][ T8963] wg2 speed is unknown, defaulting to 1000 [ 400.103984][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 400.133554][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 400.182547][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 400.244551][ T4317] lan78xx: probe of 2-1:1.0 failed with error -32 [ 400.299416][ T4317] usb 2-1: USB disconnect, device number 34 [ 401.277664][ T8978] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 401.690381][ T8986] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 402.059285][ T8991] rdma_rxe: rxe_register_device failed with error -23 [ 402.120030][ T8991] rdma_rxe: failed to add wg2 [ 402.216117][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1456'. [ 402.773476][ T14] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 402.984144][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 403.007493][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.044983][ T14] usb 3-1: Product: syz [ 403.062663][ T14] usb 3-1: Manufacturer: syz [ 403.079045][ T14] usb 3-1: SerialNumber: syz [ 403.315351][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 403.360218][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 403.808405][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 403.856374][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.886072][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.912273][ T14] lan78xx: probe of 3-1:1.0 failed with error -32 [ 403.939481][ T14] usb 3-1: USB disconnect, device number 38 [ 404.347980][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 404.751902][ T26] audit: type=1804 audit(1778178874.291:35): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1467" name="/newroot/296/file1" dev="fuse" ino=1 res=1 errno=0 [ 404.806620][ T26] audit: type=1800 audit(1778178874.321:36): pid=9023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1467" name="/" dev="fuse" ino=1 res=0 errno=0 [ 404.968469][ T26] audit: type=1804 audit(1778178874.511:37): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1470" name="bus" dev="ramfs" ino=53842 res=1 errno=0 [ 408.802779][ T26] audit: type=1804 audit(1778178874.551:38): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1470" name="bus" dev="ramfs" ino=53842 res=1 errno=0 [ 409.185619][ T9043] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 409.205948][ T9043] rdma_rxe: rxe_register_device failed with error -23 [ 409.218670][ T9043] rdma_rxe: failed to add wg2 [ 409.237669][ T9040] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 409.473413][ T5492] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 409.666224][ T5492] usb 3-1: unable to get BOS descriptor or descriptor too short [ 409.688396][ T5492] usb 3-1: not running at top speed; connect to a high speed hub [ 409.713231][ T5492] usb 3-1: config 3 has an invalid interface number: 166 but max is 0 [ 409.742444][ T5492] usb 3-1: config 3 has no interface number 0 [ 409.758802][ T5492] usb 3-1: config 3 interface 166 has no altsetting 0 [ 409.778313][ T5492] usb 3-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=e8.db [ 409.806325][ T5492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.828644][ T5492] usb 3-1: Product: syz [ 409.840200][ T5492] usb 3-1: Manufacturer: syz [ 409.850098][ T5492] usb 3-1: SerialNumber: syz [ 409.883414][ T14] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 410.086370][ T5492] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 410.097591][ T14] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 410.111756][ T5492] gspca_sn9c20x: Write register 1000 failed -71 [ 410.119971][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.146241][ T5492] gspca_sn9c20x: Device initialization failed [ 410.149898][ T14] usb 4-1: Product: syz [ 410.152461][ T5492] gspca_sn9c20x: probe of 3-1:3.166 failed with error -71 [ 410.191153][ T14] usb 4-1: Manufacturer: syz [ 410.198996][ T5492] usb 3-1: USB disconnect, device number 39 [ 410.212648][ T14] usb 4-1: SerialNumber: syz [ 410.466743][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 410.500675][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 410.945989][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 410.988281][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 411.022942][ T14] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 411.116773][ T14] lan78xx: probe of 4-1:1.0 failed with error -32 [ 411.153697][ T14] usb 4-1: USB disconnect, device number 30 [ 411.845926][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): gre5: link becomes ready [ 411.887481][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 411.921333][ T26] audit: type=1804 audit(1778178881.461:39): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1486" name="/newroot/302/file1" dev="fuse" ino=1 res=1 errno=0 [ 411.958973][ T9078] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 411.958973][ T9078] program syz.3.1487 not setting count and/or reply_len properly [ 411.975913][ T26] audit: type=1800 audit(1778178881.461:40): pid=9076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1486" name="/" dev="fuse" ino=1 res=0 errno=0 [ 412.908066][ T9098] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 412.935815][ T9097] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 412.972875][ T9098] rdma_rxe: rxe_register_device failed with error -23 [ 413.037954][ T9098] rdma_rxe: failed to add wg2 [ 414.233071][ T9110] IPv6: ADDRCONF(NETDEV_CHANGE): gre6: link becomes ready [ 414.258472][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 414.329030][ T9112] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 414.329030][ T9112] program syz.3.1499 not setting count and/or reply_len properly [ 414.515228][ T9116] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1500'. [ 414.818255][ T26] audit: type=1804 audit(1778178884.361:41): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1501" name="/newroot/284/file1" dev="fuse" ino=1 res=1 errno=0 [ 414.889740][ T26] audit: type=1800 audit(1778178884.361:42): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1501" name="/" dev="fuse" ino=1 res=0 errno=0 [ 416.398608][ T9144] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 416.641029][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 416.662436][ T9154] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1513'. [ 416.705186][ T9152] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 416.705186][ T9152] program syz.2.1514 not setting count and/or reply_len properly [ 417.354561][ T9163] fuse: Bad value for 'group_id' [ 417.763071][ T9171] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 417.811082][ T9176] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 417.912895][ T9176] rdma_rxe: rxe_register_device failed with error -23 [ 417.957508][ T9176] rdma_rxe: failed to add wg2 [ 418.007766][ T9179] IPv6: ADDRCONF(NETDEV_CHANGE): gre7: link becomes ready [ 418.045826][ T26] audit: type=1804 audit(1778178887.591:43): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1524" name="bus" dev="ramfs" ino=54660 res=1 errno=0 [ 418.129915][ T26] audit: type=1804 audit(1778178887.621:44): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1524" name="bus" dev="ramfs" ino=54660 res=1 errno=0 [ 418.302879][ T9183] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1525'. [ 419.176982][ T9198] fuse: Bad value for 'group_id' [ 420.148829][ T9211] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1536'. [ 420.187668][ T9213] IPv6: ADDRCONF(NETDEV_CHANGE): gre8: link becomes ready [ 420.799257][ T9229] fuse: Bad value for 'group_id' [ 421.714602][ T9244] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 421.762277][ T9244] rdma_rxe: already configured on wg2 [ 422.601815][ T9249] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1548'. [ 424.661663][ T9282] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1560'. [ 426.907738][ T26] audit: type=1804 audit(1778178896.451:45): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1571" name="/newroot/298/file1" dev="fuse" ino=1 res=1 errno=0 [ 426.940592][ T9314] device syzkaller0 entered promiscuous mode [ 426.989334][ T26] audit: type=1800 audit(1778178896.481:46): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1571" name="/" dev="fuse" ino=1 res=0 errno=0 [ 427.571122][ T9324] ======================================================= [ 427.571122][ T9324] WARNING: The mand mount option has been deprecated and [ 427.571122][ T9324] and is ignored by this kernel. Remove the mand [ 427.571122][ T9324] option from the mount to silence this warning. [ 427.571122][ T9324] ======================================================= [ 427.879494][ T9320] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 428.101030][ T9327] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 428.218070][ T9327] rdma_rxe: rxe_register_device failed with error -23 [ 428.260702][ T9327] rdma_rxe: failed to add wg2 [ 431.053577][ T5492] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 431.258809][ T5492] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.280782][ T5492] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 431.301382][ T5492] usb 3-1: can't read configurations, error -71 [ 432.018564][ T9391] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[9391] [ 432.590900][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 432.645604][ T9399] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 432.645604][ T9399] program syz.1.1596 not setting count and/or reply_len properly [ 432.953856][ T9405] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 433.079930][ T9405] rdma_rxe: rxe_register_device failed with error -23 [ 433.133493][ T9405] rdma_rxe: failed to add wg2 [ 433.413727][ T9422] device syzkaller0 entered promiscuous mode [ 433.774634][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 433.798067][ T9429] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 433.798067][ T9429] program syz.2.1607 not setting count and/or reply_len properly [ 433.815105][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.721195][ T9441] netlink: 'syz.2.1610': attribute type 39 has an invalid length. [ 436.921178][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 437.385995][ T9471] netlink: 'syz.2.1621': attribute type 39 has an invalid length. [ 437.560746][ T26] audit: type=1804 audit(1778178907.101:47): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1622" name="bus" dev="ramfs" ino=55831 res=1 errno=0 [ 437.729659][ T26] audit: type=1804 audit(1778178907.131:48): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1622" name="bus" dev="ramfs" ino=55831 res=1 errno=0 [ 437.749507][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.186699][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.237864][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.790105][ T9493] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 441.169365][ T9502] fuse: Unknown parameter 'grou00000000000000000000' [ 441.479207][ T26] audit: type=1804 audit(1778178911.021:49): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1633" name="bus" dev="ramfs" ino=55902 res=1 errno=0 [ 443.065317][ T26] audit: type=1804 audit(1778178911.051:50): pid=9511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1633" name="bus" dev="ramfs" ino=55902 res=1 errno=0 [ 443.198515][ T9513] netlink: 'syz.3.1634': attribute type 39 has an invalid length. [ 444.539053][ T9532] fuse: Unknown parameter 'grou00000000000000000000' [ 444.751305][ T9537] wg2 speed is unknown, defaulting to 1000 [ 444.801040][ T9542] loop5: detected capacity change from 0 to 7 [ 444.855142][ T9542] Dev loop5: unable to read RDB block 7 [ 444.888651][ T9543] device ipvlan2 entered promiscuous mode [ 444.895044][ T9542] loop5: unable to read partition table [ 444.937553][ T9542] loop5: partition table beyond EOD, truncated [ 444.975171][ T9543] bridge0: port 3(ipvlan2) entered blocking state [ 444.984719][ T9542] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.018755][ T9543] bridge0: port 3(ipvlan2) entered disabled state [ 445.168537][ T9554] netlink: 'syz.2.1649': attribute type 39 has an invalid length. [ 445.675683][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 445.694950][ T9542] netlink: 75 bytes leftover after parsing attributes in process `syz.3.1643'. [ 445.728537][ T9570] fuse: Unknown parameter 'grou00000000000000000000' [ 446.530777][ T9585] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 447.072581][ T9586] netlink: 'syz.3.1661': attribute type 39 has an invalid length. [ 447.583512][ T14] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 447.797924][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 447.814912][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.845988][ T14] usb 3-1: Product: syz [ 447.850233][ T14] usb 3-1: Manufacturer: syz [ 447.863644][ T14] usb 3-1: SerialNumber: syz [ 448.087249][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 448.119217][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 448.430478][ T9603] fuse: Unknown parameter 'group_i00000000000000000000' [ 448.771569][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 448.817205][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 448.829837][ T14] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 448.841212][ T14] lan78xx: probe of 3-1:1.0 failed with error -71 [ 448.869116][ T14] usb 3-1: USB disconnect, device number 42 [ 449.508339][ T9620] netlink: 'syz.3.1674': attribute type 39 has an invalid length. [ 452.181500][ T9633] syz.3.1678 (9633): drop_caches: 2 [ 454.684421][ T9645] sctp: [Deprecated]: syz.4.1682 (pid 9645) Use of int in max_burst socket option. [ 454.684421][ T9645] Use struct sctp_assoc_value instead [ 454.895367][ T9659] netlink: 'syz.1.1688': attribute type 39 has an invalid length. [ 455.470371][ T9679] syz.2.1694 (9679): drop_caches: 2 [ 457.934084][ T26] audit: type=1804 audit(1778178927.481:51): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1700" name="bus" dev="ramfs" ino=56761 res=1 errno=0 [ 459.413428][ T26] audit: type=1804 audit(1778178927.501:52): pid=9694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1700" name="bus" dev="ramfs" ino=56761 res=1 errno=0 [ 462.337100][ T9742] netlink: 'syz.0.1716': attribute type 39 has an invalid length. [ 462.526876][ T9747] device syzkaller0 entered promiscuous mode [ 463.091739][ T9759] device syzkaller0 entered promiscuous mode [ 463.489288][ T9761] wg2 speed is unknown, defaulting to 1000 [ 464.133823][ T9771] netlink: 'syz.4.1724': attribute type 16 has an invalid length. [ 464.178319][ T9771] netlink: 'syz.4.1724': attribute type 17 has an invalid length. [ 464.213683][ T9771] netlink: 'syz.4.1724': attribute type 27 has an invalid length. [ 464.507655][ T9783] netlink: 'syz.0.1728': attribute type 39 has an invalid length. [ 464.859026][ T9788] device syzkaller0 entered promiscuous mode [ 465.044484][ T9793] device syzkaller0 entered promiscuous mode [ 465.935100][ T9812] netlink: 'syz.2.1741': attribute type 39 has an invalid length. [ 466.050253][ T9818] syz.3.1739 (9818): drop_caches: 2 [ 467.299766][ T9828] device syzkaller0 entered promiscuous mode [ 467.530331][ T9831] device syzkaller0 entered promiscuous mode [ 469.416455][ T9851] netlink: 'syz.1.1753': attribute type 39 has an invalid length. [ 470.212544][ T9862] device syzkaller0 entered promiscuous mode [ 470.541074][ T9864] wg2 speed is unknown, defaulting to 1000 [ 472.633388][ T5492] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 472.865755][ T5492] usb 3-1: unable to get BOS descriptor or descriptor too short [ 472.883219][ T9894] netlink: 'syz.3.1766': attribute type 39 has an invalid length. [ 472.897553][ T5492] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.931215][ T5492] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.988964][ T5492] usb 3-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 473.083477][ T5492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.134080][ T5492] usb 3-1: Product: syz [ 473.138321][ T5492] usb 3-1: Manufacturer: syz [ 473.177600][ T5492] usb 3-1: SerialNumber: syz [ 473.245787][ T9897] device syzkaller0 entered promiscuous mode [ 473.444942][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.485093][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.535057][ T5492] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 473.593241][ T5492] usb 3-1: USB disconnect, device number 43 [ 473.911927][ T9037] udevd[9037]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.551856][ T9926] netlink: 'syz.2.1777': attribute type 39 has an invalid length. [ 474.839135][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 475.111329][ T9931] device syzkaller0 entered promiscuous mode [ 477.915903][ T9941] wg2 speed is unknown, defaulting to 1000 [ 478.903619][ T4314] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 478.923020][ T9964] netlink: 'syz.3.1788': attribute type 39 has an invalid length. [ 479.096251][ T4314] usb 2-1: unable to get BOS descriptor or descriptor too short [ 479.114495][ T4314] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.153034][ T4314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 479.186029][ T4314] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 479.213844][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.232168][ T4314] usb 2-1: Product: syz [ 479.253592][ T4314] usb 2-1: Manufacturer: syz [ 479.283636][ T4314] usb 2-1: SerialNumber: syz [ 479.543835][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.572244][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.640185][ T4314] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 479.670810][ T4314] usb 2-1: USB disconnect, device number 35 [ 481.493192][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 481.581951][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 481.594452][ T9037] udevd[9037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.803451][ T4317] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 481.916454][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 481.925890][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 482.033675][ T4317] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 482.064249][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 482.093431][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 482.122793][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 482.149736][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 482.170136][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 482.201797][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 482.232260][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 482.272050][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 482.429282][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 482.506969][ T4317] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 482.572161][ T9974] ceph: No mds server is up or the cluster is laggy [ 483.833810][ T4317] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 483.968959][ T4317] usb 1-1: config 0 interface 0 has no altsetting 0 [ 484.045148][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 484.082187][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 484.769519][ T4317] usb 1-1: unable to read config index 4 descriptor/start: -71 [ 484.796895][ T4317] usb 1-1: can't read configurations, error -71 [ 485.417814][T10006] syz.0.1800 (10006): drop_caches: 2 [ 487.220322][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 488.453391][ T5492] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 488.665592][ T5492] usb 2-1: unable to get BOS descriptor or descriptor too short [ 488.685159][ T5492] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.708600][ T5492] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.742045][ T5492] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 488.757601][ T5492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.773328][ T5492] usb 2-1: Product: syz [ 488.777779][ T5492] usb 2-1: Manufacturer: syz [ 488.782478][ T5492] usb 2-1: SerialNumber: syz [ 489.051755][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.073996][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.143103][ T5492] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 489.172718][ T5492] usb 2-1: USB disconnect, device number 36 [ 489.213884][ T9037] udevd[9037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.498013][T10038] wg2 speed is unknown, defaulting to 1000 [ 491.490814][T10033] loop4: detected capacity change from 0 to 32768 [ 491.515524][T10033] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1807 (10033) [ 491.612366][T10033] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 491.647250][T10033] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 491.658177][T10033] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 491.672142][T10033] BTRFS info (device loop4): trying to use backup root at mount time [ 491.699589][T10033] BTRFS info (device loop4): setting nodatasum [ 491.728021][T10033] BTRFS info (device loop4): enabling ssd optimizations [ 491.743479][T10033] BTRFS info (device loop4): using spread ssd allocation scheme [ 491.780170][T10033] BTRFS info (device loop4): turning on flush-on-commit [ 491.835596][T10033] BTRFS info (device loop4): force zlib compression, level 3 [ 491.877843][T10033] BTRFS info (device loop4): using free space tree [ 492.056703][T10033] BTRFS error (device loop4): open_ctree failed: -12 [ 492.145751][ T9037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (9037) [ 494.813015][T10089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1818'. [ 494.879207][T10089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1818'. [ 495.163614][T10096] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1820'. [ 498.046256][T10120] sctp: [Deprecated]: syz.3.1825 (pid 10120) Use of int in max_burst socket option. [ 498.046256][T10120] Use struct sctp_assoc_value instead [ 500.273439][ T26] audit: type=1804 audit(1778178969.811:53): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1828" name="/newroot/354/file1" dev="fuse" ino=1 res=1 errno=0 [ 500.589312][T10136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1830'. [ 500.665288][T10137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1830'. [ 501.616642][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623079][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.758861][T10131] loop1: detected capacity change from 0 to 32768 [ 502.793198][T10131] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 502.804951][T10131] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 502.837629][T10131] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 502.864868][T10131] BTRFS info (device loop1): trying to use backup root at mount time [ 502.886304][T10131] BTRFS info (device loop1): setting nodatasum [ 502.893933][T10131] BTRFS info (device loop1): enabling ssd optimizations [ 502.914993][T10131] BTRFS info (device loop1): using spread ssd allocation scheme [ 502.933648][T10131] BTRFS info (device loop1): turning on flush-on-commit [ 502.970289][T10131] BTRFS info (device loop1): force zlib compression, level 3 [ 502.994056][T10131] BTRFS info (device loop1): using free space tree [ 503.079530][T10151] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1834'. [ 503.210628][T10131] BTRFS error (device loop1): open_ctree failed: -22 [ 504.865647][T10182] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 505.120141][T10181] device syzkaller0 entered promiscuous mode [ 505.436385][T10184] sctp: [Deprecated]: syz.3.1839 (pid 10184) Use of int in max_burst socket option. [ 505.436385][T10184] Use struct sctp_assoc_value instead [ 505.939656][T10194] syz.3.1841 (10194): drop_caches: 2 [ 513.683941][T10239] sctp: [Deprecated]: syz.2.1851 (pid 10239) Use of int in max_burst socket option. [ 513.683941][T10239] Use struct sctp_assoc_value instead [ 514.243661][T10245] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 515.229974][T10253] random: crng reseeded on system resumption [ 516.269421][T10264] syz.0.1857 (10264): drop_caches: 2 [ 518.150396][T10272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1860'. [ 518.204187][T10272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1860'. [ 518.322116][T10278] device syzkaller0 entered promiscuous mode [ 518.472524][T10278] tipc: Enabled bearer , priority 0 [ 518.513759][T10274] tipc: Resetting bearer [ 519.364909][T10274] tipc: Disabling bearer [ 520.218867][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1875'. [ 520.281746][T10321] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 520.285046][T10320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1875'. [ 520.596701][T10324] device syzkaller0 entered promiscuous mode [ 523.659179][T10352] fuse: Bad value for 'fd' [ 525.915700][T10367] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10367] [ 526.326079][T10347] tipc: Enabled bearer , priority 0 [ 526.338811][T10340] device syzkaller0 entered promiscuous mode [ 526.358627][T10359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1886'. [ 526.387908][T10361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1886'. [ 526.559285][T10335] tipc: Resetting bearer [ 527.336870][T10335] tipc: Disabling bearer [ 527.564666][T10374] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 528.767523][T10386] fuse: Bad value for 'fd' [ 529.447720][T10402] device syzkaller0 entered promiscuous mode [ 529.639134][T10399] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 529.652909][T10399] rdma_rxe: rxe_register_device failed with error -23 [ 529.660770][T10399] rdma_rxe: failed to add wg2 [ 534.700801][T10408] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1902'. [ 534.711217][T10409] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1902'. [ 534.775907][T10418] tipc: Enabling of bearer rejected, failed to enable media [ 535.113507][T10441] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 537.828001][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 537.981358][T10458] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 537.981358][T10458] program syz.3.1915 not setting count and/or reply_len properly [ 540.173484][ T4284] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 541.061683][T10476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1919'. [ 541.117322][T10476] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1919'. [ 541.202931][T10480] device syzkaller0 entered promiscuous mode [ 541.325386][T10481] device syzkaller0 entered promiscuous mode [ 541.333214][T10480] tipc: Enabled bearer , priority 0 [ 541.348973][T10479] tipc: Resetting bearer [ 541.401656][T10479] tipc: Disabling bearer [ 541.842708][T10491] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 543.487854][ T4319] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 543.697121][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 543.711215][ T4319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.728098][ T4319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.743119][ T4319] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 543.761011][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.769532][ T4319] usb 2-1: Product: syz [ 543.780532][ T4319] usb 2-1: Manufacturer: syz [ 543.808983][ T4319] usb 2-1: SerialNumber: syz [ 544.060127][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.092608][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.864622][ T4319] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 546.899688][ T4319] usb 2-1: USB disconnect, device number 37 [ 547.649763][ T9037] udevd[9037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.519408][T10576] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 556.262959][T10594] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10594] [ 557.149745][T10604] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1955'. [ 560.183784][ T4332] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 560.280717][T10631] syz.2.1962 (10631): drop_caches: 2 [ 562.025399][ T4332] usb 2-1: unable to get BOS descriptor or descriptor too short [ 562.077081][ T4332] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.135215][ T4332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.180215][ T4332] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 562.193795][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.202066][ T4332] usb 2-1: Product: syz [ 562.206950][ T4332] usb 2-1: Manufacturer: syz [ 562.211684][ T4332] usb 2-1: SerialNumber: syz [ 562.462079][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.474845][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.909214][T10644] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10644] [ 563.059951][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.067727][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.027463][T10654] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 566.002751][ T4332] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 566.039853][ T4332] usb 2-1: USB disconnect, device number 38 [ 566.257090][ T9037] udevd[9037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.507826][T10673] sctp: [Deprecated]: syz.2.1974 (pid 10673) Use of int in max_burst socket option. [ 566.507826][T10673] Use struct sctp_assoc_value instead [ 566.791600][T10681] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4271] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10681] [ 567.712292][T10688] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1979'. [ 570.263074][T10701] 9pnet_virtio: no channels available for device syz [ 570.593206][T10708] overlayfs: unrecognized mount option "rootmode=0000000000000000000000000000000" or missing value [ 572.434683][T10715] sctp: [Deprecated]: syz.0.1987 (pid 10715) Use of int in max_burst socket option. [ 572.434683][T10715] Use struct sctp_assoc_value instead [ 572.534724][T10720] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10720] [ 574.852003][T10751] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1999'. [ 576.850055][T10765] sctp: [Deprecated]: syz.0.2002 (pid 10765) Use of int in max_burst socket option. [ 576.850055][T10765] Use struct sctp_assoc_value instead [ 577.118515][T10777] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10777] [ 581.568004][T10817] sctp: [Deprecated]: syz.0.2014 (pid 10817) Use of int in max_burst socket option. [ 581.568004][T10817] Use struct sctp_assoc_value instead [ 581.855921][T10822] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10822] [ 582.055909][T10827] siw: device registration error -23 [ 582.070350][T10827] smc: removing ib device syz2 [ 582.276431][T10830] 9pnet_virtio: no channels available for device syz [ 583.522967][T10840] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2021'. [ 587.469766][T10881] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10881] [ 588.443575][ T26] audit: type=1326 audit(1778179057.991:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10887 comm="syz.2.2032" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f8eb9cdd9 code=0x0 [ 588.549740][ T4284] block nbd2: Receive control failed (result -32) [ 588.640795][T10888] block nbd2: shutting down sockets [ 588.979726][T10897] lo speed is unknown, defaulting to 1000 [ 588.986244][T10897] lo speed is unknown, defaulting to 1000 [ 588.996997][T10897] lo speed is unknown, defaulting to 1000 [ 589.017436][T10897] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 589.066221][T10897] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 589.130728][T10897] lo speed is unknown, defaulting to 1000 [ 589.141930][T10897] lo speed is unknown, defaulting to 1000 [ 589.155210][T10897] lo speed is unknown, defaulting to 1000 [ 589.170597][T10897] lo speed is unknown, defaulting to 1000 [ 589.182156][T10897] lo speed is unknown, defaulting to 1000 [ 590.391355][T10918] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10918] [ 590.766770][T10923] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 590.791546][T10923] rdma_rxe: rxe_register_device failed with error -23 [ 590.805956][T10923] rdma_rxe: failed to add wg2 [ 590.867920][T10926] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2044'. [ 591.248133][T10928] sctp: [Deprecated]: syz.3.2045 (pid 10928) Use of int in max_burst socket option. [ 591.248133][T10928] Use struct sctp_assoc_value instead [ 592.716835][T10951] siw: device registration error -23 [ 595.967112][T10969] random: crng reseeded on system resumption [ 596.032965][T10978] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10978] [ 599.232867][T11009] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 601.822403][T11021] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4270] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11021] [ 605.778189][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 605.889270][T11055] sg_write: data in/out 26588/18 bytes for SCSI command 0x0-- guessing data in; [ 605.889270][T11055] program syz.2.2081 not setting count and/or reply_len properly [ 608.491578][T11079] fuse: Bad value for 'group_id' [ 610.160577][T11082] [ 610.163156][T11082] ====================================================== [ 610.170648][T11082] WARNING: possible circular locking dependency detected [ 610.177964][T11082] syzkaller #0 Not tainted [ 610.182392][T11082] ------------------------------------------------------ [ 610.189619][T11082] syz.2.2088/11082 is trying to acquire lock: [ 610.195792][T11082] ffff888074d98158 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 610.205742][T11082] [ 610.205742][T11082] but task is already holding lock: [ 610.213225][T11082] ffff888054da7a80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 610.224241][T11082] [ 610.224241][T11082] which lock already depends on the new lock. [ 610.224241][T11082] [ 610.234821][T11082] [ 610.234821][T11082] the existing dependency chain (in reverse order) is: [ 610.243836][T11082] [ 610.243836][T11082] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 610.252541][T11082] down_write+0x36/0x60 [ 610.257506][T11082] process_measurement+0x3a2/0x1c30 [ 610.263239][T11082] ima_file_mmap+0x102/0x150 [ 610.268450][T11082] __se_sys_remap_file_pages+0x559/0x7b0 [ 610.274620][T11082] do_syscall_64+0x4c/0xa0 [ 610.279919][T11082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.286433][T11082] [ 610.286433][T11082] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 610.294000][T11082] __lock_acquire+0x2d07/0x7d10 [ 610.299382][T11082] lock_acquire+0x1bb/0x4a0 [ 610.304419][T11082] down_read_killable+0x4c/0x340 [ 610.309892][T11082] mmap_read_lock_killable+0x1d/0x60 [ 610.315792][T11082] lock_mm_and_find_vma+0x2b1/0x2f0 [ 610.321864][T11082] do_user_addr_fault+0x2db/0xb10 [ 610.327420][T11082] exc_page_fault+0x60/0x100 [ 610.332539][T11082] asm_exc_page_fault+0x22/0x30 [ 610.337935][T11082] fault_in_readable+0x13e/0x1f0 [ 610.343423][T11082] fault_in_iov_iter_readable+0xbb/0x2e0 [ 610.349608][T11082] generic_perform_write+0x1f1/0x5c0 [ 610.355702][T11082] __generic_file_write_iter+0x148/0x2a0 [ 610.361892][T11082] generic_file_write_iter+0xab/0x2e0 [ 610.367890][T11082] vfs_write+0x4b1/0xa30 [ 610.372672][T11082] ksys_write+0x14c/0x250 [ 610.377640][T11082] do_syscall_64+0x4c/0xa0 [ 610.382681][T11082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.389542][T11082] [ 610.389542][T11082] other info that might help us debug this: [ 610.389542][T11082] [ 610.400053][T11082] Possible unsafe locking scenario: [ 610.400053][T11082] [ 610.407519][T11082] CPU0 CPU1 [ 610.412975][T11082] ---- ---- [ 610.418434][T11082] lock(&sb->s_type->i_mutex_key#13); [ 610.424004][T11082] lock(&mm->mmap_lock); [ 610.430869][T11082] lock(&sb->s_type->i_mutex_key#13); [ 610.438866][T11082] lock(&mm->mmap_lock); [ 610.443379][T11082] [ 610.443379][T11082] *** DEADLOCK *** [ 610.443379][T11082] [ 610.451526][T11082] 3 locks held by syz.2.2088/11082: [ 610.456738][T11082] #0: ffff888026cd6fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 610.466035][T11082] #1: ffff88801ff36460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 610.475032][T11082] #2: ffff888054da7a80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 610.496319][T11082] [ 610.496319][T11082] stack backtrace: [ 610.502308][T11082] CPU: 0 PID: 11082 Comm: syz.2.2088 Not tainted syzkaller #0 [ 610.509780][T11082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.520049][T11082] Call Trace: [ 610.523440][T11082] [ 610.526388][T11082] dump_stack_lvl+0x188/0x24e [ 610.531106][T11082] ? load_image+0x400/0x400 [ 610.535628][T11082] ? show_regs_print_info+0x12/0x12 [ 610.540860][T11082] ? print_circular_bug+0x12b/0x1a0 [ 610.546163][T11082] check_noncircular+0x296/0x330 [ 610.551122][T11082] ? add_chain_block+0x940/0x940 [ 610.556254][T11082] ? lockdep_lock+0xf1/0x1f0 [ 610.560858][T11082] ? _find_first_zero_bit+0xcf/0x100 [ 610.566153][T11082] __lock_acquire+0x2d07/0x7d10 [ 610.571114][T11082] ? verify_lock_unused+0x140/0x140 [ 610.576326][T11082] ? cgroup_rstat_updated+0xd7/0x350 [ 610.581623][T11082] ? verify_lock_unused+0x140/0x140 [ 610.586932][T11082] ? verify_lock_unused+0x140/0x140 [ 610.592143][T11082] ? mark_lock+0x94/0x320 [ 610.596583][T11082] lock_acquire+0x1bb/0x4a0 [ 610.601116][T11082] ? mmap_read_lock_killable+0x1d/0x60 [ 610.606604][T11082] ? read_lock_is_recursive+0x10/0x10 [ 610.612018][T11082] ? cmp_ex_search+0x1a/0x70 [ 610.616634][T11082] ? bsearch+0x8a/0xb0 [ 610.620721][T11082] ? fault_in_readable+0x13e/0x1f0 [ 610.625943][T11082] ? search_extable+0x8c/0xd0 [ 610.630634][T11082] ? trim_init_extable+0x3b0/0x3b0 [ 610.635760][T11082] ? mmap_read_lock_killable+0x1d/0x60 [ 610.641251][T11082] down_read_killable+0x4c/0x340 [ 610.646228][T11082] ? mmap_read_lock_killable+0x1d/0x60 [ 610.651708][T11082] mmap_read_lock_killable+0x1d/0x60 [ 610.657013][T11082] lock_mm_and_find_vma+0x2b1/0x2f0 [ 610.662226][T11082] do_user_addr_fault+0x2db/0xb10 [ 610.667265][T11082] ? _raw_spin_unlock_irq+0x1f/0x40 [ 610.672492][T11082] exc_page_fault+0x60/0x100 [ 610.677142][T11082] asm_exc_page_fault+0x22/0x30 [ 610.682006][T11082] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 610.687745][T11082] Code: d8 57 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 57 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 57 [ 610.707532][T11082] RSP: 0018:ffffc9000c627ab0 EFLAGS: 00050287 [ 610.713614][T11082] RAX: ffffffff81be1d99 RBX: 0000000000001000 RCX: 0000000000080000 [ 610.721706][T11082] RDX: ffffc9000fafd000 RSI: 000000000002cbae RDI: 000000000002cbaf [ 610.729774][T11082] RBP: 0000000000000061 R08: ffff888028efbb80 R09: 0000000000000002 [ 610.737935][T11082] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000001ac000 [ 610.745928][T11082] R13: 0000000000000000 R14: 00002000001aa540 R15: 00002000001ab000 [ 610.753909][T11082] ? fault_in_readable+0x139/0x1f0 [ 610.759039][T11082] fault_in_iov_iter_readable+0xbb/0x2e0 [ 610.764693][T11082] generic_perform_write+0x1f1/0x5c0 [ 610.770086][T11082] ? generic_file_direct_write+0x330/0x330 [ 610.776176][T11082] ? __file_remove_privs+0x5f0/0x5f0 [ 610.781483][T11082] ? rwsem_write_trylock+0x135/0x1c0 [ 610.786785][T11082] ? clear_nonspinnable+0x60/0x60 [ 610.791834][T11082] ? generic_write_checks_count+0x3d9/0x4c0 [ 610.797831][T11082] __generic_file_write_iter+0x148/0x2a0 [ 610.803482][T11082] generic_file_write_iter+0xab/0x2e0 [ 610.808870][T11082] vfs_write+0x4b1/0xa30 [ 610.813138][T11082] ? file_end_write+0x250/0x250 [ 610.818100][T11082] ? __fget_files+0x43d/0x4b0 [ 610.822970][T11082] ? __fdget_pos+0x2ae/0x360 [ 610.827579][T11082] ? ksys_write+0x71/0x250 [ 610.832009][T11082] ksys_write+0x14c/0x250 [ 610.836446][T11082] ? __ia32_sys_read+0x80/0x80 [ 610.841226][T11082] ? lockdep_hardirqs_on+0x94/0x140 [ 610.846434][T11082] do_syscall_64+0x4c/0xa0 [ 610.850870][T11082] ? clear_bhb_loop+0x60/0xb0 [ 610.855559][T11082] ? clear_bhb_loop+0x60/0xb0 [ 610.860338][T11082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.866268][T11082] RIP: 0033:0x7f1f8eb9cdd9 [ 610.870866][T11082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.890592][T11082] RSP: 002b:00007f1f8f9e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.899020][T11082] RAX: ffffffffffffffda RBX: 00007f1f8ee16180 RCX: 00007f1f8eb9cdd9 [ 610.907025][T11082] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000006 [ 610.915029][T11082] RBP: 00007f1f8ec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 610.923018][T11082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.930996][T11082] R13: 00007f1f8ee16218 R14: 00007f1f8ee16180 R15: 00007fffe794f548 [ 610.938984][T11082] [ 610.942128][ C0] vkms_vblank_simulate: vblank timer overrun