last executing test programs: 8m35.262759939s ago: executing program 0 (id=48): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x1) 8m34.932723715s ago: executing program 0 (id=53): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x669, &(0x7f0000007940)) syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x981d41) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1410) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(r0, 0xffffffffffffffff, 0x0) 8m33.994156225s ago: executing program 0 (id=55): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa100bb50caccad1d901"], 0x11) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}}) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2) 8m31.549395507s ago: executing program 0 (id=58): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0xfffffffffffffffd) 8m29.773275514s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5899a47b}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 8m28.16310946s ago: executing program 0 (id=70): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r7, r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) close_range(r0, 0xffffffffffffffff, 0x0) 8m24.226767315s ago: executing program 4 (id=78): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00') socket(0x1000000010, 0x80002, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000001540)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 8m23.276646115s ago: executing program 4 (id=83): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 8m22.796026194s ago: executing program 4 (id=86): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0xc00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000001800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8m21.359351534s ago: executing program 4 (id=89): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x8, 0x1, 0x9, 0xc, 0x2, 0xc}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x9, 0x7, 0x7ff}}]}}}]}, 0x60}}, 0x44080) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0xffff, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) 8m21.193616444s ago: executing program 4 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) 8m18.384905083s ago: executing program 4 (id=94): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}}) r3 = dup(r0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) 8m12.532160656s ago: executing program 32 (id=70): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r7, r8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000ec0), 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) close_range(r0, 0xffffffffffffffff, 0x0) 8m3.220590636s ago: executing program 33 (id=94): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}}) r3 = dup(r0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) 7m7.607224558s ago: executing program 2 (id=291): openat$tun(0xffffffffffffff9c, 0x0, 0xe7e778b4449e4ac4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r4, &(0x7f00000003c0)="28eac7", 0x3) write$uinput_user_dev(r4, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x52, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x0, 0x7, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x40, 0xffff, 0x12f, 0x8000, 0x12, 0x7f, 0x129432e6, 0xce, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0x9, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x8, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x1, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x2, 0x10001, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xffffffe9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x0, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x800, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x6, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xfbff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) epoll_create1(0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) 7m4.485489541s ago: executing program 2 (id=297): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x101) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0) 7m3.515700807s ago: executing program 2 (id=299): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) 7m2.493158818s ago: executing program 2 (id=301): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2) 7m0.985841476s ago: executing program 2 (id=305): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7m0.678485628s ago: executing program 2 (id=306): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(0xffffffffffffffff, 0xda90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x2, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x2ae0, r0}, 0x0) connect$inet6(r1, &(0x7f0000004040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket(0x2b, 0x5, 0x3) migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000180)=0x9) 6m43.344570132s ago: executing program 34 (id=306): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(0xffffffffffffffff, 0xda90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x2, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000080)={0x2ae0, r0}, 0x0) connect$inet6(r1, &(0x7f0000004040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket(0x2b, 0x5, 0x3) migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000180)=0x9) 5m6.514309812s ago: executing program 1 (id=579): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x101) r8 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r8, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]}) 5m2.690021545s ago: executing program 1 (id=588): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xaf}, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m55.862541158s ago: executing program 1 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp\x00') preadv(r2, &(0x7f0000000000), 0x0, 0x0, 0x6) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003) pipe2$watch_queue(&(0x7f0000000500), 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f00000000c0), &(0x7f0000000240)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x7d6, 0x1) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000340)=""/120) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) 4m55.354354198s ago: executing program 1 (id=604): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/meminfo\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0xffffff7f, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000080), 0x4) 4m51.462834821s ago: executing program 1 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$rtc(0x0, 0x2000000003, 0x50dc82) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) fcntl$dupfd(r7, 0x0, r6) close_range(r3, 0xffffffffffffffff, 0x0) 4m48.891740081s ago: executing program 1 (id=614): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa100bb50caccad1d901"], 0x11) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}}) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2) 4m33.669832194s ago: executing program 35 (id=614): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xd2, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getpid() arch_prctl$ARCH_SHSTK_ENABLE(0x1011, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa100bb50caccad1d901"], 0x11) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x11, 0x0, @fd, 0x0, 0x3ff, 0x5, 0x8, 0x0, {0x2}}) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2) 15.388091788s ago: executing program 8 (id=1302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 15.279052026s ago: executing program 8 (id=1303): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) setsockopt(0xffffffffffffffff, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 14.261735205s ago: executing program 8 (id=1305): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000600)="6fe5fb", 0x3) 10.472438103s ago: executing program 8 (id=1316): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x1}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6(0xa, 0x6, 0x0) listen(r6, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x30bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x40000004, 0x0, 0x4, 0x3}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r1, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]}) 9.555690024s ago: executing program 3 (id=1319): sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc203800"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) 9.319956164s ago: executing program 7 (id=1322): ioprio_get$pid(0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='softirq_noise\x00'}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 8.119696874s ago: executing program 3 (id=1323): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0xf2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 7.595093125s ago: executing program 7 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0) 7.368566941s ago: executing program 6 (id=1328): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x1) ptrace$cont(0x18, r1, 0x7, 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sched_getattr(r1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)}, {&(0x7f0000001bc0)="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", 0x1de}], 0x2}}], 0x2, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7.158721612s ago: executing program 8 (id=1329): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = syz_io_uring_setup(0x3, &(0x7f0000000080)={0x0, 0x4685, 0x40, 0xfffffffe, 0x340}, 0x0, &(0x7f0000002540)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x0, 0x209, 0x0, 0x8, 0x8}, &(0x7f00000000c0)=0x14) 6.079195124s ago: executing program 7 (id=1330): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x4000010) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)={0x2, 0x808, 0x0, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x3a, 0x1, 0x0, 0x0, "a9d350ea09a558bbc069972fd6135503414190c502f593570fa6bb0fa85d9b3128353dcadf8bb71c06e619b08986d626a032ff1c224c9e1aa390b57d5bcf9ff7"}}, 0x80}}, 0x0) 6.07847696s ago: executing program 6 (id=1331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 5.811878493s ago: executing program 3 (id=1332): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000bc0)={0x2, 0x0, 0x3, {0x0, 0xfe000000, 0x1010, 0x6}}) 5.548198927s ago: executing program 6 (id=1334): ioperm(0x3, 0x4, 0x1000008) statx(0xffffffffffffff9c, 0x0, 0x1000, 0xff00, &(0x7f0000005780)) 5.338794603s ago: executing program 6 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc, 0x102172, 0xffffffffffffffff, 0xde585000) chdir(0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r3) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), 0x0}, 0x20) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) socket$inet(0x2, 0x2, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) openat$vicodec0(0xffffff9c, &(0x7f0000000580), 0x2, 0x0) 5.293355349s ago: executing program 3 (id=1336): socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.69097757s ago: executing program 7 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.425108592s ago: executing program 5 (id=1338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 3.424279145s ago: executing program 6 (id=1339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r1) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') 2.580586911s ago: executing program 7 (id=1340): socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.40713287s ago: executing program 5 (id=1341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0) 2.406166731s ago: executing program 3 (id=1342): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40505330, &(0x7f0000000940)={{0xee}}) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @empty, 0x2}, 0x5a) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0x40186f40, 0x20000502) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0x40046f41, 0x20000502) 2.405454465s ago: executing program 6 (id=1343): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000fa0fffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000005dc0)={0x34, &(0x7f0000002b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.139872784s ago: executing program 5 (id=1344): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_test={0x51, 0x0, 0x6}}) 975.622731ms ago: executing program 3 (id=1345): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c5f) open(0x0, 0x143042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x1, 0x6, 0x0, 0x7, 0x1}) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000fcff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 836.638735ms ago: executing program 5 (id=1346): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x26) 755.00533ms ago: executing program 5 (id=1347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x7ffc}, 0x80, &(0x7f0000000280)}, 0x44410) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 358.265483ms ago: executing program 8 (id=1348): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, 0x0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 247.914324ms ago: executing program 7 (id=1349): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r3, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f046}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000000001}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 0s ago: executing program 5 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r2 = syz_open_pts(r1, 0x141601) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x0, 0x0, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): batadv_slave_1 [ 227.090278][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.100317][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.110840][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.120778][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.131440][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.142535][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.173200][ T7099] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.183581][ T7099] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.222680][ T7099] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.249708][ T7099] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.337102][ T5151] Bluetooth: hci5: command 0x0406 tx timeout [ 227.387077][ T5889] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 227.399104][ T7368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.452989][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.494604][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.537150][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 227.549658][ T5889] usb 4-1: config 0 has no interfaces? [ 227.579801][ T5889] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 227.697571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.706159][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.797401][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 227.806123][ T5889] usb 4-1: Product: syz [ 227.810488][ T5889] usb 4-1: Manufacturer: syz [ 227.815277][ T5889] usb 4-1: SerialNumber: syz [ 227.827883][ T5889] usb 4-1: config 0 descriptor?? [ 229.767903][ T5938] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 230.202436][ T7393] netlink: 'syz.1.422': attribute type 2 has an invalid length. [ 230.210660][ T7393] netlink: 'syz.1.422': attribute type 8 has an invalid length. [ 230.218751][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.422'. [ 230.321489][ T5981] usb 4-1: USB disconnect, device number 6 [ 230.507089][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 231.824853][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 231.834135][ T5938] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 232.006239][ T5938] usb 7-1: can't read configurations, error -71 [ 233.029778][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.167602][ T5151] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 233.240115][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.427'. [ 233.266884][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.462023][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.508339][ T5895] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 233.530188][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.593778][ T5895] usb 4-1: config 0 descriptor?? [ 234.902649][ T7426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.519328][ T5895] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 235.749605][ T5895] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 235.797600][ T5895] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 236.208662][ T5895] usb 4-1: USB disconnect, device number 7 [ 236.237057][ T5895] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 238.257004][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 238.851956][ T5895] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 238.907363][ T5938] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 239.122091][ T5938] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 239.168401][ T5938] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 239.227153][ T5938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.439302][ T5938] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.448484][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.457332][ T5938] usb 7-1: Product: syz [ 239.461993][ T5938] usb 7-1: Manufacturer: syz [ 239.467803][ T5938] usb 7-1: SerialNumber: syz [ 240.016978][ T7472] netlink: 'syz.3.444': attribute type 9 has an invalid length. [ 240.025359][ T7472] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.444'. [ 240.120289][ T7472] ubi0: attaching mtd0 [ 240.153498][ T7472] ubi0: scanning is finished [ 241.369546][ T7472] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 241.992431][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.230279][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 243.618254][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.645125][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.754737][ T5895] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 243.918125][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.187929][ T5895] usb 4-1: config 0 descriptor?? [ 244.883295][ T5895] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 244.893160][ T5895] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 244.924777][ T5895] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0004/input/input6 [ 244.988101][ T5895] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 246.124989][ T5895] usb 4-1: USB disconnect, device number 8 [ 247.336129][ T5938] usb 7-1: 0:2 : does not exist [ 247.344113][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.591662][ T118] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 247.799908][ T118] usb 2-1: Using ep0 maxpacket: 32 [ 248.008229][ T118] usb 2-1: device descriptor read/all, error -71 [ 248.254384][ T5938] usb 7-1: USB disconnect, device number 11 [ 249.231056][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.035443][ T7534] input: syz0 as /devices/virtual/input/input7 [ 251.634094][ T7565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.657920][ T5981] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 253.798549][ T7574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.532298][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 254.747424][ T5981] usb 7-1: device not accepting address 12, error -71 [ 256.067941][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.074267][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.787284][ T5981] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 257.916979][ T5981] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.247084][ T118] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 258.600508][ T5981] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.825183][ T5981] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.372593][ T118] usb 4-1: Using ep0 maxpacket: 32 [ 259.377945][ T5981] usb 7-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 259.389063][ T5981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.403712][ T118] usb 4-1: unable to get BOS descriptor or descriptor too short [ 259.436500][ T118] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 259.518135][ T118] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 259.533444][ T5981] usb 7-1: config 0 descriptor?? [ 259.568002][ T29] audit: type=1800 audit(1732908991.710:2): pid=7635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.498" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 259.712739][ T118] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 259.722411][ T5981] usb 7-1: can't set config #0, error -71 [ 259.729330][ T5981] usb 7-1: USB disconnect, device number 13 [ 259.736018][ T118] usb 4-1: config 128 has no interface number 0 [ 259.743551][ T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 259.754851][ T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.766195][ T118] usb 4-1: config 128 interface 127 has no altsetting 0 [ 260.009056][ T118] usb 4-1: language id specifier not provided by device, defaulting to English [ 260.139690][ T118] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 260.421031][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.429264][ T118] usb 4-1: Product: syz [ 260.433698][ T118] usb 4-1: Manufacturer: syz [ 260.438545][ T118] usb 4-1: SerialNumber: syz [ 260.497081][ T5981] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 260.747028][ T5981] usb 7-1: Using ep0 maxpacket: 32 [ 260.761464][ T5981] usb 7-1: unable to get BOS descriptor or descriptor too short [ 260.772568][ T5981] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 260.781133][ T5981] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 260.791886][ T5981] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 260.801366][ T5981] usb 7-1: config 128 has no interface number 0 [ 260.815890][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 260.849731][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.938910][ T5981] usb 7-1: config 128 interface 127 has no altsetting 0 [ 260.978175][ T5981] usb 7-1: language id specifier not provided by device, defaulting to English [ 261.058127][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 261.068139][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.079255][ T5981] usb 7-1: Product: syz [ 261.092967][ T5981] usb 7-1: Manufacturer: syz [ 261.104376][ T5981] usb 7-1: SerialNumber: syz [ 261.832095][ T118] usb 4-1: USB disconnect, device number 9 [ 263.588130][ T7674] netlink: 'syz.7.509': attribute type 2 has an invalid length. [ 263.595955][ T7674] netlink: 'syz.7.509': attribute type 8 has an invalid length. [ 263.603874][ T7674] netlink: 132 bytes leftover after parsing attributes in process `syz.7.509'. [ 263.873052][ T7672] ªªªªªª: renamed from syzkaller0 [ 264.035606][ T5981] usb 7-1: USB disconnect, device number 14 [ 265.257269][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 265.416640][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 265.427394][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 265.434329][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.445810][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.461569][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.496810][ T8] usb 8-1: config 0 descriptor?? [ 265.735838][ T8] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 266.502377][ T5895] usb 8-1: USB disconnect, device number 2 [ 266.521710][ T5895] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 268.627085][ T5888] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 268.797193][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 268.823916][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 269.051244][ T5888] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 269.245147][ T5888] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 269.297383][ T5938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 269.412484][ T5888] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 269.437200][ T5888] usb 7-1: config 128 has no interface number 0 [ 269.444544][ T5888] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 269.456127][ T5888] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.466298][ T5888] usb 7-1: config 128 interface 127 has no altsetting 0 [ 269.550711][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 269.558028][ T5888] usb 7-1: language id specifier not provided by device, defaulting to English [ 269.572478][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 269.582998][ T5888] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 269.592434][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.602476][ T5938] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 269.612653][ T5888] usb 7-1: Product: syz [ 269.616839][ T5888] usb 7-1: Manufacturer: syz [ 269.626037][ T5938] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 269.644941][ T5888] usb 7-1: SerialNumber: syz [ 269.851970][ T5938] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 269.862546][ T5938] usb 4-1: config 128 has no interface number 0 [ 269.869389][ T5938] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 269.881550][ T5938] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.897208][ T5938] usb 4-1: config 128 interface 127 has no altsetting 0 [ 269.907506][ T5938] usb 4-1: language id specifier not provided by device, defaulting to English [ 270.814261][ T5888] usb 7-1: can't set config #128, error -71 [ 270.822217][ T5938] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 270.831740][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.839827][ T5938] usb 4-1: Product: syz [ 270.844006][ T5938] usb 4-1: Manufacturer: syz [ 270.848665][ T5938] usb 4-1: SerialNumber: syz [ 270.855702][ T5888] usb 7-1: USB disconnect, device number 15 [ 271.007202][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.530'. [ 271.807885][ T5981] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 272.307886][ T5981] usb 2-1: Using ep0 maxpacket: 32 [ 272.315216][ T5981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 272.336000][ T5981] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 272.357054][ T5981] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 272.403572][ T5981] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 272.459295][ T5981] usb 2-1: config 128 has no interface number 0 [ 272.490332][ T5981] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 272.536444][ T5938] usb 4-1: USB disconnect, device number 10 [ 272.558962][ T5981] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.113734][ T5981] usb 2-1: config 128 interface 127 has no altsetting 0 [ 274.267547][ T5981] usb 2-1: string descriptor 0 read error: -71 [ 274.273833][ T5981] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 274.283639][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.354037][ T5981] usb 2-1: can't set config #128, error -71 [ 274.512524][ T5981] usb 2-1: USB disconnect, device number 9 [ 274.577027][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 274.745050][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 275.271322][ T5938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 275.330654][ T7780] netlink: 'syz.1.540': attribute type 2 has an invalid length. [ 275.338906][ T7780] netlink: 'syz.1.540': attribute type 8 has an invalid length. [ 275.346688][ T7780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.540'. [ 275.497201][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 275.515820][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.536031][ T5938] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.633007][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.732463][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 275.793756][ T8] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 275.802172][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.804082][ T5938] usb 4-1: config 0 descriptor?? [ 275.810379][ T8] usb 6-1: can't read configurations, error -71 [ 275.957961][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.5.544'. [ 277.560627][ T5888] usb 4-1: USB disconnect, device number 11 [ 277.827223][ T5938] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 278.144200][ T5938] usb 8-1: Using ep0 maxpacket: 32 [ 278.155153][ T5938] usb 8-1: unable to get BOS descriptor or descriptor too short [ 278.164012][ T5938] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 278.173265][ T5938] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 278.189767][ T5938] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 278.202825][ T5938] usb 8-1: config 128 has no interface number 0 [ 278.238816][ T5938] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 278.258849][ T29] audit: type=1326 audit(1732909010.400:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7815 comm="syz.1.556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463b780849 code=0x0 [ 278.381939][ T5938] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.393043][ T5938] usb 8-1: config 128 interface 127 has no altsetting 0 [ 278.407576][ T5938] usb 8-1: language id specifier not provided by device, defaulting to English [ 278.435872][ T5938] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 278.445214][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.681546][ T5938] usb 8-1: Product: syz [ 278.683780][ T7825] netlink: 'syz.3.555': attribute type 2 has an invalid length. [ 278.693811][ T7825] netlink: 'syz.3.555': attribute type 8 has an invalid length. [ 278.701723][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.555'. [ 278.727159][ T5938] usb 8-1: Manufacturer: syz [ 278.759854][ T5938] usb 8-1: SerialNumber: syz [ 278.912146][ T5888] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 279.137689][ T5888] usb 2-1: device descriptor read/64, error -71 [ 279.397203][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.416338][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.557'. [ 279.547161][ T5888] usb 2-1: device descriptor read/64, error -71 [ 279.671123][ T5888] usb usb2-port1: attempt power cycle [ 280.577702][ T5938] usb 8-1: USB disconnect, device number 3 [ 280.617141][ T5981] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 280.723620][ T7846] netlink: 'syz.7.565': attribute type 2 has an invalid length. [ 280.733526][ T7846] netlink: 'syz.7.565': attribute type 8 has an invalid length. [ 280.746980][ T7846] netlink: 132 bytes leftover after parsing attributes in process `syz.7.565'. [ 280.769048][ T5981] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 280.784688][ T5981] usb 4-1: config 5 has no interface number 0 [ 280.799694][ T5981] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 280.814724][ T5981] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 280.832583][ T5981] usb 4-1: config 5 interface 123 has no altsetting 0 [ 280.843471][ T5981] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 280.865699][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.874180][ T5981] usb 4-1: Product: syz [ 280.878682][ T8] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 280.894052][ T5981] usb 4-1: Manufacturer: syz [ 280.900525][ T5981] usb 4-1: SerialNumber: syz [ 281.023276][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.041410][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.052758][ T8] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.057496][ T5888] usb 2-1: device descriptor read/8, error -71 [ 281.062050][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.083960][ T8] usb 7-1: config 0 descriptor?? [ 281.347590][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 281.805329][ T5888] usb 2-1: device descriptor read/8, error -71 [ 281.876053][ T5981] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 281.891221][ T5981] usb 4-1: USB disconnect, device number 12 [ 281.938127][ T5888] usb usb2-port1: unable to enumerate USB device [ 282.319555][ T8] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 282.392871][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0005/input/input8 [ 283.006104][ T7862] netlink: 'syz.5.569': attribute type 2 has an invalid length. [ 283.014236][ T7862] netlink: 'syz.5.569': attribute type 8 has an invalid length. [ 283.022214][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.569'. [ 284.196113][ T8] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 284.267544][ T8] usb 7-1: USB disconnect, device number 16 [ 284.325728][ T5938] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 284.547014][ T5938] usb 8-1: Using ep0 maxpacket: 8 [ 285.457134][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 285.479569][ T5938] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.489804][ T5938] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.501355][ T5938] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 285.516757][ T5938] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 285.526021][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 285.534301][ T5938] usb 8-1: Product: syz [ 285.538526][ T5938] usb 8-1: Manufacturer: syz [ 285.543137][ T5938] usb 8-1: SerialNumber: syz [ 285.559522][ T5938] usb 8-1: config 0 descriptor?? [ 285.569887][ T5938] radio-si470x 8-1:0.0: could not find interrupt in endpoint [ 285.577548][ T5938] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 285.588156][ T5938] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 285.657313][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 285.671185][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 285.685139][ T29] audit: type=1326 audit(1732909017.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7884 comm="syz.6.577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x0 [ 285.712247][ T8] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 285.723958][ T8] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 285.738521][ T8] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 285.751105][ T8] usb 6-1: config 128 has no interface number 0 [ 285.757569][ T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 285.769061][ T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.777048][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 285.780195][ T8] usb 6-1: config 128 interface 127 has no altsetting 0 [ 285.797472][ T8] usb 6-1: language id specifier not provided by device, defaulting to English [ 285.808593][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 285.820016][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.828287][ T8] usb 6-1: Product: syz [ 285.832465][ T8] usb 6-1: Manufacturer: syz [ 285.837407][ T8] usb 6-1: SerialNumber: syz [ 285.937138][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 285.952556][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 285.963350][ T5888] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 285.972271][ T5888] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 285.983445][ T5888] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 285.992681][ T5888] usb 4-1: config 128 has no interface number 0 [ 285.999186][ T5888] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 286.010596][ T5888] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.020925][ T5888] usb 4-1: config 128 interface 127 has no altsetting 0 [ 286.028067][ T5938] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 286.040087][ T5888] usb 4-1: language id specifier not provided by device, defaulting to English [ 286.061032][ T5888] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 286.070311][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.078487][ T5888] usb 4-1: Product: syz [ 286.082755][ T5888] usb 4-1: Manufacturer: syz [ 286.087481][ T5888] usb 4-1: SerialNumber: syz [ 286.177094][ T5938] usb 7-1: device descriptor read/64, error -71 [ 286.427069][ T5938] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 286.587090][ T5938] usb 7-1: device descriptor read/64, error -71 [ 286.699604][ T5938] usb usb7-port1: attempt power cycle [ 286.893847][ T5981] usb 8-1: USB disconnect, device number 4 [ 287.251254][ T5938] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 287.296846][ T5938] usb 7-1: device descriptor read/8, error -71 [ 288.273143][ T5938] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 288.337733][ T5938] usb 7-1: device descriptor read/8, error -71 [ 288.344380][ T5888] usb 4-1: USB disconnect, device number 13 [ 288.363797][ T8] usb 6-1: USB disconnect, device number 8 [ 289.066626][ T5938] usb usb7-port1: unable to enumerate USB device [ 290.661817][ T5938] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 291.020927][ T7919] netlink: 'syz.6.584': attribute type 2 has an invalid length. [ 291.096014][ T7919] netlink: 'syz.6.584': attribute type 8 has an invalid length. [ 291.106963][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.6.584'. [ 291.307305][ T5938] usb 2-1: device not accepting address 14, error -71 [ 291.696557][ T7925] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 291.704030][ T7925] PKCS7: Only support pkcs7_signedData type [ 293.597704][ T5938] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.717118][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 294.725675][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.737501][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.780282][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 294.833251][ T5938] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 294.850170][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 294.879110][ T5981] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 294.898422][ T5938] usb 2-1: Product: syz [ 294.905084][ T5938] usb 2-1: Manufacturer: syz [ 294.915262][ T5938] usb 2-1: SerialNumber: syz [ 294.930571][ T5938] usb 2-1: config 0 descriptor?? [ 294.942753][ T5938] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 294.957102][ T5938] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 294.977270][ T5938] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 295.051377][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 295.061856][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 295.083452][ T5981] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 295.106750][ T5981] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 295.144217][ T5981] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 295.377347][ T5981] usb 6-1: config 128 has no interface number 0 [ 295.383667][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 295.395078][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.405281][ T5981] usb 6-1: config 128 interface 127 has no altsetting 0 [ 295.797161][ T5938] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 296.037074][ T5981] usb 6-1: string descriptor 0 read error: -71 [ 296.043519][ T5981] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 296.052754][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.079386][ T5981] usb 6-1: can't set config #128, error -71 [ 296.088051][ T5981] usb 6-1: USB disconnect, device number 9 [ 296.107085][ T29] audit: type=1800 audit(1732909028.250:5): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.596" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 296.240995][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 296.256375][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 296.265333][ T5938] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 296.273792][ T5938] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 296.284134][ T5938] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 296.293252][ T5938] usb 7-1: config 128 has no interface number 0 [ 296.303342][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 297.336233][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 297.346432][ T5938] usb 7-1: config 128 interface 127 has no altsetting 0 [ 297.357068][ T5938] usb 7-1: language id specifier not provided by device, defaulting to English [ 297.367765][ T5938] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 297.376845][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.384908][ T5938] usb 7-1: Product: syz [ 297.389125][ T5938] usb 7-1: Manufacturer: syz [ 297.393727][ T5938] usb 7-1: SerialNumber: syz [ 297.953630][ T5981] usb 2-1: USB disconnect, device number 16 [ 298.047023][ T46] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 298.248498][ T7978] netlink: 'syz.1.601': attribute type 2 has an invalid length. [ 298.256394][ T7978] netlink: 'syz.1.601': attribute type 8 has an invalid length. [ 298.264244][ T7978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.601'. [ 298.940182][ T7987] ubi0: attaching mtd0 [ 298.945783][ T7987] ubi0: scanning is finished [ 302.435400][ T7987] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 303.393714][ T46] usb 8-1: device descriptor read/all, error -71 [ 303.645231][ T5938] usb 7-1: USB disconnect, device number 21 [ 304.877018][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 305.877641][ T8023] netlink: 'syz.7.613': attribute type 2 has an invalid length. [ 305.885326][ T8023] netlink: 'syz.7.613': attribute type 8 has an invalid length. [ 305.893112][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 305.907420][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 305.915984][ T8] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 305.938326][ T8] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 305.953752][ T8023] netlink: 132 bytes leftover after parsing attributes in process `syz.7.613'. [ 305.992395][ T8] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 306.005029][ T8] usb 4-1: config 128 has no interface number 0 [ 306.130512][ T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 306.142244][ T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.152498][ T8] usb 4-1: config 128 interface 127 has no altsetting 0 [ 306.163033][ T8] usb 4-1: language id specifier not provided by device, defaulting to English [ 306.174734][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 306.184257][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.192341][ T8] usb 4-1: Product: syz [ 306.196740][ T8] usb 4-1: Manufacturer: syz [ 306.201574][ T8] usb 4-1: SerialNumber: syz [ 308.606638][ T8] usb 4-1: USB disconnect, device number 14 [ 310.264498][ T8051] ubi0: attaching mtd0 [ 312.533652][ T8051] __kmem_cache_create_args(ubi_aeb_slab_cache) failed with error -22 [ 312.541863][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.6.620 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 312.552136][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.562249][ T8051] Call Trace: [ 312.565549][ T8051] [ 312.568493][ T8051] dump_stack_lvl+0x241/0x360 [ 312.573206][ T8051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.578425][ T8051] ? __pfx__printk+0x10/0x10 [ 312.583015][ T8051] ? kmem_cache_free+0x195/0x410 [ 312.587941][ T8051] ? __kmem_cache_create_args+0x1ed/0x320 [ 312.593657][ T8051] __kmem_cache_create_args+0x251/0x320 [ 312.599196][ T8051] ubi_attach+0x36c/0x5b80 [ 312.603619][ T8051] ? __pfx_ubi_attach+0x10/0x10 [ 312.608475][ T8051] ? ubi_attach_mtd_dev+0x19fa/0x3540 [ 312.613834][ T8051] ubi_attach_mtd_dev+0x1a3a/0x3540 [ 312.619035][ T8051] ctrl_cdev_ioctl+0x346/0x570 [ 312.623789][ T8051] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 312.629071][ T8051] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 312.634347][ T8051] __se_sys_ioctl+0xf5/0x170 [ 312.638929][ T8051] do_syscall_64+0xf3/0x230 [ 312.643433][ T8051] ? clear_bhb_loop+0x35/0x90 [ 312.648110][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.653989][ T8051] RIP: 0033:0x7f0fa0f80849 [ 312.658402][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.677996][ T8051] RSP: 002b:00007f0fa1d8c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.686421][ T8051] RAX: ffffffffffffffda RBX: 00007f0fa1146160 RCX: 00007f0fa0f80849 [ 312.694401][ T8051] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 000000000000000a [ 312.702364][ T8051] RBP: 00007f0fa0ff3986 R08: 0000000000000000 R09: 0000000000000000 [ 312.710325][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.718288][ T8051] R13: 0000000000000000 R14: 00007f0fa1146160 R15: 00007fff976d1ab8 [ 312.726254][ T8051] [ 312.730206][ T8051] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12 [ 316.210875][ T46] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 316.247510][ T5151] Bluetooth: hci3: link tx timeout [ 316.252930][ T5151] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 317.069060][ T8] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 318.128218][ T8086] netlink: 'syz.3.632': attribute type 2 has an invalid length. [ 318.135918][ T8086] netlink: 'syz.3.632': attribute type 8 has an invalid length. [ 318.143729][ T8086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.632'. [ 318.167554][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.173981][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.309814][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 318.603590][ T8092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.119634][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 321.417715][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 321.427016][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 321.437587][ T8] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 321.468156][ T8] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 321.514971][ T8] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 321.709870][ T8] usb 6-1: config 128 has no interface number 0 [ 321.789493][ T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 321.841018][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.854209][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.884701][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.914552][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.925653][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.935595][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.073044][ T8] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.097867][ T8] usb 6-1: config 128 interface 127 has no altsetting 0 [ 322.119624][ T8] usb 6-1: language id specifier not provided by device, defaulting to English [ 322.188194][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 322.207053][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.215083][ T8] usb 6-1: Product: syz [ 322.219580][ T8] usb 6-1: Manufacturer: syz [ 322.224193][ T8] usb 6-1: SerialNumber: syz [ 322.393640][ T8] usb 6-1: can't set config #128, error -71 [ 322.408309][ T8] usb 6-1: USB disconnect, device number 11 [ 322.488799][ T8126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.206828][ T8135] ubi0: attaching mtd0 [ 323.212027][ T8135] ubi0: scanning is finished [ 324.208800][ T5849] Bluetooth: hci1: command tx timeout [ 325.887297][ T8128] netlink: 'syz.6.646': attribute type 2 has an invalid length. [ 325.934352][ T8128] netlink: 'syz.6.646': attribute type 8 has an invalid length. [ 325.971279][ T8135] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 326.055473][ T8128] netlink: 132 bytes leftover after parsing attributes in process `syz.6.646'. [ 326.069294][ T8116] chnl_net:caif_netlink_parms(): no params data found [ 326.260402][ T5849] Bluetooth: hci1: command tx timeout [ 326.510428][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.573071][ T8116] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.581599][ T8116] bridge_slave_0: entered allmulticast mode [ 326.590298][ T8116] bridge_slave_0: entered promiscuous mode [ 326.620659][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.632522][ T8116] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.641665][ T8116] bridge_slave_1: entered allmulticast mode [ 326.654617][ T8116] bridge_slave_1: entered promiscuous mode [ 326.706612][ T8116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.732380][ T8116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.774680][ T8116] team0: Port device team_slave_0 added [ 326.803928][ T8116] team0: Port device team_slave_1 added [ 326.825801][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.834445][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.861749][ T8116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.874517][ T8116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.881697][ T8116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.936976][ T8116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.065025][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.154458][ T8116] hsr_slave_0: entered promiscuous mode [ 327.166682][ T8116] hsr_slave_1: entered promiscuous mode [ 327.292818][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.367877][ T5849] Bluetooth: hci1: command tx timeout [ 329.396548][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.377177][ T5849] Bluetooth: hci1: command tx timeout [ 330.834850][ T8116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.959882][ T8116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 331.329447][ T8190] ubi0: attaching mtd0 [ 331.334560][ T8190] ubi0: scanning is finished [ 332.220108][ T8194] netlink: 'syz.7.664': attribute type 2 has an invalid length. [ 332.244520][ T8194] netlink: 'syz.7.664': attribute type 8 has an invalid length. [ 332.281314][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.7.664'. [ 332.366360][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.429481][ T8116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 332.445800][ T8116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 332.465515][ T8190] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 333.547046][ T5938] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 334.023772][ T11] bridge_slave_1: left allmulticast mode [ 334.039862][ T11] bridge_slave_1: left promiscuous mode [ 334.073215][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.118394][ T11] bridge_slave_0: left allmulticast mode [ 334.144165][ T11] bridge_slave_0: left promiscuous mode [ 334.166985][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.461043][ T8243] netlink: 'syz.3.677': attribute type 9 has an invalid length. [ 339.468870][ T8243] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.677'. [ 340.155240][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.307568][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.318703][ T11] bond0 (unregistering): Released all slaves [ 340.369426][ T5938] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 340.419999][ T8116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.557157][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 340.580431][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 340.581896][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.616537][ T5938] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 340.640718][ T8252] netlink: 'syz.7.679': attribute type 2 has an invalid length. [ 340.650222][ T5938] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 340.669505][ T8252] netlink: 'syz.7.679': attribute type 8 has an invalid length. [ 340.691984][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.699124][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.729183][ T5938] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 340.758559][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.765715][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.777260][ T5938] usb 7-1: config 128 has no interface number 0 [ 340.801884][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 340.814555][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.7.679'. [ 340.851840][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.933151][ T5938] usb 7-1: config 128 interface 127 has no altsetting 0 [ 340.985380][ T5938] usb 7-1: language id specifier not provided by device, defaulting to English [ 341.053040][ T5938] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 341.094382][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.138558][ T5938] usb 7-1: Product: syz [ 341.157000][ T5938] usb 7-1: Manufacturer: syz [ 341.199740][ T5938] usb 7-1: SerialNumber: syz [ 341.232944][ T11] hsr_slave_0: left promiscuous mode [ 341.257218][ T5938] usb 7-1: can't set config #128, error -71 [ 341.902558][ T5938] usb 7-1: USB disconnect, device number 24 [ 341.912341][ T11] hsr_slave_1: left promiscuous mode [ 341.919008][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.926812][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.981706][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.989475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.049011][ T11] veth1_macvtap: left promiscuous mode [ 342.071771][ T11] veth0_macvtap: left promiscuous mode [ 342.089507][ T11] veth1_vlan: left promiscuous mode [ 342.102311][ T11] veth0_vlan: left promiscuous mode [ 342.177896][ T5895] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 342.364217][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 342.383634][ T5895] usb 8-1: unable to get BOS descriptor or descriptor too short [ 342.421501][ T5895] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 342.448218][ T5895] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 342.483429][ T5895] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 342.502816][ T5895] usb 8-1: config 128 has no interface number 0 [ 342.517442][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 342.538554][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.554718][ T5895] usb 8-1: config 128 interface 127 has no altsetting 0 [ 342.568797][ T5895] usb 8-1: language id specifier not provided by device, defaulting to English [ 342.592230][ T5895] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 342.606301][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.624970][ T5895] usb 8-1: Product: syz [ 342.642021][ T5895] usb 8-1: Manufacturer: syz [ 342.667196][ T5895] usb 8-1: SerialNumber: syz [ 344.414059][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 344.555146][ T5895] usb 8-1: USB disconnect, device number 7 [ 344.622905][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 344.635732][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.157899][ T8] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 345.166581][ T8] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 345.176991][ T8] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 345.186045][ T8] usb 4-1: config 128 has no interface number 0 [ 345.192442][ T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 345.203859][ T8] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.214163][ T8] usb 4-1: config 128 interface 127 has no altsetting 0 [ 345.531432][ T8289] nvme_fabrics: missing parameter 'transport=%s' [ 345.538340][ T8289] nvme_fabrics: missing parameter 'nqn=%s' [ 345.758712][ T8] usb 4-1: language id specifier not provided by device, defaulting to English [ 345.818105][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 345.834604][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.842690][ T8] usb 4-1: Product: syz [ 345.846883][ T8] usb 4-1: Manufacturer: syz [ 345.852142][ T8] usb 4-1: SerialNumber: syz [ 345.891029][ T11] team0 (unregistering): Port device team_slave_1 removed [ 346.141176][ T11] team0 (unregistering): Port device team_slave_0 removed [ 346.178469][ T8302] netlink: 'syz.7.691': attribute type 2 has an invalid length. [ 346.186431][ T8302] netlink: 'syz.7.691': attribute type 8 has an invalid length. [ 346.487185][ T3076] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 346.981079][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.7.691'. [ 347.192594][ T3076] usb 7-1: Using ep0 maxpacket: 32 [ 347.215016][ T8] usb 4-1: USB disconnect, device number 15 [ 347.234466][ T3076] usb 7-1: unable to get BOS descriptor or descriptor too short [ 347.251343][ T3076] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 347.277160][ T3076] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 347.300858][ T3076] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 347.324051][ T3076] usb 7-1: config 128 has no interface number 0 [ 347.336189][ T3076] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 347.347714][ T3076] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.387129][ T3076] usb 7-1: config 128 interface 127 has no altsetting 0 [ 347.409389][ T3076] usb 7-1: language id specifier not provided by device, defaulting to English [ 347.437346][ T3076] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 347.446654][ T3076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.466058][ T3076] usb 7-1: Product: syz [ 347.471339][ T3076] usb 7-1: Manufacturer: syz [ 347.476071][ T3076] usb 7-1: SerialNumber: syz [ 348.086468][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.565502][ T8116] veth0_vlan: entered promiscuous mode [ 348.606345][ T8116] veth1_vlan: entered promiscuous mode [ 348.664116][ T8116] veth0_macvtap: entered promiscuous mode [ 348.679233][ T8116] veth1_macvtap: entered promiscuous mode [ 348.709121][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.719884][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.731644][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.743879][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.754214][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.765259][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.776434][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.788823][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.799295][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.810509][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.836769][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.881563][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.893867][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.904284][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.915608][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.932354][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.943464][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.954054][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.965022][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.975428][ T8116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.986443][ T8116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.114867][ T8116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.145442][ T8116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.207227][ T8116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.226289][ T8116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.304706][ T8116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.387639][ T3076] usb 7-1: USB disconnect, device number 25 [ 349.719589][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.414151][ T7722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.455401][ T7722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.494592][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.548950][ T3076] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 353.867041][ T3076] usb 9-1: Using ep0 maxpacket: 32 [ 353.873074][ T3076] usb 9-1: device descriptor read/all, error -71 [ 354.981035][ T8374] netlink: 'syz.5.703': attribute type 2 has an invalid length. [ 354.989059][ T8374] netlink: 'syz.5.703': attribute type 8 has an invalid length. [ 354.996828][ T8374] netlink: 132 bytes leftover after parsing attributes in process `syz.5.703'. [ 359.677801][ T3076] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 359.837289][ T3076] usb 9-1: Using ep0 maxpacket: 32 [ 359.848721][ T3076] usb 9-1: unable to get BOS descriptor or descriptor too short [ 359.869305][ T3076] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 359.936190][ T8434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.157139][ T3076] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 360.177783][ T3076] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 360.195870][ T3076] usb 9-1: config 128 has no interface number 0 [ 360.206616][ T3076] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 360.221045][ T3076] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.231421][ T3076] usb 9-1: config 128 interface 127 has no altsetting 0 [ 360.245036][ T3076] usb 9-1: language id specifier not provided by device, defaulting to English [ 360.306314][ T3076] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 360.323578][ T3076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.331991][ T3076] usb 9-1: Product: syz [ 360.336243][ T3076] usb 9-1: Manufacturer: syz [ 360.351462][ T3076] usb 9-1: SerialNumber: syz [ 360.578426][ T8444] binder: 8437:8444 ioctl 4018620d 0 returned -22 [ 361.738385][ T3076] usb 9-1: USB disconnect, device number 4 [ 362.303467][ T8455] nvme_fabrics: missing parameter 'transport=%s' [ 362.317005][ T8455] nvme_fabrics: missing parameter 'nqn=%s' [ 364.865414][ T8490] netlink: 'syz.5.740': attribute type 9 has an invalid length. [ 364.873220][ T8490] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.740'. [ 365.511616][ T46] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 365.577149][ T3076] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 365.680199][ T46] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 365.703016][ T46] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 365.721368][ T46] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.365581][ T3076] usb 9-1: Using ep0 maxpacket: 8 [ 366.383858][ T46] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.393188][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.401350][ T46] usb 8-1: Product: syz [ 366.405586][ T46] usb 8-1: Manufacturer: syz [ 366.410319][ T46] usb 8-1: SerialNumber: syz [ 366.504990][ T46] usb 8-1: can't set config #1, error -71 [ 366.514135][ T46] usb 8-1: USB disconnect, device number 8 [ 366.522190][ T3076] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 366.531327][ T3076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.539754][ T3076] usb 9-1: Product: syz [ 366.545057][ T3076] usb 9-1: Manufacturer: syz [ 366.549790][ T3076] usb 9-1: SerialNumber: syz [ 366.559140][ T3076] usb 9-1: config 0 descriptor?? [ 366.637268][ T5938] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 366.647406][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 366.773442][ T3076] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 366.809345][ T5938] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 366.818240][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 366.824587][ T5938] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 366.834941][ T5938] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.845367][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 366.855396][ T25] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 366.863962][ T5938] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.873064][ T25] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 366.883433][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.887597][ T5981] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 366.891481][ T5938] usb 6-1: Product: syz [ 366.903333][ T25] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 366.912441][ T25] usb 4-1: config 128 has no interface number 0 [ 366.918741][ T5938] usb 6-1: Manufacturer: syz [ 366.923343][ T5938] usb 6-1: SerialNumber: syz [ 366.928080][ T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 366.941981][ T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.956050][ T25] usb 4-1: config 128 interface 127 has no altsetting 0 [ 366.966156][ T25] usb 4-1: language id specifier not provided by device, defaulting to English [ 366.981759][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 366.992407][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.000592][ T25] usb 4-1: Product: syz [ 367.004824][ T25] usb 4-1: Manufacturer: syz [ 367.009602][ T25] usb 4-1: SerialNumber: syz [ 367.057200][ T5981] usb 7-1: Using ep0 maxpacket: 32 [ 367.071671][ T5981] usb 7-1: unable to get BOS descriptor or descriptor too short [ 367.080641][ T5981] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 367.089127][ T5981] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 367.099489][ T5981] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 367.108571][ T5981] usb 7-1: config 128 has no interface number 0 [ 367.114854][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 367.126110][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 367.140176][ T5981] usb 7-1: config 128 interface 127 has no altsetting 0 [ 367.151417][ T5981] usb 7-1: language id specifier not provided by device, defaulting to English [ 367.164408][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 367.173533][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.182311][ T5981] usb 7-1: Product: syz [ 367.186542][ T5981] usb 7-1: Manufacturer: syz [ 367.191199][ T5981] usb 7-1: SerialNumber: syz [ 368.695214][ T3076] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 368.707283][ T3076] usb 9-1: USB disconnect, device number 5 [ 368.813830][ T5938] usb 6-1: 0:2 : does not exist [ 368.944170][ T25] usb 4-1: USB disconnect, device number 16 [ 368.951642][ T5938] usb 6-1: USB disconnect, device number 12 [ 369.435863][ T5981] usb 7-1: USB disconnect, device number 26 [ 370.552869][ T8] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 371.206952][ C0] hrtimer: interrupt took 49380 ns [ 373.897154][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 374.058741][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 374.075792][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 374.083782][ T5938] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 374.250735][ T25] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 374.379328][ T25] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 374.398041][ T25] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 374.437128][ T25] usb 8-1: config 128 has no interface number 0 [ 374.453828][ T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 374.485675][ T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.516572][ T25] usb 8-1: config 128 interface 127 has no altsetting 0 [ 374.557541][ T25] usb 8-1: language id specifier not provided by device, defaulting to English [ 374.574493][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 374.590025][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 374.607035][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.615800][ T25] usb 8-1: Product: syz [ 374.626999][ T25] usb 8-1: Manufacturer: syz [ 374.632491][ T25] usb 8-1: SerialNumber: syz [ 375.157003][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 375.164809][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 375.183084][ T8] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 375.195851][ T8] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 375.213460][ T8] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 375.222882][ T8] usb 9-1: config 128 has no interface number 0 [ 375.233282][ T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 375.254063][ T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.266697][ T8] usb 9-1: config 128 interface 127 has no altsetting 0 [ 375.298879][ T8] usb 9-1: language id specifier not provided by device, defaulting to English [ 375.324856][ T8] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 375.366818][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.386868][ T8] usb 9-1: Product: syz [ 375.391344][ T8] usb 9-1: Manufacturer: syz [ 375.396061][ T8] usb 9-1: SerialNumber: syz [ 376.248192][ T8582] netlink: 'syz.3.766': attribute type 9 has an invalid length. [ 376.256099][ T8582] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.766'. [ 376.862107][ T25] usb 8-1: USB disconnect, device number 9 [ 377.186654][ T8] usb 9-1: USB disconnect, device number 7 [ 378.997256][ T5938] usb 7-1: device descriptor read/64, error -71 [ 379.267333][ T5938] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 379.314608][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.322073][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.407314][ T8611] nvme_fabrics: missing parameter 'transport=%s' [ 379.413702][ T8611] nvme_fabrics: missing parameter 'nqn=%s' [ 379.547533][ T5938] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 379.556042][ T8614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.556246][ T5938] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 379.576792][ T5938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.655587][ T5938] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.666458][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.680411][ T5938] usb 7-1: Product: syz [ 379.684672][ T5938] usb 7-1: Manufacturer: syz [ 379.694327][ T5938] usb 7-1: SerialNumber: syz [ 382.351923][ T5938] usb 7-1: 0:2 : does not exist [ 382.547165][ T5938] usb 7-1: USB disconnect, device number 28 [ 382.563885][ T118] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 382.947390][ T5938] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 383.097161][ T118] usb 4-1: Using ep0 maxpacket: 32 [ 383.105099][ T118] usb 4-1: unable to get BOS descriptor or descriptor too short [ 383.114410][ T118] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 383.122884][ T118] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 383.134662][ T118] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 383.147010][ T118] usb 4-1: config 128 has no interface number 0 [ 383.153403][ T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 383.164848][ T118] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.175064][ T118] usb 4-1: config 128 interface 127 has no altsetting 0 [ 383.190959][ T118] usb 4-1: language id specifier not provided by device, defaulting to English [ 383.201743][ T118] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 383.218986][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.237258][ T118] usb 4-1: Product: syz [ 383.247166][ T118] usb 4-1: Manufacturer: syz [ 383.257296][ T118] usb 4-1: SerialNumber: syz [ 385.037985][ T118] usb 4-1: USB disconnect, device number 17 [ 389.394430][ T5938] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 389.507130][ T5895] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 389.747234][ T5895] usb 9-1: Using ep0 maxpacket: 32 [ 389.753385][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 389.762051][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short [ 389.771859][ T5938] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 389.780389][ T5938] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 389.792042][ T5938] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 389.801244][ T5938] usb 6-1: config 128 has no interface number 0 [ 389.801530][ T5895] usb 9-1: unable to get BOS descriptor or descriptor too short [ 389.807692][ T5938] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 389.827199][ T5938] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.870703][ T5938] usb 6-1: config 128 interface 127 has no altsetting 0 [ 389.891467][ T8710] ubi0: attaching mtd0 [ 389.901000][ T8710] ubi0: scanning is finished [ 389.980460][ T5938] usb 6-1: language id specifier not provided by device, defaulting to English [ 390.122677][ T5895] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 390.161567][ T5938] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 390.306541][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.428974][ T5895] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 390.441195][ T5895] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 390.442661][ T8710] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 390.450397][ T5895] usb 9-1: config 128 has no interface number 0 [ 390.466375][ T5895] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 390.467039][ T5938] usb 6-1: Product: syz [ 390.477628][ T5895] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.477657][ T5895] usb 9-1: config 128 interface 127 has no altsetting 0 [ 390.489004][ T5895] usb 9-1: language id specifier not provided by device, defaulting to English [ 390.492110][ T5938] usb 6-1: Manufacturer: syz [ 390.511742][ T5895] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 390.515668][ T5938] usb 6-1: SerialNumber: syz [ 390.557022][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.575392][ T5895] usb 9-1: Product: syz [ 390.616661][ T5895] usb 9-1: Manufacturer: syz [ 390.635352][ T5895] usb 9-1: SerialNumber: syz [ 392.067066][ T5895] usb 9-1: USB disconnect, device number 8 [ 392.916118][ T5938] usb 6-1: USB disconnect, device number 13 [ 403.976638][ T8842] binder: 8838:8842 ioctl 4018620d 0 returned -22 [ 405.014556][ T8847] nvme_fabrics: missing parameter 'transport=%s' [ 405.024228][ T8847] nvme_fabrics: missing parameter 'nqn=%s' [ 405.201795][ T29] audit: type=1326 audit(1732909137.350:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8849 comm="syz.7.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efde3780849 code=0x0 [ 405.609378][ T46] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 405.778611][ T46] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.815687][ T46] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 405.882615][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.907895][ T46] usb 8-1: config 0 descriptor?? [ 405.951442][ T46] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 406.168750][ T8862] ubi0: attaching mtd0 [ 406.173888][ T8862] ubi0: scanning is finished [ 406.272009][ T8862] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 406.280142][ T8862] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 406.287963][ T8862] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 406.294921][ T8862] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 406.302752][ T8862] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 406.309924][ T8862] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 406.318086][ T8862] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1286338019 [ 406.328111][ T8862] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 406.422836][ T8867] ubi0: background thread "ubi_bgt0d" started, PID 8867 [ 409.534292][ T5895] usb 8-1: USB disconnect, device number 10 [ 409.965867][ T8905] ubi: mtd0 is already attached to ubi0 [ 410.051365][ T8908] binder: 8892:8908 ioctl 4018620d 0 returned -22 [ 410.447207][ T46] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 414.117068][ T29] audit: type=1326 audit(1732909146.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8931 comm="syz.3.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc95f80849 code=0x0 [ 415.817727][ T8936] netlink: 'syz.7.868': attribute type 9 has an invalid length. [ 415.825555][ T8936] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.868'. [ 416.494100][ T5895] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 416.708782][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.755017][ T5895] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 416.771757][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.782169][ T5895] usb 4-1: config 0 descriptor?? [ 416.790765][ T5895] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 416.831919][ T8950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.745068][ T8968] binder: 8962:8968 ioctl 4018620d 0 returned -22 [ 418.758895][ T8] usb 4-1: USB disconnect, device number 18 [ 419.217060][ T8980] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 419.223826][ T8980] PKCS7: Only support pkcs7_signedData type [ 424.778442][ T29] audit: type=1326 audit(1732909156.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9018 comm="syz.6.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x0 [ 425.697080][ T5895] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 425.868870][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.897058][ T5895] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 425.932315][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.961366][ T5895] usb 7-1: config 0 descriptor?? [ 426.318710][ T5895] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 426.931537][ T5938] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 427.855642][ T5938] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 427.864466][ T5938] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 427.874630][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.895364][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.898488][ T5895] usb 7-1: USB disconnect, device number 30 [ 427.917937][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.926016][ T5938] usb 4-1: Product: syz [ 427.930276][ T5938] usb 4-1: Manufacturer: syz [ 427.934888][ T5938] usb 4-1: SerialNumber: syz [ 428.153876][ T5938] usb 4-1: 0:2 : does not exist [ 428.237511][ T5938] usb 4-1: USB disconnect, device number 19 [ 430.207413][ T29] audit: type=1326 audit(1732909162.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9092 comm="syz.3.910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc95f80849 code=0x0 [ 431.088248][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 431.278784][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.301492][ T5938] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 431.366103][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.441202][ T5938] usb 4-1: config 0 descriptor?? [ 431.467424][ T5938] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 433.267048][ T5895] usb 4-1: USB disconnect, device number 20 [ 433.267604][ T9119] capability: warning: `syz.6.917' uses 32-bit capabilities (legacy support in use) [ 433.564508][ T9124] nvme_fabrics: missing parameter 'transport=%s' [ 433.571067][ T9124] nvme_fabrics: missing parameter 'nqn=%s' [ 435.067028][ T29] audit: type=1326 audit(1732909167.190:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9146 comm="syz.8.926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7fab80849 code=0x0 [ 435.417099][ T5895] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 435.477351][ T5981] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 436.847253][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.857142][ T5981] usb 7-1: Using ep0 maxpacket: 32 [ 436.862408][ T5895] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 436.872306][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.887410][ T5981] usb 7-1: unable to get BOS descriptor or descriptor too short [ 436.991888][ T5895] usb 9-1: config 0 descriptor?? [ 437.021273][ T5981] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 437.029791][ T5981] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 437.040106][ T5981] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 437.049228][ T5981] usb 7-1: config 128 has no interface number 0 [ 437.050926][ T9166] nvme_fabrics: missing parameter 'transport=%s' [ 437.062534][ T9166] nvme_fabrics: missing parameter 'nqn=%s' [ 437.069297][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 437.080625][ T5981] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.090882][ T5981] usb 7-1: config 128 interface 127 has no altsetting 0 [ 437.106661][ T5895] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 437.118765][ T5981] usb 7-1: language id specifier not provided by device, defaulting to English [ 437.138376][ T5981] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 437.147477][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.155446][ T5981] usb 7-1: Product: syz [ 437.159652][ T5981] usb 7-1: Manufacturer: syz [ 437.164264][ T5981] usb 7-1: SerialNumber: syz [ 437.333142][ T5849] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 438.767243][ T29] audit: type=1326 audit(1732909170.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 438.808111][ T5981] usb 7-1: USB disconnect, device number 31 [ 438.905748][ T29] audit: type=1326 audit(1732909170.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 438.927388][ T29] audit: type=1326 audit(1732909170.970:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 438.949318][ T29] audit: type=1326 audit(1732909170.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9195 comm="syz.6.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 439.193853][ T5889] usb 9-1: USB disconnect, device number 10 [ 440.337583][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.343914][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.508616][ T29] audit: type=1326 audit(1732909174.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9246 comm="syz.3.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc95f80849 code=0x0 [ 443.234682][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 443.420102][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.437515][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.454209][ T5889] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 443.492778][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.678152][ T5889] usb 4-1: config 0 descriptor?? [ 445.397055][ T5895] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 445.479168][ T5981] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 445.599021][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 445.626832][ T5895] usb 7-1: unable to get BOS descriptor or descriptor too short [ 445.670371][ T5895] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 445.687088][ T5895] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 445.745135][ T5981] usb 8-1: Using ep0 maxpacket: 32 [ 445.758795][ T5895] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 445.789673][ T5981] usb 8-1: unable to get BOS descriptor or descriptor too short [ 445.807798][ T5895] usb 7-1: config 128 has no interface number 0 [ 445.821576][ T5981] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 445.840449][ T5895] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 445.872589][ T5981] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 445.884874][ T9282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.128778][ T5895] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.150551][ T5981] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 446.237504][ T9304] netlink: 'syz.3.968': attribute type 9 has an invalid length. [ 446.245229][ T9304] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.968'. [ 446.292884][ T5895] usb 7-1: config 128 interface 127 has no altsetting 0 [ 446.322397][ T5981] usb 8-1: config 128 has no interface number 0 [ 446.376623][ T5981] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 446.412547][ T5895] usb 7-1: language id specifier not provided by device, defaulting to English [ 446.492744][ T5895] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 446.555948][ T5981] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 446.603347][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.751422][ T5981] usb 8-1: config 128 interface 127 has no altsetting 0 [ 446.766992][ T5895] usb 7-1: Product: syz [ 446.771207][ T5895] usb 7-1: Manufacturer: syz [ 446.814547][ T5895] usb 7-1: SerialNumber: syz [ 446.821872][ T5981] usb 8-1: language id specifier not provided by device, defaulting to English [ 446.878685][ T5981] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 446.917854][ T5981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.962532][ T5981] usb 8-1: Product: syz [ 446.966774][ T5981] usb 8-1: Manufacturer: syz [ 446.997669][ T9306] netlink: 80 bytes leftover after parsing attributes in process `syz.3.969'. [ 447.008153][ T5981] usb 8-1: SerialNumber: syz [ 447.087060][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 447.093102][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 447.147053][ T5889] usb 4-1: USB disconnect, device number 21 [ 447.429052][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 448.296682][ T5895] usb 7-1: USB disconnect, device number 32 [ 448.454176][ T5981] usb 8-1: USB disconnect, device number 11 [ 448.723252][ T9327] netlink: 'syz.7.974': attribute type 9 has an invalid length. [ 448.731075][ T9327] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.974'. [ 448.753568][ T9327] ubi: mtd0 is already attached to ubi0 [ 448.762169][ T9327] ubi0: detaching mtd0 [ 448.813389][ T9327] ubi0: mtd0 is detached [ 451.167045][ T5981] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 451.337078][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 451.347794][ T9338] netlink: 80 bytes leftover after parsing attributes in process `syz.8.980'. [ 451.379914][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 451.418283][ T5981] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 451.426676][ T5981] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 451.474161][ T5981] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 451.506983][ T5981] usb 6-1: config 128 has no interface number 0 [ 451.513307][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 451.556964][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.592651][ T5981] usb 6-1: config 128 interface 127 has no altsetting 0 [ 451.761754][ T5981] usb 6-1: string descriptor 0 read error: -71 [ 451.768065][ T5981] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 451.777233][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.827073][ T5981] usb 6-1: can't set config #128, error -71 [ 451.834252][ T5981] usb 6-1: USB disconnect, device number 14 [ 452.767201][ T46] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 452.997354][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 453.012102][ T46] usb 7-1: unable to get BOS descriptor or descriptor too short [ 453.054409][ T46] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 453.073196][ T46] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 453.096979][ T46] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 453.107088][ T5981] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 453.115105][ T46] usb 7-1: config 128 has no interface number 0 [ 453.132093][ T46] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 453.153764][ T46] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.177046][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 453.183147][ T46] usb 7-1: config 128 interface 127 has no altsetting 0 [ 453.187041][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.200038][ T46] usb 7-1: language id specifier not provided by device, defaulting to English [ 453.210906][ T46] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 453.220312][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.228434][ T46] usb 7-1: Product: syz [ 453.232835][ T46] usb 7-1: Manufacturer: syz [ 453.237543][ T46] usb 7-1: SerialNumber: syz [ 453.267096][ T5981] usb 6-1: Using ep0 maxpacket: 32 [ 453.278656][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 453.308696][ T5981] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 453.341555][ T5981] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 453.372803][ T5981] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 453.404593][ T5981] usb 6-1: config 128 has no interface number 0 [ 453.417126][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 453.445217][ T5981] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.468086][ T5981] usb 6-1: config 128 interface 127 has no altsetting 0 [ 453.500859][ T5981] usb 6-1: language id specifier not provided by device, defaulting to English [ 453.517901][ T5981] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 453.543396][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.551897][ T5981] usb 6-1: Product: syz [ 453.566268][ T5981] usb 6-1: Manufacturer: syz [ 453.576375][ T5981] usb 6-1: SerialNumber: syz [ 456.027445][ T5981] usb 6-1: USB disconnect, device number 15 [ 456.658732][ T46] usb 7-1: USB disconnect, device number 33 [ 457.154338][ T9387] netlink: 'syz.7.993': attribute type 9 has an invalid length. [ 457.162146][ T9387] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.993'. [ 457.827227][ T29] audit: type=1326 audit(1732909189.960:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.6.994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x0 [ 457.927595][ T25] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 458.076996][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 458.084539][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 458.114983][ T25] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 458.140041][ T25] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 458.167028][ T25] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 458.186420][ T25] usb 9-1: config 128 has no interface number 0 [ 458.205390][ T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 458.224945][ T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.243134][ T25] usb 9-1: config 128 interface 127 has no altsetting 0 [ 458.265871][ T8] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 458.270496][ T25] usb 9-1: language id specifier not provided by device, defaulting to English [ 458.458376][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 458.459324][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.476988][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.490318][ T25] usb 9-1: Product: syz [ 458.545044][ T25] usb 9-1: Manufacturer: syz [ 458.549925][ T25] usb 9-1: SerialNumber: syz [ 458.736194][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.818478][ T8] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 458.901220][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.046084][ T8] usb 7-1: config 0 descriptor?? [ 459.352236][ T9410] ubi0: attaching mtd0 [ 459.357471][ T9410] ubi0: scanning is finished [ 459.644037][ T9410] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 459.651803][ T9410] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 459.653909][ T9417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.659373][ T9410] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 459.659396][ T9410] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 459.683746][ T9410] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 459.690678][ T9410] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 459.699168][ T9410] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1286338019 [ 459.709284][ T9410] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 459.737858][ T9416] ubi0: background thread "ubi_bgt0d" started, PID 9416 [ 459.929865][ T25] usb 9-1: USB disconnect, device number 11 [ 463.417213][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 463.423392][ T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 463.443666][ T8] usb 7-1: USB disconnect, device number 34 [ 465.537023][ T8] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 465.936281][ T9455] netlink: 'syz.3.1012': attribute type 9 has an invalid length. [ 465.944199][ T9455] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1012'. [ 465.956473][ T9455] ubi: mtd0 is already attached to ubi0 [ 465.962815][ T9455] ubi0: detaching mtd0 [ 465.980964][ T9455] ubi0: mtd0 is detached [ 466.017035][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 466.550867][ T8] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 466.629971][ T29] audit: type=1800 audit(1732909198.780:17): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1013" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 466.711517][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.719826][ T5895] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 466.737802][ T8] usb 7-1: Product: syz [ 466.742026][ T8] usb 7-1: Manufacturer: syz [ 466.746635][ T8] usb 7-1: SerialNumber: syz [ 466.861065][ T8] usb 7-1: config 0 descriptor?? [ 466.916144][ T8] dvb_usb_rtl28xxu 7-1:0.0: chip type detection failed -71 [ 466.923731][ T8] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.935178][ T8] usb 7-1: USB disconnect, device number 35 [ 466.947439][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 466.954625][ T5895] usb 8-1: unable to get BOS descriptor or descriptor too short [ 466.969806][ T5895] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 467.012630][ T5895] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 467.045213][ T5895] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 467.059820][ T5895] usb 8-1: config 128 has no interface number 0 [ 467.072963][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 467.091536][ T5895] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.145173][ T5895] usb 8-1: config 128 interface 127 has no altsetting 0 [ 467.157015][ T5981] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 467.191362][ T5895] usb 8-1: language id specifier not provided by device, defaulting to English [ 467.241596][ T5895] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 467.283644][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.304375][ T5895] usb 8-1: Product: syz [ 467.313215][ T5895] usb 8-1: Manufacturer: syz [ 467.319240][ T5981] usb 4-1: Using ep0 maxpacket: 32 [ 467.345976][ T5981] usb 4-1: unable to get BOS descriptor or descriptor too short [ 467.360829][ T5895] usb 8-1: SerialNumber: syz [ 467.511887][ T5981] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 467.527258][ T5981] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 467.824309][ T5981] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 467.856353][ T5981] usb 4-1: config 128 has no interface number 0 [ 467.880143][ T5981] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 467.891799][ T5981] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.902300][ T5981] usb 4-1: config 128 interface 127 has no altsetting 0 [ 467.922633][ T5981] usb 4-1: language id specifier not provided by device, defaulting to English [ 467.946028][ T5981] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 467.972171][ T5981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.980680][ T5981] usb 4-1: Product: syz [ 467.988023][ T5981] usb 4-1: Manufacturer: syz [ 467.993565][ T5981] usb 4-1: SerialNumber: syz [ 469.907080][ T8] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 470.189239][ T5895] usb 8-1: USB disconnect, device number 12 [ 470.245429][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 470.367228][ T8] usb 9-1: unable to get BOS descriptor or descriptor too short [ 470.377444][ T8] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 470.385831][ T8] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 470.398781][ T8] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 470.409112][ T8] usb 9-1: config 128 has no interface number 0 [ 470.416383][ T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 470.430843][ T5981] usb 4-1: USB disconnect, device number 22 [ 470.439326][ T8] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 470.450966][ T8] usb 9-1: config 128 interface 127 has no altsetting 0 [ 470.472232][ T8] usb 9-1: language id specifier not provided by device, defaulting to English [ 470.485637][ T8] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 470.501946][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.510014][ T8] usb 9-1: Product: syz [ 470.514192][ T8] usb 9-1: Manufacturer: syz [ 470.518802][ T8] usb 9-1: SerialNumber: syz [ 472.113573][ T8] usb 9-1: USB disconnect, device number 12 [ 472.447123][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 472.667278][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 472.959504][ T9503] delete_channel: no stack [ 473.103598][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.137508][ T25] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 473.169514][ T9509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.179976][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.203765][ T25] usb 4-1: config 0 descriptor?? [ 473.223391][ T9512] nvme_fabrics: missing parameter 'transport=%s' [ 473.229961][ T9512] nvme_fabrics: missing parameter 'nqn=%s' [ 473.763260][ T25] dragonrise 0003:0079:0006.0006: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 473.807007][ T25] dragonrise 0003:0079:0006.0006: no inputs found [ 473.813478][ T25] dragonrise 0003:0079:0006.0006: force feedback init failed [ 473.971678][ T5889] usb 4-1: USB disconnect, device number 23 [ 473.980413][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 474.147093][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 474.166740][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 474.192325][ T25] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 474.220416][ T25] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 474.244918][ T25] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 474.263873][ T25] usb 8-1: config 128 has no interface number 0 [ 474.295807][ T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 474.333591][ T25] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.366338][ T25] usb 8-1: config 128 interface 127 has no altsetting 0 [ 474.392475][ T25] usb 8-1: language id specifier not provided by device, defaulting to English [ 474.418636][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 474.447019][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.501794][ T25] usb 8-1: Product: syz [ 475.229872][ T25] usb 8-1: Manufacturer: syz [ 475.234523][ T25] usb 8-1: SerialNumber: syz [ 475.419911][ T9535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.045762][ T25] usb 8-1: USB disconnect, device number 13 [ 477.232452][ T9552] tipc: Started in network mode [ 477.255391][ T9552] tipc: Node identity ac14142f, cluster identity 4711 [ 477.273265][ T9552] tipc: New replicast peer: 0.0.0.0 [ 477.279609][ T9552] tipc: Enabled bearer , priority 10 [ 478.371313][ T5981] tipc: Node number set to 2886997039 [ 482.554704][ T9603] tipc: Started in network mode [ 482.559971][ T9603] tipc: Node identity ac14142f, cluster identity 4711 [ 482.610831][ T9603] tipc: New replicast peer: 0.0.0.0 [ 482.624002][ T9603] tipc: Enabled bearer , priority 10 [ 483.618477][ T8] tipc: Node number set to 2886997039 [ 486.846462][ T9642] No control pipe specified [ 489.546967][ T9667] ieee802154 phy0 wpan0: encryption failed: -22 [ 490.645562][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.989974][ T5938] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 492.827498][ T5938] usb 7-1: Using ep0 maxpacket: 32 [ 492.835047][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 492.878851][ T5938] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 492.929020][ T5938] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 492.963902][ T5938] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 492.973998][ T5938] usb 7-1: config 128 has no interface number 0 [ 492.988565][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 493.019937][ T9698] No control pipe specified [ 493.081168][ T5938] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.051127][ T5938] usb 7-1: config 128 interface 127 has no altsetting 0 [ 494.058821][ T5938] usb 7-1: string descriptor 0 read error: -71 [ 494.065083][ T5938] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 494.094646][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.133795][ T5938] usb 7-1: can't set config #128, error -71 [ 494.158441][ T5938] usb 7-1: USB disconnect, device number 36 [ 495.177343][ T9717] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.889933][ T9745] netlink: 'syz.8.1088': attribute type 9 has an invalid length. [ 497.898154][ T9745] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1088'. [ 497.926812][ T9745] ubi0: attaching mtd0 [ 497.937719][ T9745] ubi0: scanning is finished [ 498.557353][ T9745] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 499.167074][ T5892] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 499.357187][ T5892] usb 8-1: Using ep0 maxpacket: 32 [ 499.364822][ T5892] usb 8-1: unable to get BOS descriptor or descriptor too short [ 499.411598][ T5892] usb 8-1: config 128 has an invalid interface number: 127 but max is 3 [ 499.459397][ T5892] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 499.523801][ T5892] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 499.626490][ T5892] usb 8-1: config 128 has no interface number 0 [ 499.632907][ T5892] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 499.657116][ T5892] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.680104][ T5892] usb 8-1: config 128 interface 127 has no altsetting 0 [ 500.738756][ T5892] usb 8-1: string descriptor 0 read error: -71 [ 500.747453][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 500.756647][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.846024][ T5892] usb 8-1: can't set config #128, error -71 [ 500.854682][ T5892] usb 8-1: USB disconnect, device number 14 [ 501.663222][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.670030][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.848108][ T5981] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 508.877161][ T25] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 509.337077][ T5981] usb 8-1: Using ep0 maxpacket: 32 [ 509.391567][ T5981] usb 8-1: device descriptor read/all, error -71 [ 509.476453][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 509.511383][ T9851] nvme_fabrics: missing parameter 'transport=%s' [ 509.527122][ T9851] nvme_fabrics: missing parameter 'nqn=%s' [ 509.562349][ T25] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 509.572705][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.608950][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.618204][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.626301][ T25] usb 4-1: Product: syz [ 509.656118][ T25] usb 4-1: Manufacturer: syz [ 509.813908][ T25] usb 4-1: SerialNumber: syz [ 511.659813][ T25] usb 4-1: 0:2 : does not exist [ 514.143220][ T25] usb 4-1: USB disconnect, device number 24 [ 516.237172][ T5938] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 517.626512][ T5938] usb 9-1: Using ep0 maxpacket: 32 [ 517.634106][ T5938] usb 9-1: unable to get BOS descriptor or descriptor too short [ 517.651581][ T5938] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 517.660756][ T5938] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 517.721116][ T5938] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 517.746993][ T5938] usb 9-1: config 128 has no interface number 0 [ 517.753525][ T5938] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 517.806982][ T5938] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.824437][ T5938] usb 9-1: config 128 interface 127 has no altsetting 0 [ 517.847261][ T5938] usb 9-1: language id specifier not provided by device, defaulting to English [ 517.909128][ T5938] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 517.929787][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.947326][ T5938] usb 9-1: Product: syz [ 517.972042][ T5938] usb 9-1: Manufacturer: syz [ 517.976687][ T5938] usb 9-1: SerialNumber: syz [ 518.480075][ T5938] usb 9-1: USB disconnect, device number 13 [ 519.420072][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 521.227105][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 521.249701][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 521.262008][ T25] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 521.279148][ T25] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 521.617028][ T25] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 521.626127][ T25] usb 4-1: config 128 has no interface number 0 [ 521.637132][ T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 521.648443][ T25] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 521.658592][ T25] usb 4-1: config 128 interface 127 has no altsetting 0 [ 521.671175][ T25] usb 4-1: string descriptor 0 read error: -71 [ 521.678740][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 521.824507][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.577297][ T25] usb 4-1: can't set config #128, error -71 [ 522.626671][ T25] usb 4-1: USB disconnect, device number 25 [ 522.726633][ T9964] nvme_fabrics: missing parameter 'transport=%s' [ 522.733210][ T9964] nvme_fabrics: missing parameter 'nqn=%s' [ 523.927059][ T5889] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 524.177019][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 524.189504][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 524.286527][ T5889] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 524.302191][ T5889] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 525.001348][ T9991] vivid-000: kernel_thread() failed [ 525.169693][ T5889] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 525.178869][ T5889] usb 6-1: config 128 has no interface number 0 [ 525.185605][ T5889] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 525.197056][ T5889] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.207493][ T5889] usb 6-1: config 128 interface 127 has no altsetting 0 [ 526.360570][ T5889] usb 6-1: language id specifier not provided by device, defaulting to English [ 526.605684][ T5889] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 527.151475][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.169130][ T5889] usb 6-1: can't set config #128, error -71 [ 527.176398][ T5889] usb 6-1: USB disconnect, device number 16 [ 532.766430][T10053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.901130][T10090] vivid-003: kernel_thread() failed [ 536.159373][T10103] ubi0: attaching mtd0 [ 536.164584][T10103] ubi0: scanning is finished [ 536.432813][T10103] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 541.081371][T10154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.085117][ T5892] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 541.959046][ T5892] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 541.968443][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.980302][ T5892] usb 4-1: config 0 descriptor?? [ 541.989176][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 542.017245][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 542.066299][ T118] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 542.167028][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 542.187342][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 542.192424][ T5892] gp8psk: usb in 128 operation failed. [ 542.206075][ T25] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 542.217021][ T118] usb 7-1: Using ep0 maxpacket: 32 [ 542.225212][ T25] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 542.251338][ T118] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 542.257333][ T25] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 542.267042][ T118] usb 7-1: config 0 has no interface number 0 [ 542.306750][ T25] usb 6-1: config 128 has no interface number 0 [ 542.329850][ T25] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 542.373695][ T25] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.412268][ T25] usb 6-1: config 128 interface 127 has no altsetting 0 [ 542.437106][ T118] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 542.446193][ T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.451821][ T25] usb 6-1: language id specifier not provided by device, defaulting to English [ 542.454547][ T5892] gp8psk: usb in 146 operation failed. [ 542.469694][ T118] usb 7-1: Product: syz [ 542.473877][ T118] usb 7-1: Manufacturer: syz [ 542.479183][ T5892] gp8psk: failed to get FW version [ 542.484443][ T118] usb 7-1: SerialNumber: syz [ 542.508357][ T118] usb 7-1: config 0 descriptor?? [ 542.513547][ T5892] gp8psk: usb in 149 operation failed. [ 542.515235][ T25] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 542.519323][ T5892] gp8psk: failed to get FPGA version [ 542.544930][ T118] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 542.552593][ T118] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 542.581772][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.622097][ T25] usb 6-1: Product: syz [ 542.630753][ T25] usb 6-1: Manufacturer: syz [ 542.640870][ T25] usb 6-1: SerialNumber: syz [ 542.757086][ T118] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 542.765245][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 542.778494][ T118] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 542.787871][ T5892] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 542.796843][ T5892] usb 4-1: media controller created [ 542.802496][ T118] usb 7-1: USB disconnect, device number 37 [ 542.872347][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.915485][ T5892] gp8psk_fe: Frontend attached [ 542.925795][ T5892] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 542.948504][ T5892] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 543.081076][ T5892] gp8psk: usb in 138 operation failed. [ 543.086592][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 543.127084][ T5892] gp8psk: found Genpix USB device pID = 203 (hex) [ 543.142922][ T5892] usb 4-1: USB disconnect, device number 26 [ 543.594139][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 544.366536][T10179] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 544.373240][T10179] PKCS7: Only support pkcs7_signedData type [ 544.651557][T10186] netlink: 'syz.3.1215': attribute type 1 has an invalid length. [ 546.747441][T10200] autofs: Bad value for 'fd' [ 547.015611][ T25] usb 6-1: USB disconnect, device number 17 [ 547.026875][T10201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.970202][T10248] binder: 10243:10248 ioctl 4018620d 0 returned -22 [ 557.994367][T10310] netlink: 'syz.6.1250': attribute type 9 has an invalid length. [ 558.002307][T10310] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1250'. [ 561.168361][T10327] ubi0: attaching mtd0 [ 561.173051][T10327] ubi0: scanning is finished [ 561.604097][T10327] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 561.674806][T10327] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 561.735518][T10327] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 561.837039][T10327] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 561.844572][T10327] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 561.867191][T10327] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 561.875224][T10327] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1286338019 [ 562.297015][T10327] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 562.367412][T10333] ubi0: background thread "ubi_bgt0d" started, PID 10333 [ 563.102036][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.108481][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.422900][ T29] audit: type=1800 audit(1732909300.550:18): pid=10397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1271" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 568.537144][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 569.007161][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 569.029349][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 569.058929][ T5895] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 569.379735][ T5895] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 569.390156][ T5895] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 569.401732][ T5895] usb 6-1: config 128 has no interface number 0 [ 569.408498][ T5895] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 569.420559][ T5895] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.431315][ T5895] usb 6-1: config 128 interface 127 has no altsetting 0 [ 569.609479][ T5895] usb 6-1: language id specifier not provided by device, defaulting to English [ 569.869767][ T5895] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 569.879211][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.887475][ T5895] usb 6-1: Product: syz [ 569.892486][ T5895] usb 6-1: Manufacturer: syz [ 569.934629][ T5895] usb 6-1: SerialNumber: syz [ 572.450005][ T5895] usb 6-1: USB disconnect, device number 18 [ 572.466270][ T29] audit: type=1326 audit(1732909304.610:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10429 comm="syz.5.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efecd780849 code=0x0 [ 574.217065][ T5895] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 574.388661][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.400030][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.439756][ T5895] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 574.499408][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.533268][ T5895] usb 6-1: config 0 descriptor?? [ 574.990510][ T5895] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 574.997881][ T5895] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 575.008532][ T5895] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 575.054433][ T5895] cm6533_jd 0003:0D8C:0022.0007: No inputs registered, leaving [ 575.466375][ T29] audit: type=1800 audit(1732909307.610:20): pid=10457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1290" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 575.585166][ T5895] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 576.748598][ T5889] usb 6-1: USB disconnect, device number 19 [ 577.797059][ T5895] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 577.915297][ T29] audit: type=1326 audit(1732909310.060:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 577.957261][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 577.970487][ T5895] usb 4-1: unable to get BOS descriptor or descriptor too short [ 577.993238][ T5895] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 578.005232][ T29] audit: type=1326 audit(1732909310.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.032396][ T5895] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 578.047804][ T5895] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 578.062112][ T29] audit: type=1326 audit(1732909310.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.090885][ T5895] usb 4-1: config 128 has no interface number 0 [ 578.112833][ T5895] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 578.116202][ T29] audit: type=1326 audit(1732909310.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.156100][ T5895] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.176859][ T29] audit: type=1326 audit(1732909310.080:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.197070][ T5895] usb 4-1: config 128 interface 127 has no altsetting 0 [ 578.233832][ T5895] usb 4-1: language id specifier not provided by device, defaulting to English [ 578.236026][ T29] audit: type=1326 audit(1732909310.080:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.265637][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 578.296960][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.302756][ T29] audit: type=1326 audit(1732909310.080:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.331094][ T5895] usb 4-1: Product: syz [ 578.348128][ T5895] usb 4-1: Manufacturer: syz [ 578.357042][ T29] audit: type=1326 audit(1732909310.080:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 578.377413][ T5895] usb 4-1: SerialNumber: syz [ 578.435327][ T29] audit: type=1326 audit(1732909310.080:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10490 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa0f80849 code=0x7ffc0000 [ 580.418586][ T25] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 580.503115][ T5895] usb 4-1: USB disconnect, device number 27 [ 581.453830][ T25] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 581.472850][ T25] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 581.513944][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 581.579668][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 581.633267][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 581.682391][ T25] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 581.708101][ T25] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 581.754603][ T25] usb 9-1: Product: syz [ 581.777859][ T25] usb 9-1: Manufacturer: syz [ 583.104006][ T25] usb 9-1: can't set config #1, error -71 [ 583.115387][ T25] usb 9-1: USB disconnect, device number 14 [ 585.517060][ T25] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 586.057801][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 586.065058][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 586.075845][ T25] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 586.084297][ T25] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 586.105640][ T25] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 586.152425][ T25] usb 9-1: config 128 has no interface number 0 [ 586.190476][ T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 586.258947][ T25] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.301627][ T25] usb 9-1: config 128 interface 127 has no altsetting 0 [ 586.355838][ T25] usb 9-1: language id specifier not provided by device, defaulting to English [ 586.418091][ T25] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 586.757325][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 586.757368][ T29] audit: type=1326 audit(1732909318.880:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10574 comm="syz.5.1327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efecd780849 code=0x0 [ 587.264348][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.272486][ T25] usb 9-1: Product: syz [ 587.276721][ T25] usb 9-1: Manufacturer: syz [ 587.281442][ T25] usb 9-1: SerialNumber: syz [ 587.510104][ T25] usb 9-1: can't set config #128, error -71 [ 587.521778][T10581] random: crng reseeded on system resumption [ 587.773660][ T25] usb 9-1: USB disconnect, device number 15 [ 590.092302][T10608] vivid-001: kernel_thread() failed [ 592.550548][T10637] netlink: 'syz.3.1342': attribute type 9 has an invalid length. [ 592.558475][T10637] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1342'. [ 592.570415][T10637] ubi: mtd0 is already attached to ubi0 [ 592.576566][T10637] ubi0: detaching mtd0 [ 592.609429][T10637] ubi0: mtd0 is detached [ 592.717189][ T5889] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 593.007635][ T5889] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 593.016725][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.049844][ T5889] usb 7-1: config 0 descriptor?? [ 594.595156][ T5889] ------------[ cut here ]------------ [ 594.600851][ T5889] WARNING: CPU: 1 PID: 5889 at drivers/net/wireless/ath/ath6kl/bmi.c:90 ath6kl_bmi_get_target_info+0x44a/0x590 [ 594.612861][ T5889] Modules linked in: [ 594.616783][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 594.627307][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 594.637489][ T5889] Workqueue: usb_hub_wq hub_event [ 594.642558][ T5889] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590 [ 594.649177][ T5889] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 a0 e9 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 de c1 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 de c1 fa 31 db e9 e5 [ 594.669931][ T5889] RSP: 0018:ffffc9000416eb60 EFLAGS: 00010287 [ 594.676047][ T5889] RAX: ffffffff86d40299 RBX: 0000000000000000 RCX: 0000000000100000 [ 594.684310][ T5889] RDX: ffffc90019b6f000 RSI: 00000000000135ff RDI: 0000000000013600 [ 594.693371][ T5889] RBP: ffffc9000416ec30 R08: ffffffff86d401f0 R09: 1ffffffff285dd20 [ 594.702461][ T5889] R10: dffffc0000000000 R11: fffffbfff285dd21 R12: ffffc9000416ece4 [ 594.710725][ T5889] R13: ffff88805ad90e40 R14: dffffc0000000000 R15: 1ffff9200082dd74 [ 594.718761][ T5889] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 594.727803][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.734429][ T5889] CR2: 00007efecd90def8 CR3: 0000000034d34000 CR4: 00000000003526f0 [ 594.742516][ T5889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.750625][ T5889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 594.758746][ T5889] Call Trace: [ 594.762052][ T5889] [ 594.765015][ T5889] ? __warn+0x165/0x4d0 [ 594.769260][ T5889] ? ath6kl_bmi_get_target_info+0x44a/0x590 [ 594.775195][ T5889] ? report_bug+0x2b3/0x500 [ 594.779810][ T5889] ? ath6kl_bmi_get_target_info+0x44a/0x590 [ 594.785747][ T5889] ? handle_bug+0x60/0x90 [ 594.790190][ T5889] ? exc_invalid_op+0x1a/0x50 [ 594.795533][ T5889] ? asm_exc_invalid_op+0x1a/0x20 [ 594.801272][ T5889] ? ath6kl_bmi_get_target_info+0x3a0/0x590 [ 594.807275][ T5889] ? ath6kl_bmi_get_target_info+0x449/0x590 [ 594.813209][ T5889] ? ath6kl_bmi_get_target_info+0x44a/0x590 [ 594.819167][ T5889] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10 [ 594.825443][ T5889] ? trace_kmalloc+0x1f/0xd0 [ 594.830145][ T5889] ? ath6kl_bmi_init+0x6d/0xf0 [ 594.834946][ T5889] ath6kl_core_init+0x1eb/0x1140 [ 594.839946][ T5889] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 594.845787][ T5889] ? __kasan_kmalloc+0x98/0xb0 [ 594.850675][ T5889] ? __pfx_ath6kl_core_init+0x10/0x10 [ 594.856085][ T5889] ? ath6kl_core_create+0x7d8/0x950 [ 594.861628][ T5889] ath6kl_usb_probe+0x129b/0x1390 [ 594.866694][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 594.872709][ T5889] ? usb_disable_lpm+0x77/0x380 [ 594.877651][ T5889] usb_probe_interface+0x645/0xbb0 [ 594.882803][ T5889] ? __pfx_usb_probe_interface+0x10/0x10 [ 594.888541][ T5889] really_probe+0x2b8/0xad0 [ 594.893087][ T5889] __driver_probe_device+0x1a2/0x390 [ 594.898991][ T5889] driver_probe_device+0x50/0x430 [ 594.904051][ T5889] __device_attach_driver+0x2d6/0x530 [ 594.910129][ T5889] bus_for_each_drv+0x24e/0x2e0 [ 594.915026][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 594.921022][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 594.926452][ T5889] __device_attach+0x333/0x520 [ 594.931309][ T5889] ? __pfx_lock_release+0x10/0x10 [ 594.936365][ T5889] ? __pfx___device_attach+0x10/0x10 [ 594.941760][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 594.947053][ T5889] bus_probe_device+0x189/0x260 [ 594.951944][ T5889] device_add+0x856/0xbf0 [ 594.956311][ T5889] usb_set_configuration+0x1976/0x1fb0 [ 594.961864][ T5889] usb_generic_driver_probe+0x88/0x140 [ 594.967418][ T5889] usb_probe_device+0x1b8/0x380 [ 594.972305][ T5889] ? __pfx_usb_probe_device+0x10/0x10 [ 594.977757][ T5889] really_probe+0x2b8/0xad0 [ 594.982302][ T5889] __driver_probe_device+0x1a2/0x390 [ 594.987668][ T5889] driver_probe_device+0x50/0x430 [ 594.992722][ T5889] __device_attach_driver+0x2d6/0x530 [ 594.998795][ T5889] bus_for_each_drv+0x24e/0x2e0 [ 595.003682][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 595.010287][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 595.015717][ T5889] __device_attach+0x333/0x520 [ 595.020601][ T5889] ? __pfx___device_attach+0x10/0x10 [ 595.025927][ T5889] bus_probe_device+0x189/0x260 [ 595.030916][ T5889] device_add+0x856/0xbf0 [ 595.035278][ T5889] usb_new_device+0x104a/0x19a0 [ 595.040233][ T5889] ? __pfx_usb_new_device+0x10/0x10 [ 595.045476][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.050788][ T5889] ? lockdep_hardirqs_on+0x99/0x150 [ 595.056028][ T5889] hub_event+0x2d6d/0x5150 [ 595.060572][ T5889] ? __pfx_hub_event+0x10/0x10 [ 595.065370][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 595.070482][ T5889] ? preempt_schedule+0xe1/0xf0 [ 595.075357][ T5889] ? __schedule+0x1111/0x4be0 [ 595.080151][ T5889] ? preempt_schedule_thunk+0x1a/0x30 [ 595.085550][ T5889] ? process_scheduled_works+0x976/0x1840 [ 595.091425][ T5889] process_scheduled_works+0xa66/0x1840 [ 595.097177][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 595.103815][ T5889] ? assign_work+0x364/0x3d0 [ 595.109062][ T5889] worker_thread+0x870/0xd30 [ 595.113687][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 595.119711][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 595.124769][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 595.129954][ T5889] kthread+0x2f0/0x390 [ 595.134055][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 595.139247][ T5889] ? __pfx_kthread+0x10/0x10 [ 595.143868][ T5889] ret_from_fork+0x4b/0x80 [ 595.148365][ T5889] ? __pfx_kthread+0x10/0x10 [ 595.152987][ T5889] ret_from_fork_asm+0x1a/0x30 [ 595.157881][ T5889] [ 595.160922][ T5889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 595.168220][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 595.178648][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 595.188722][ T5889] Workqueue: usb_hub_wq hub_event [ 595.193781][ T5889] Call Trace: [ 595.197073][ T5889] [ 595.200021][ T5889] dump_stack_lvl+0x241/0x360 [ 595.204726][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.209948][ T5889] ? __pfx__printk+0x10/0x10 [ 595.214564][ T5889] ? _printk+0xd5/0x120 [ 595.218750][ T5889] ? __init_begin+0x41000/0x41000 [ 595.223807][ T5889] ? vscnprintf+0x5d/0x90 [ 595.228164][ T5889] panic+0x349/0x880 [ 595.232092][ T5889] ? __warn+0x174/0x4d0 [ 595.236277][ T5889] ? __pfx_panic+0x10/0x10 [ 595.240736][ T5889] ? ret_from_fork_asm+0x1a/0x30 [ 595.245705][ T5889] __warn+0x344/0x4d0 [ 595.249716][ T5889] ? ath6kl_bmi_get_target_info+0x44a/0x590 [ 595.255631][ T5889] report_bug+0x2b3/0x500 [ 595.259966][ T5889] ? ath6kl_bmi_get_target_info+0x44a/0x590 [ 595.265869][ T5889] handle_bug+0x60/0x90 [ 595.270039][ T5889] exc_invalid_op+0x1a/0x50 [ 595.274539][ T5889] asm_exc_invalid_op+0x1a/0x20 [ 595.279388][ T5889] RIP: 0010:ath6kl_bmi_get_target_info+0x44a/0x590 [ 595.285899][ T5889] Code: 04 30 84 c0 0f 85 3a 01 00 00 48 8b 44 24 08 8b 30 48 c7 c7 a0 e9 a4 8c 89 da e8 a1 1b fe ff e9 04 fe ff ff e8 e7 de c1 fa 90 <0f> 0b 90 bb ea ff ff ff e9 f1 fd ff ff e8 d4 de c1 fa 31 db e9 e5 [ 595.305534][ T5889] RSP: 0018:ffffc9000416eb60 EFLAGS: 00010287 [ 595.311632][ T5889] RAX: ffffffff86d40299 RBX: 0000000000000000 RCX: 0000000000100000 [ 595.319609][ T5889] RDX: ffffc90019b6f000 RSI: 00000000000135ff RDI: 0000000000013600 [ 595.327597][ T5889] RBP: ffffc9000416ec30 R08: ffffffff86d401f0 R09: 1ffffffff285dd20 [ 595.335577][ T5889] R10: dffffc0000000000 R11: fffffbfff285dd21 R12: ffffc9000416ece4 [ 595.343554][ T5889] R13: ffff88805ad90e40 R14: dffffc0000000000 R15: 1ffff9200082dd74 [ 595.351534][ T5889] ? ath6kl_bmi_get_target_info+0x3a0/0x590 [ 595.357431][ T5889] ? ath6kl_bmi_get_target_info+0x449/0x590 [ 595.363336][ T5889] ? __pfx_ath6kl_bmi_get_target_info+0x10/0x10 [ 595.369572][ T5889] ? trace_kmalloc+0x1f/0xd0 [ 595.374158][ T5889] ? ath6kl_bmi_init+0x6d/0xf0 [ 595.378931][ T5889] ath6kl_core_init+0x1eb/0x1140 [ 595.383865][ T5889] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 595.389677][ T5889] ? __kasan_kmalloc+0x98/0xb0 [ 595.394442][ T5889] ? __pfx_ath6kl_core_init+0x10/0x10 [ 595.399809][ T5889] ? ath6kl_core_create+0x7d8/0x950 [ 595.405014][ T5889] ath6kl_usb_probe+0x129b/0x1390 [ 595.410048][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 595.415952][ T5889] ? usb_disable_lpm+0x77/0x380 [ 595.420822][ T5889] usb_probe_interface+0x645/0xbb0 [ 595.425944][ T5889] ? __pfx_usb_probe_interface+0x10/0x10 [ 595.431573][ T5889] really_probe+0x2b8/0xad0 [ 595.436086][ T5889] __driver_probe_device+0x1a2/0x390 [ 595.441370][ T5889] driver_probe_device+0x50/0x430 [ 595.446391][ T5889] __device_attach_driver+0x2d6/0x530 [ 595.451759][ T5889] bus_for_each_drv+0x24e/0x2e0 [ 595.456608][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 595.462495][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 595.467892][ T5889] __device_attach+0x333/0x520 [ 595.472669][ T5889] ? __pfx_lock_release+0x10/0x10 [ 595.477702][ T5889] ? __pfx___device_attach+0x10/0x10 [ 595.482993][ T5889] ? do_raw_spin_unlock+0x13c/0x8b0 [ 595.488203][ T5889] bus_probe_device+0x189/0x260 [ 595.493060][ T5889] device_add+0x856/0xbf0 [ 595.497393][ T5889] usb_set_configuration+0x1976/0x1fb0 [ 595.502870][ T5889] usb_generic_driver_probe+0x88/0x140 [ 595.508358][ T5889] usb_probe_device+0x1b8/0x380 [ 595.513222][ T5889] ? __pfx_usb_probe_device+0x10/0x10 [ 595.518595][ T5889] really_probe+0x2b8/0xad0 [ 595.523105][ T5889] __driver_probe_device+0x1a2/0x390 [ 595.528390][ T5889] driver_probe_device+0x50/0x430 [ 595.533410][ T5889] __device_attach_driver+0x2d6/0x530 [ 595.538778][ T5889] bus_for_each_drv+0x24e/0x2e0 [ 595.543626][ T5889] ? __pfx___device_attach_driver+0x10/0x10 [ 595.549515][ T5889] ? __pfx_bus_for_each_drv+0x10/0x10 [ 595.554895][ T5889] __device_attach+0x333/0x520 [ 595.559656][ T5889] ? __pfx___device_attach+0x10/0x10 [ 595.564943][ T5889] bus_probe_device+0x189/0x260 [ 595.569800][ T5889] device_add+0x856/0xbf0 [ 595.574126][ T5889] usb_new_device+0x104a/0x19a0 [ 595.578991][ T5889] ? __pfx_usb_new_device+0x10/0x10 [ 595.584191][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.589390][ T5889] ? lockdep_hardirqs_on+0x99/0x150 [ 595.594589][ T5889] hub_event+0x2d6d/0x5150 [ 595.599039][ T5889] ? __pfx_hub_event+0x10/0x10 [ 595.603797][ T5889] ? __pfx_lock_acquire+0x10/0x10 [ 595.608812][ T5889] ? preempt_schedule+0xe1/0xf0 [ 595.613656][ T5889] ? __schedule+0x1111/0x4be0 [ 595.618343][ T5889] ? preempt_schedule_thunk+0x1a/0x30 [ 595.623717][ T5889] ? process_scheduled_works+0x976/0x1840 [ 595.629437][ T5889] process_scheduled_works+0xa66/0x1840 [ 595.634999][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 595.640989][ T5889] ? assign_work+0x364/0x3d0 [ 595.645583][ T5889] worker_thread+0x870/0xd30 [ 595.650173][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 595.656068][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 595.661090][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 595.666194][ T5889] kthread+0x2f0/0x390 [ 595.670256][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 595.675362][ T5889] ? __pfx_kthread+0x10/0x10 [ 595.679948][ T5889] ret_from_fork+0x4b/0x80 [ 595.684445][ T5889] ? __pfx_kthread+0x10/0x10 [ 595.689043][ T5889] ret_from_fork_asm+0x1a/0x30 [ 595.693817][ T5889] [ 595.697091][ T5889] Kernel Offset: disabled [ 595.701455][ T5889] Rebooting in 86400 seconds..