last executing test programs: 13.080036815s ago: executing program 0 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000006b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 12.680442984s ago: executing program 2 (id=1159): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8182, 0x0) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0xc00) read(r0, &(0x7f0000000080)=""/116, 0xfffffeb2) read(r0, &(0x7f0000000280)=""/96, 0x60) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.34823461s ago: executing program 0 (id=1163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) removexattr(0x0, 0x0) close(r0) r2 = socket$inet6(0xa, 0x3, 0x29) syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x3, 0xbfdffffc}, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x8000014) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$alg(r7, &(0x7f0000000280)=""/146, 0x92) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@access_uid={'access', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x1}}]}}) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 10.77979459s ago: executing program 2 (id=1165): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x4000814, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) fchmod(r0, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca1, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r4 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0x1a, r4, 0xba, 0x0) sched_setscheduler(r4, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000500)=ANY=[]) ioctl$SCSI_IOCTL_START_UNIT(r6, 0x5) syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') 10.583147057s ago: executing program 3 (id=1167): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x880) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ipvlan0\x00', 0x200}) socket(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb8) syz_emit_ethernet(0x11, &(0x7f0000000e00)=ANY=[@ANYBLOB="e000"/17], 0x0) getgid() dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='net/sco\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 10.308566834s ago: executing program 4 (id=1168): alarm(0x1) alarm(0xb95) openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x1058c2) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) socket$packet(0x11, 0xa, 0x300) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 9.608217681s ago: executing program 3 (id=1169): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000202505a1a440000e02030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000010000000006241a00002809058103ff030000000904010000020d00000904010102020d0000090582022000000101090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_clone3(&(0x7f0000000280)={0x200000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), {0xf}, &(0x7f0000000180)=""/117, 0x75, &(0x7f0000000200)=""/29, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58) syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/ipc\x00') (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x209, 0xc, 0xffe, 0x1, 0x10, 0x10, 0x10, 0x100, 0x3, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 9.536272362s ago: executing program 0 (id=1170): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x70bd2a, 0x25dfdbfb, {}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x3, 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x17, 0xce, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xffff}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x1, &(0x7f0000001fc0)={[0x8]}, &(0x7f0000002000), 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x1200, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef00000001006d6373656300000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'das16m1\x00', [0x2f00, 0x5, 0xd09a, 0x3b, 0x3, 0xfffffffe, 0x20000002, 0x6, 0xffe, 0x9, 0x3, 0x1, 0x104, 0x1, 0xfffe, 0x55, 0x5, 0xa, 0x8, 0x30000, 0x10000, 0x9, 0x1800, 0xe2df, 0x10002, 0x80000001, 0x7, 0xc, 0x4, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0x4, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x0, 0x4}) 8.166885999s ago: executing program 1 (id=1171): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075a, 0x5d21841b}}]}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}}, 0x2c000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075a, 0x5d21841b}}]}, 0xc4}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x20008000) (async) 8.165371449s ago: executing program 4 (id=1172): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001ec0)=""/4050, 0xfd2}, {&(0x7f0000000ec0)=""/4030, 0xfbe}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000100)=""/213, 0xd5}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) (async) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0x1000fffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0x7, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0x1000fffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0x7, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x918) syz_io_uring_setup(0x1ffc, &(0x7f00000000c0)={0x0, 0xdffd, 0x2, 0x0, 0x284}, &(0x7f0000000240), &(0x7f0000000080)) (async) r5 = syz_io_uring_setup(0x1ffc, &(0x7f00000000c0)={0x0, 0xdffd, 0x2, 0x0, 0x284}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000002ec0)={0x13a0, 0x13, 0x20, 0x70bd28, 0x25dfdbfe, {0x1, 0x4, 0x80, 0xd, {0x4e21, 0x4e20, [0x8001, 0x0, 0x0, 0x40], [0x1, 0x1, 0x5, 0xc35], 0x0, [0x1, 0x8]}, 0x4, 0x3d47}, [@INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "22e092df420d023e03bcd9807f0dca035c2cb37fde2583293c8b0895d4d643f6ad05403354c2bbe80d77c1ed4d8d55330e5420e8b8246b01dfa86047485149faa8cebf279a5dbf3ed8e3c68fe4f95a07c7bf5d1ce433272aacad3e4d2413ba258c4023cc90f7ea4917888dfb69e82d2b782cc62592fa4b844eefcf1ad510416465b9914489c38d9e5ca096144129898df13638ddff5bc03eb232528f8eb4f492472cf59bf37cb39550a69d2e7a8b2b5276a0aa8f7bf93338bad937764aa12e717a30188e1d295d0e46aa9d61e1"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "cbb7b30050cffafb85a3093cee95959b3c28e455a7b6fe565ceb8026292fda02c423ae9a0687670f78da45154a370603677cb48977f466f64ab2ecb4d2c3c438d92514cd099c119b90961ff415ad08e0033a117465a205504f23e197f66a820cac767fc6a0abda1e5d7634544f5a91850ed4ffb3d7f1a931e82c2c19d303"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "c88c12e458359a6f5fdf4bd49a3b062f9833afb08477ff25497f45a3d6978076f5099238d31f2485c984618e3f3c2cb48924ff6b273456507b99ed5a607ee3db73c614eea57a007a9ed5eeacb68a31e5b81db3bad99437628442ea3b35e8a3a4af58a16e7effb35dcf7cc69368451a61e49483418c871b89676546ba02d41da9fcf43f3a05701c"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "c4876675ff6952dd8e73a9acdba18d8be25261b80db2a744d3c07856593c44bfd4006c40a77995b8f9d3a06f"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "17b120d1ad7093cc875320420e7c03fe0b606ba00d3109fb1b378020431c836ccae373b7c9076c635fc8252f167e3a924a61ca63226c479c01bf7fb76558a06077e0f060289e31ee73940f2663bb134952400798d2425be4b327c48d7b48c2330c3d8636491ecf2ad9170c15e4eeae17a45ec6d78f02f7f9d459b9cd9fbeebe1f58c0703544c65d278ad7fa2ab2240291b4a64036846e6db4882cabda8914f2654422badd1033147a78ef1043cc9c8e74275774b217b5fc2"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "cf25755b121b5f86afb8f680593a140c1a0d84098b0215bbfdbf2d49ab6bba7c2690"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "71b19fd71b074fc020e74f20e65acec990353384434f5160d019ef4572d3ac642cda83f3dd590042120ce2e07ed327fa68be86c204e0a8604fde6cf1d8b1c01a3403e719d72d2a9cd871656bcf1e8a5211b3"}]}, 0x13a0}}, 0x20000004) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000ef550000000200000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20, 0x8000000}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HIDIOCGREPORT(r9, 0x400c4807, 0x0) (async) ioctl$HIDIOCGREPORT(r9, 0x400c4807, 0x0) r12 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x184, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x724}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x7b88}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x35b6e10f}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x11) syz_usb_control_io$hid(r12, 0x0, 0x0) (async) syz_usb_control_io$hid(r12, 0x0, 0x0) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x40000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r13, 0xc0184800, &(0x7f00000009c0)={0x7, r9, 0x80000}) 7.583948691s ago: executing program 4 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000640)=0x40000000) r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0x3, 0x40800) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000480)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c34, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x30314752}}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000580)={0xa, 0x0, [{0x942}, {0xa21, 0x0, 0x1}, {0x3a3, 0x0, 0x88}, {0x571, 0x0, 0xfc}, {0xadb, 0x0, 0x4}, {0x20, 0x0, 0x100000001}, {0x9e5, 0x0, 0x3}, {0xfb, 0x0, 0x7ff}, {0x484, 0x0, 0xd2e}, {0xb61, 0x0, 0x3}]}) preadv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/219, 0xdb}], 0x2, 0x9, 0x0) pidfd_send_signal(r7, 0x15, &(0x7f00000003c0)={0x41, 0x4, 0x10001}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x701}, 0x14}}, 0x0) 7.452310654s ago: executing program 1 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x644}, 0x1, 0x0, 0x0, 0x48100}, 0x8045) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001200)=ANY=[@ANYBLOB="68030000140001"], 0x368}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x5, 0xa, 0x5, 0xfffffffffffffffc, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)='syzkaller\x00', 0xf, 0x6b, &(0x7f0000000440)=""/107, 0x41100, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xf, 0x1, 0x81}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, r0, r0, r0], &(0x7f0000000580)=[{0x1, 0x4, 0x10, 0xc}, {0x4, 0x1, 0x6, 0xa}, {0x2, 0x4, 0x6, 0xb}], 0x10, 0x468d4a06}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000000000040000b1000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@ipv4_getnetconf={0x54, 0x52, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_FORWARDING={0x8, 0x2, 0xffff8001}, @NETCONFA_FORWARDING={0x8, 0x2, 0xf}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_RP_FILTER={0x8}]}, 0x54}}, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r3, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r6, &(0x7f0000002380), 0x400000000000004, 0x34000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x200000, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}]}) getdents(0xffffffffffffffff, &(0x7f0000000700)=""/194, 0xc2) socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x4, 0x6, 0x2c7, 0xd, 0xb, 0x7, 0xbb4, 0x6, 0x5, 0x7, 0x1, 0x7, 0x0, 0x1ff, 0x3]}, &(0x7f0000000000)=0x100) 7.144086297s ago: executing program 0 (id=1175): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x8001, 0x73, 0x11, 0x61}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc8, &(0x7f00000000c0)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x1, 0x6}) 6.453944458s ago: executing program 3 (id=1176): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x10001, 0x6, 0x0, 0xb, 0x10001, 0x80000000000002, 0x6, 0x10007ffffe]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x4, 0x6, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0xfffd, 0x0, 0x0, 0x80, "f6a6946c9832508c"}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a", 0x26}], 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c3691"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000280)={0x3, 0x200, 0x8691, 0x0, 0x2, 0x3659}) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000240)={0x1, 0x5}, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.359248134s ago: executing program 4 (id=1177): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4000800) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x80000004, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) tkill(r5, 0xb) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)) chdir(0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) 5.749353222s ago: executing program 1 (id=1178): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x1000000, &(0x7f0000000300)='trans=rdma,') syz_open_dev$sndpcmc(&(0x7f0000000080), 0x6, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000eb2840282753015455257bd0245042816836e3830a2753e74a288020979f7c797ae8fb68552cea2181fb6c2d109744fa186776f46c27", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r2, 0x0, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}]}}]}, 0x44}}, 0x24004000) 5.664416103s ago: executing program 0 (id=1179): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) (async, rerun: 32) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='msdos\x00', 0x5, 0x0) (async, rerun: 32) landlock_restrict_self(r0, 0x0) (async) syz_emit_ethernet(0xd8, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0xe, 0x4, 0x2, 0x2b, 0xca, 0x64, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x23, 0xd, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @loopback, @loopback, @loopback, @rand_addr=0x64010102, @local]}]}}, {0x1e, 0x5, 0x0, @remote, "1c1172422f4fd83fe1e70546ae86ecd9fac2d329437a7c14da9924c4665b06e2098a0f8212142598ed68cec48640b5140036017c172c5a908469ffb3ce4daf439d15eece5d9c74ee238920542fd34a34f647e32292429c7a78d252ed2fc16f88c17634bdd4d4a2367b4fbc1b268e5af689a233b1a2d2fda2edca67c259ca6be033729e1beadf9041f9ee"}}}}}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'}) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x92) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) 3.189317111s ago: executing program 2 (id=1180): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x880) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'ipvlan0\x00', 0x200}) socket(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb8) syz_emit_ethernet(0x11, &(0x7f0000000e00)=ANY=[@ANYBLOB="e000"/17], 0x0) getgid() dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='net/sco\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.15935683s ago: executing program 3 (id=1181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x7f}}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)={@cgroup=r1, r1, 0x2f, 0x2000, 0x4}, 0x20) 3.053011333s ago: executing program 1 (id=1182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000140)={0x1, {0x80000000, 0x2, 0x20009, 0x8000006}, {0x10, 0x3, 0x7, 0x800}, {0x8001, 0x1}}) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r1, 0x15, 0x70bd2c, 0x25dedbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x20000090) 2.871573798s ago: executing program 3 (id=1183): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r2, 0x0, &(0x7f00000000c0)=0xfec1) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002480)=""/4081, 0xff1}], 0x1) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000180)) read$alg(r3, &(0x7f0000000440)=""/243, 0xf3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{0xffffffff, 0x0, 0x4, 0xfffefffa, 'syz0\x00', 0x9}, 0x2, 0x400, 0x5, r0, 0x0, 0x1ff, 'syz0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000000)=0xaa4) 2.859080811s ago: executing program 0 (id=1184): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) unshare(0x6a040000) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x7e8166965e22236a) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x246, 0x101000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000c00)={0x0, 0x2, 0xba88, 0x66, "0c35a52dd2ec7f16c3ca05be57793b344843ffa92f9c1d42dcae8709b1a796df"}) (async) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) close(r0) 2.227366836s ago: executing program 4 (id=1185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0xffffffff, 0x1000, 0x4}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x4c40}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xd8d, 0x9}}]}]}]}, 0x54}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x10001, 0x7, 0x4, 0x5}, 0x48) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 2.22281074s ago: executing program 1 (id=1186): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b, 0x0, @val=@netfilter={0x7, 0x1, 0x0, 0x1}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000004, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x15) write(r1, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x440}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xdb8d, 0x2000}, &(0x7f00000000c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000180), 0x0) io_uring_enter(0xffffffffffffffff, 0x5f70, 0xfffffffe, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x220300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x7, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r3) 2.193341378s ago: executing program 2 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000640)=0x40000000) r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0x3, 0x40800) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000480)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c34, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x30314752}}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000580)={0xa, 0x0, [{0x942}, {0xa21, 0x0, 0x1}, {0x3a3, 0x0, 0x88}, {0x571, 0x0, 0xfc}, {0xadb, 0x0, 0x4}, {0x20, 0x0, 0x100000001}, {0x9e5, 0x0, 0x3}, {0xfb, 0x0, 0x7ff}, {0x484, 0x0, 0xd2e}, {0xb61, 0x0, 0x3}]}) preadv(r7, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/219, 0xdb}], 0x2, 0x9, 0x0) pidfd_send_signal(r7, 0x15, &(0x7f00000003c0)={0x41, 0x4, 0x10001}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000380)={0x0, 0x2b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r8, 0x701}, 0x14}}, 0x0) 1.10555405s ago: executing program 2 (id=1188): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES16], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r6, 0x407, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, 0xffffffffffffffff, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 36.295642ms ago: executing program 1 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001602010a00"/20], 0x78}}, 0x0) recvmmsg$unix(r2, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='io_uring_cqring_wait\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) 35.311616ms ago: executing program 3 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='svcrdma_sq_post_err\x00', r0}, 0x18) gettid() r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 30.996607ms ago: executing program 2 (id=1191): setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e22, 0x10000, @remote, 0xffff}, 0x1b, 0x0, 0x0, &(0x7f0000000540)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffff3}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x18, 0x29, 0x37, {0x84}}}], 0x48}, 0x20000000) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000000)={'\x00', 0xff7, 0x4a7, 0x1, 0x0, 0x2, 0x100000, 0xdddd1000, '\x00', 0xa0a}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x3}, {0x3}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@netrom, @remote, @rose, @netrom, @remote, @netrom, @netrom, @netrom]}, &(0x7f0000000240)=0x48) sendto$netrom(r3, &(0x7f0000000280)="d5b6adf69c8f1663ad3dcbfcda49d0a8a4c24d47202400e58392d65bd2373b523cafd63b96f9758adc3d2c7f105cb8847b3d55d9be820583cfe5d5a64288d1889a2e8a9a1b278d6c5a64535e2bac7de9b9896c7a5e9e65108418588105b190ccebc1a1d4c951f5299ad3bbece4070a045e0d0ef7072cc7684fdf55a1beb444176836440331687eda3c0f480b85f54ff4ce917e5e2ee2e12411d1c1a41a4408378d886f711c025e2aa1108f4a901d60cbcf7ac404597d88c5fc8aab", 0xbb, 0x44000, &(0x7f0000000340)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) 0s ago: executing program 4 (id=1192): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) signalfd(r0, &(0x7f00000000c0)={[0xe]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @ptr=0x100000020001100}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x14b401, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3, 0x80008000, 0x9, 0x2, 0x2, 0x0, 0x0, 0xf, 0xfff, 0x1, 0x7, 0x1, 0x9, 0x4, 0x8000, 0xffff, 0xffffffa8, 0x9, 0xa40000, 0x3, 0x403ff, 0xfffc, 0x1008, 0xe2df, 0x8003, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100000000000000000b0400000001000006040000ffff0000080000000000002e5f000000000000000000000000001c6324ce8c0fa900b5e9acfc344d6c579862adc811d4952e9ea5bcb14ff949be0fa6ca2be7464852e69b405ef2e857ccdaa426b7f9bc2679b4"], 0x0, 0x31, 0x0, 0x1}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000400)=ANY=[@ANYBLOB="80d314f92d17681fa39dda9c5f13cf465886b87a73eea8067335d3e1c25be216fd7e545cb13364da79d89389a56673ed700a", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffe5c) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, r6, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x80006, 0x0, 0x0, 0x10, 0x86d}}, 0x50) umount2(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x38) dup2(0xffffffffffffffff, r7) ioctl(r3, 0x8b2c, &(0x7f0000000040)) open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ff6000/0x2000)=nil) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00') writev(r8, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) kernel console output (not intermixed with test programs): 8.802842][ T6007] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 238.969991][ T7781] loop0: Can't mount, would change RO state [ 239.149227][ T6007] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 239.266805][ T7786] No such timeout policy "syz1" [ 239.313881][ T7751] netlink: 'syz.3.488': attribute type 11 has an invalid length. [ 239.798316][ T6007] ft260 0003:0403:6030.0007: failed to retrieve system status [ 239.806369][ T6007] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -32 [ 239.854456][ T6007] usb 4-1: USB disconnect, device number 21 [ 240.341132][ T6007] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 240.580655][ T6007] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.596368][ T6007] usb 5-1: config 0 has no interface number 0 [ 240.613706][ T6007] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 240.626870][ T6007] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 240.635079][ T6007] usb 5-1: Manufacturer: syz [ 240.645479][ T6007] usb 5-1: config 0 descriptor?? [ 240.661662][ T6007] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.105/input/input12 [ 241.883571][ T5191] bcm5974 5-1:0.105: could not read from device [ 242.071857][ T5191] bcm5974 5-1:0.105: could not read from device [ 242.084098][ T6007] usb 5-1: USB disconnect, device number 31 [ 242.571239][ T5880] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 242.586691][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 243.444268][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 243.466439][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 243.491394][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 243.508752][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.523136][ T5880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 243.566741][ T7842] xt_hashlimit: size too large, truncated to 1048576 [ 243.585454][ T5880] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 243.595024][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.615241][ T5880] usb 3-1: Product: syz [ 243.628256][ T5880] usb 3-1: Manufacturer: syz [ 243.651922][ T5880] usb 3-1: SerialNumber: syz [ 243.698822][ T6007] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 243.718878][ T5951] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 243.730366][ T5880] usb 3-1: config 0 descriptor?? [ 243.774119][ T5880] mcba_usb 3-1:0.0 can0: couldn't setup read URBs [ 243.784258][ T5880] mcba_usb 3-1:0.0 can0: couldn't start device: -90 [ 243.865482][ T6007] usb 2-1: device descriptor read/64, error -71 [ 243.922964][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 243.937718][ T5951] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 45, changing to 9 [ 243.949284][ T5951] usb 4-1: config 1 interface 0 has no altsetting 0 [ 243.970034][ T5951] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 243.979354][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.987379][ T5951] usb 4-1: Product: syz [ 243.992296][ T5951] usb 4-1: Manufacturer: syz [ 244.004324][ T5951] usb 4-1: SerialNumber: syz [ 244.120157][ T6007] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 244.156359][ T7845] warning: `syz.4.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.180530][ T5880] mcba_usb 3-1:0.0: probe with driver mcba_usb failed with error -90 [ 244.203712][ T5880] usb 3-1: USB disconnect, device number 24 [ 244.421012][ T6007] usb 2-1: device descriptor read/64, error -71 [ 244.530448][ T6007] usb usb2-port1: attempt power cycle [ 244.568394][ T5951] usbhid 4-1:1.0: can't add hid device: -71 [ 244.579483][ T5951] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 244.607333][ T5951] usb 4-1: USB disconnect, device number 22 [ 244.939677][ T6007] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 246.026382][ T6007] usb 2-1: device descriptor read/8, error -71 [ 246.054415][ T7864] netlink: 52 bytes leftover after parsing attributes in process `syz.2.520'. [ 246.089222][ T7860] tty tty3: ldisc open failed (-12), clearing slot 2 [ 249.578779][ T5949] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 249.625695][ T10] libceph: connect (1)[c::]:6789 error -101 [ 249.645253][ T7886] ceph: No mds server is up or the cluster is laggy [ 249.654341][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 249.785960][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 249.850946][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.882466][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.923048][ T5949] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.956816][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.087361][ T7897] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 250.095390][ T7897] macvtap1: entered allmulticast mode [ 250.101098][ T7897] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 250.255618][ T5949] usb 4-1: config 0 descriptor?? [ 250.271540][ T5949] hub 4-1:0.0: USB hub found [ 250.314649][ T7897] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 250.324059][ T7897] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 250.441430][ T5949] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 250.469751][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 250.542927][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.619573][ T5949] usb 4-1: USB disconnect, device number 23 [ 252.069149][ T43] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 252.279335][ T43] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 252.339282][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.397858][ T43] usb 5-1: config 0 descriptor?? [ 252.427776][ T43] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 252.598753][ T5880] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 252.618182][ T7914] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 252.709046][ T43] usb 5-1: Detected FT232B [ 252.770788][ T5880] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 252.806943][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.826852][ T5880] usb 3-1: config 0 has no interface number 0 [ 252.851070][ T5880] usb 3-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.885040][ T5880] usb 3-1: config 0 interface 25 has no altsetting 0 [ 252.905686][ T5880] usb 3-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 252.915019][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.938697][ T5880] usb 3-1: Product: syz [ 252.962270][ T5880] usb 3-1: Manufacturer: syz [ 252.978723][ T5880] usb 3-1: SerialNumber: syz [ 253.010282][ T5880] usb 3-1: config 0 descriptor?? [ 253.088901][ T5949] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 253.234981][ T5880] usb 3-1: Found UVC 0.00 device syz (1b3b:2951) [ 253.241644][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 253.271163][ T5880] usb 3-1: No valid video chain found. [ 253.444623][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.462138][ T5880] usb 3-1: USB disconnect, device number 25 [ 253.468330][ T5949] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.505638][ T5949] usb 2-1: config 0 interface 0 has no altsetting 0 [ 253.883349][ T5949] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 253.897440][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.925539][ T5949] usb 2-1: config 0 descriptor?? [ 254.013104][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 254.031537][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 254.079539][ T43] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 254.129732][ T43] usb 5-1: USB disconnect, device number 32 [ 254.186652][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 254.220683][ T43] ftdi_sio 5-1:0.0: device disconnected [ 254.252919][ T5949] usbhid 2-1:0.0: can't add hid device: -71 [ 254.270075][ T5949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.284751][ T5949] usb 2-1: USB disconnect, device number 34 [ 254.447146][ T7952] fuse: blksize only supported for fuseblk [ 254.639529][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.546'. [ 254.697054][ T7965] tun0: tun_chr_ioctl cmd 1074025678 [ 254.703059][ T7965] tun0: group set to 0 [ 254.929357][ T7973] netlink: 'syz.2.549': attribute type 3 has an invalid length. [ 254.969293][ T7973] netlink: 666 bytes leftover after parsing attributes in process `syz.2.549'. [ 255.415110][ T43] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 255.693644][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.183326][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 256.227641][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.284259][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 256.313083][ T43] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 256.338960][ T43] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 256.358917][ T43] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 256.375322][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.386711][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.395607][ T43] usb 3-1: Product: syz [ 256.400192][ T43] usb 3-1: Manufacturer: syz [ 256.405308][ T43] usb 3-1: SerialNumber: syz [ 257.603603][ T7997] netlink: 'syz.0.554': attribute type 6 has an invalid length. [ 257.625237][ T43] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 257.642061][ T43] cdc_ncm 3-1:1.0: bind() failure [ 257.642423][ T7997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.554'. [ 257.664707][ T43] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 257.726137][ T43] cdc_ncm 3-1:1.1: bind() failure [ 257.785293][ T43] usb 3-1: USB disconnect, device number 26 [ 258.009115][ T5880] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 258.180529][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.208741][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.245694][ T5880] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 258.259673][ T5911] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 258.265274][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.290366][ T5880] usb 4-1: config 0 descriptor?? [ 259.192523][ T5911] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.299391][ T5880] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 259.309764][ T5880] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 259.316657][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.322448][ T5880] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 259.376894][ T5911] usb 2-1: config 0 descriptor?? [ 259.393197][ T5911] cp210x 2-1:0.0: cp210x converter detected [ 259.661264][ T30] audit: type=1326 audit(1754242892.942:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8022 comm="syz.2.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c0838eb69 code=0x0 [ 259.744517][ T6007] usb 4-1: USB disconnect, device number 24 [ 259.800951][ T5911] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 259.813605][ T5911] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 259.823116][ T5911] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 259.832994][ T5911] usb 2-1: cp210x converter now attached to ttyUSB0 [ 260.017399][ T5880] usb 2-1: USB disconnect, device number 35 [ 260.028112][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.036961][ T5880] cp210x 2-1:0.0: device disconnected [ 260.158976][ T5911] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 260.329763][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 260.337684][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.359150][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 260.444030][ T5911] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 260.455591][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.482960][ T5911] usb 5-1: Product: syz [ 260.494046][ T5911] usb 5-1: Manufacturer: syz [ 260.506066][ T5911] usb 5-1: SerialNumber: syz [ 260.550370][ T5911] usb 5-1: config 0 descriptor?? [ 261.353875][ T8032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 262.771542][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.564'. [ 263.065280][ T8043] kvm: pic: non byte write [ 263.229431][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 263.239256][ T8067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.254588][ C1] Unknown status report in ack skb [ 263.254796][ T8064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.280838][ T8038] netlink: 84 bytes leftover after parsing attributes in process `syz.2.566'. [ 263.307846][ T30] audit: type=1326 audit(1754242896.592:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0838eb69 code=0x7ffc0000 [ 263.348632][ T30] audit: type=1326 audit(1754242896.592:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.2.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0838eb69 code=0x7ffc0000 [ 263.946264][ T8072] syz.3.574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 263.958090][ T30] audit: type=1107 audit(1754242897.252:76): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 264.210781][ T43] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 264.313550][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 265.213435][ T43] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 265.226061][ T5911] usb 5-1: USB disconnect, device number 33 [ 265.237271][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.254648][ T43] usb 4-1: config 0 has no interface number 0 [ 265.269500][ T43] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 265.300554][ T43] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 265.349114][ T43] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.400358][ T43] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.905749][ T43] usb 4-1: config 0 interface 52 has no altsetting 0 [ 265.925360][ T43] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 265.938629][ T43] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 265.947756][ T43] usb 4-1: Product: syz [ 265.974910][ T43] usb 4-1: SerialNumber: syz [ 266.008698][ T43] usb 4-1: config 0 descriptor?? [ 266.026975][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 266.041031][ C0] Unknown status report in ack skb [ 267.820840][ T30] audit: type=1326 audit(1754242901.102:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8101 comm="syz.4.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ded8eb69 code=0x7fc00000 [ 268.770308][ T5880] usb 4-1: USB disconnect, device number 25 [ 271.518240][ T8136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.152774][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 272.169194][ C0] Unknown status report in ack skb [ 272.249374][ T43] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 272.440388][ T43] usb 4-1: config 13 has an invalid interface number: 33 but max is 3 [ 272.449732][ T43] usb 4-1: config 13 has an invalid interface number: 28 but max is 3 [ 272.457958][ T43] usb 4-1: config 13 has an invalid interface number: 118 but max is 3 [ 273.369613][ T43] usb 4-1: config 13 contains an unexpected descriptor of type 0x2, skipping [ 273.378992][ T43] usb 4-1: config 13 has an invalid interface number: 42 but max is 3 [ 273.485208][ T43] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 273.495572][ T43] usb 4-1: config 13 has no interface number 0 [ 273.502982][ T43] usb 4-1: config 13 has no interface number 1 [ 273.509671][ T43] usb 4-1: config 13 has no interface number 2 [ 273.516042][ T43] usb 4-1: config 13 has no interface number 3 [ 273.566053][ T43] usb 4-1: config 13 interface 33 altsetting 2 endpoint 0x5 has invalid maxpacket 16, setting to 8 [ 273.655525][ T43] usb 4-1: config 13 interface 33 altsetting 2 endpoint 0xC has invalid maxpacket 16, setting to 8 [ 273.745208][ T43] usb 4-1: config 13 interface 33 altsetting 2 endpoint 0x9 has invalid maxpacket 32, setting to 8 [ 273.831155][ T43] usb 4-1: config 13 interface 33 altsetting 2 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 273.856890][ T43] usb 4-1: config 13 interface 33 altsetting 2 has an endpoint descriptor with address 0x12, changing to 0x2 [ 274.404837][ T8154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.738565][ T43] usb 4-1: config 13 interface 33 altsetting 2 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 274.751049][ T43] usb 4-1: config 13 interface 33 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 8 [ 274.771637][ T43] usb 4-1: config 13 interface 28 altsetting 0 endpoint 0x3 has invalid maxpacket 16, setting to 8 [ 274.782937][ T43] usb 4-1: config 13 interface 28 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 274.826652][ T43] usb 4-1: config 13 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 274.870194][ T43] usb 4-1: config 13 interface 28 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 275.044110][ T43] usb 4-1: config 13 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 275.056505][ T43] usb 4-1: config 13 interface 28 altsetting 0 endpoint 0x4 has invalid maxpacket 16, setting to 8 [ 275.069651][ T43] usb 4-1: config 13 interface 28 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 0 [ 275.085157][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0xC, skipping [ 275.096804][ T43] usb 4-1: config 13 interface 118 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 275.127368][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x8, skipping [ 275.166955][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 275.216436][ T43] usb 4-1: config 13 interface 118 altsetting 11 endpoint 0xB has invalid maxpacket 1023, setting to 0 [ 275.298550][ T43] usb 4-1: config 13 interface 118 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 275.369630][ T43] usb 4-1: config 13 interface 118 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 275.766163][ T8180] /dev/nullb0: Can't lookup blockdev [ 275.787547][ T43] usb 4-1: config 13 interface 118 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 275.853704][ T43] usb 4-1: config 13 interface 118 altsetting 11 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 276.101406][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 276.166955][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 276.200492][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x8E, skipping [ 276.236229][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x2, skipping [ 276.270413][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 276.315749][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 276.343312][ T43] usb 4-1: config 13 interface 118 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 276.366813][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 276.374729][ T43] usb 4-1: config 13 interface 42 altsetting 13 has a duplicate endpoint with address 0x7, skipping [ 276.389656][ T43] usb 4-1: config 13 interface 42 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 276.398526][ C0] Unknown status report in ack skb [ 276.409282][ T43] usb 4-1: config 13 interface 33 has no altsetting 0 [ 276.416472][ T43] usb 4-1: config 13 interface 118 has no altsetting 0 [ 276.424510][ T43] usb 4-1: config 13 interface 42 has no altsetting 0 [ 276.433836][ T43] usb 4-1: string descriptor 0 read error: -71 [ 276.466195][ T43] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e7.6d [ 276.488203][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.536983][ T43] usb 4-1: can't set config #13, error -71 [ 276.569085][ T43] usb 4-1: USB disconnect, device number 26 [ 277.079421][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 277.258325][ T8224] netlink: 'syz.4.612': attribute type 10 has an invalid length. [ 277.351304][ T43] usb 4-1: config 0 has no interfaces? [ 277.391993][ T43] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 277.417249][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.454639][ T8224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.476579][ T43] usb 4-1: Product: syz [ 277.519471][ T43] usb 4-1: Manufacturer: syz [ 277.546241][ T43] usb 4-1: SerialNumber: syz [ 277.575025][ T43] usb 4-1: config 0 descriptor?? [ 277.608523][ T8233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.643145][ T8233] netlink: 'syz.2.614': attribute type 4 has an invalid length. [ 277.656446][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.613'. [ 277.830945][ T8210] tipc: Subscription rejected, illegal request [ 277.848040][ T43] usb 4-1: USB disconnect, device number 27 [ 277.901788][ T8242] tipc: Enabling of bearer rejected, failed to enable media [ 277.913584][ T8242] lo speed is unknown, defaulting to 1000 [ 277.920399][ T8242] lo speed is unknown, defaulting to 1000 [ 277.931404][ T8242] lo speed is unknown, defaulting to 1000 [ 277.944722][ T8242] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 277.962647][ T8242] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 277.998604][ T8242] lo speed is unknown, defaulting to 1000 [ 278.007750][ T8242] lo speed is unknown, defaulting to 1000 [ 278.015509][ T8242] lo speed is unknown, defaulting to 1000 [ 278.023678][ T8242] lo speed is unknown, defaulting to 1000 [ 278.031425][ T8242] lo speed is unknown, defaulting to 1000 [ 278.286842][ T5954] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 278.561392][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 278.862870][ T5954] usb 3-1: config 7 has an invalid interface number: 46 but max is 0 [ 278.897784][ T5954] usb 3-1: config 7 has no interface number 0 [ 278.926639][ T5954] usb 3-1: config 7 interface 46 has no altsetting 0 [ 278.962629][ T5954] usb 3-1: New USB device found, idVendor=9fdb, idProduct=cfba, bcdDevice=f1.37 [ 279.012606][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.067219][ T5954] usb 3-1: Product: syz [ 279.082788][ T5954] usb 3-1: Manufacturer: syz [ 279.099287][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 279.111701][ T5954] usb 3-1: SerialNumber: syz [ 279.120811][ C0] Unknown status report in ack skb [ 280.958804][ T5954] usb 3-1: USB disconnect, device number 27 [ 281.612117][ T8271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.626'. [ 282.155522][ T8288] macvtap0: entered promiscuous mode [ 282.165561][ T8288] macvtap0: entered allmulticast mode [ 282.173365][ T8288] veth0_macvtap: entered allmulticast mode [ 282.180338][ T8287] tipc: Enabled bearer , priority 0 [ 282.192965][ T8287] tipc: Resetting bearer [ 282.203711][ T8286] tipc: Disabling bearer [ 282.682141][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 282.836114][ C1] Unknown status report in ack skb [ 283.750360][ T8313] netlink: 260 bytes leftover after parsing attributes in process `syz.4.637'. [ 285.502067][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.640'. [ 285.848463][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 285.862636][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 285.910135][ T8333] bridge0: entered allmulticast mode [ 286.229015][ T43] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 286.277230][ T8342] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 286.554638][ T43] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 286.601340][ T43] usb 4-1: config 0 has no interface number 0 [ 286.607998][ T5911] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 286.700621][ T43] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 286.807782][ T43] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.888430][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 286.977096][ T43] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 287.012570][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 287.032348][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.069152][ T43] usb 4-1: Product: syz [ 287.076814][ T5911] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 287.093397][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.102278][ T43] usb 4-1: Manufacturer: syz [ 287.107514][ T43] usb 4-1: SerialNumber: syz [ 287.142817][ T5911] usb 5-1: Product: syz [ 287.171329][ T43] usb 4-1: config 0 descriptor?? [ 287.186578][ T5911] usb 5-1: Manufacturer: syz [ 287.195826][ T5911] usb 5-1: SerialNumber: syz [ 287.203697][ T8333] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.223309][ T5911] usb 5-1: config 0 descriptor?? [ 287.233542][ T5911] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 287.296766][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 287.307080][ C1] Unknown status report in ack skb [ 288.363745][ T43] usb 4-1: USB disconnect, device number 28 [ 288.369874][ T5911] usb 5-1: USB disconnect, device number 34 [ 288.674002][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.651'. [ 288.708136][ T8367] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 288.747966][ T8367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.435897][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 291.749694][ T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 292.413939][ T43] usb 5-1: device descriptor read/64, error -71 [ 293.276548][ T8426] 8021q: VLANs not supported on ip6gre0 [ 293.339099][ T43] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 293.583572][ T43] usb 5-1: device descriptor read/64, error -71 [ 294.267798][ T43] usb usb5-port1: attempt power cycle [ 294.400283][ T5911] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 294.403725][ T8436] netlink: 336 bytes leftover after parsing attributes in process `syz.0.672'. [ 295.169377][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 295.196781][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.217331][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.241688][ T5911] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.255201][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.263929][ T5911] usb 4-1: Product: syz [ 295.268207][ T5911] usb 4-1: Manufacturer: syz [ 295.275767][ T5911] usb 4-1: SerialNumber: syz [ 295.583628][ T30] audit: type=1326 audit(1754242928.872:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8454 comm="syz.1.678" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210ff8eb69 code=0x0 [ 295.610809][ T8457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.883533][ T8467] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 296.761686][ T5911] usb 4-1: USB disconnect, device number 29 [ 296.961491][ T8475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.669089][ T5880] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 297.828760][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 298.445610][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.487689][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.513361][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 298.545492][ T5880] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 298.579085][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.617979][ T5880] usb 4-1: config 0 descriptor?? [ 298.824940][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 298.911066][ T8489] 9pnet_fd: Insufficient options for proto=fd [ 298.937121][ T8489] syzkaller1: entered promiscuous mode [ 298.944033][ T8489] syzkaller1: entered allmulticast mode [ 298.955048][ T8507] 9pnet_fd: Insufficient options for proto=fd [ 298.985325][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 298.985341][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 299.078721][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 299.183906][ T5880] a4tech 0003:09DA:000A.0009: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.3-1/input0 [ 299.208869][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 299.218295][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 299.246525][ T43] usb 3-1: config 48 has an invalid interface number: 4 but max is 0 [ 299.275856][ T43] usb 3-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 299.294890][ T43] usb 3-1: config 48 has no interface number 0 [ 299.319141][ T43] usb 3-1: config 48 interface 4 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 299.339985][ T43] usb 3-1: config 48 interface 4 has no altsetting 0 [ 299.353933][ T43] usb 3-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= b.d4 [ 299.364153][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.392481][ T43] usb 3-1: Product: syz [ 299.396727][ T43] usb 3-1: Manufacturer: syz [ 299.409215][ T43] usb 3-1: SerialNumber: syz [ 299.633463][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 299.688320][ T6007] usb 4-1: USB disconnect, device number 30 [ 300.278458][ T43] snd-usb-audio 3-1:48.4: probe with driver snd-usb-audio failed with error -2 [ 300.334039][ T43] usb 3-1: USB disconnect, device number 28 [ 300.501440][ T8534] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 300.606554][ T5954] IPVS: starting estimator thread 0... [ 300.667453][ T8543] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 300.720868][ T8545] netlink: 'syz.3.701': attribute type 4 has an invalid length. [ 300.723404][ T8540] IPVS: using max 26 ests per chain, 62400 per kthread [ 300.737752][ T8545] netlink: 152 bytes leftover after parsing attributes in process `syz.3.701'. [ 300.768833][ T5880] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 300.928759][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 300.935722][ T5880] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 300.953512][ T5880] usb 2-1: config 0 has an invalid interface number: 49 but max is 2 [ 300.972024][ T5880] usb 2-1: config 0 has no interface number 1 [ 300.978212][ T5880] usb 2-1: config 0 has no interface number 2 [ 300.999596][ T5880] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 301.012093][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.032746][ T5880] usb 2-1: config 0 descriptor?? [ 301.040876][ T5880] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 301.249815][ T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 301.300510][ T5951] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 301.408793][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 301.420822][ T43] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 301.438716][ T43] usb 5-1: config 0 has no interface number 0 [ 301.444899][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.469132][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.498667][ T43] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.512194][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 301.518542][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 301.528024][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.547971][ T43] usb 5-1: config 0 descriptor?? [ 301.557395][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 301.572874][ T5951] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 301.586667][ T43] ldusb 5-1:0.55: Interrupt in endpoint not found [ 301.588725][ T5954] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 301.599051][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.623929][ T5951] usb 4-1: config 0 descriptor?? [ 301.636046][ T5951] hso 4-1:0.0: Can't find BULK IN endpoint [ 301.762726][ T5954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.780287][ T8196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.784487][ T5954] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 301.813153][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 301.832877][ T5954] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.850850][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.863292][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.881460][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.898816][ T5954] usb 3-1: Product: syz [ 301.913890][ T5954] usb 3-1: Manufacturer: syz [ 301.934849][ T5954] usb 3-1: SerialNumber: syz [ 302.184210][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.197415][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.221115][ T5954] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 302.244597][ T5954] usb 3-1: USB disconnect, device number 29 [ 302.273317][ T10] usb 5-1: USB disconnect, device number 38 [ 302.334342][ T5949] usb 4-1: USB disconnect, device number 31 [ 302.398104][ T8575] syz.2.707 (8575): /proc/8574/oom_adj is deprecated, please use /proc/8574/oom_score_adj instead. [ 302.415433][ T6454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.205067][ T5949] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 303.533145][ T5880] usb 2-1: Could not set interface, error -71 [ 303.564391][ T5880] usb 2-1: USB disconnect, device number 36 [ 303.606396][ T5949] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 303.648464][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.680041][ T5949] usb 5-1: config 0 descriptor?? [ 303.822102][ T30] audit: type=1326 audit(1754242937.102:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 303.851963][ T30] audit: type=1326 audit(1754242937.102:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 303.877729][ T30] audit: type=1326 audit(1754242937.102:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 303.891906][ T8594] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 303.910337][ T30] audit: type=1326 audit(1754242937.112:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 303.918882][ T5949] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 303.943394][ T30] audit: type=1326 audit(1754242937.112:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 303.999496][ T30] audit: type=1326 audit(1754242937.112:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 304.018853][ T5880] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 304.025923][ T30] audit: type=1326 audit(1754242937.112:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 304.076483][ T30] audit: type=1326 audit(1754242937.112:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 304.146418][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.212529][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.231918][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 304.279380][ T5880] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 304.328497][ T5880] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 304.387807][ T5880] usb 2-1: config 0 has no interface number 0 [ 304.468756][ T5880] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.487143][ T5949] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 304.573409][ T5949] asix 5-1:0.0: probe with driver asix failed with error -71 [ 304.610691][ T5880] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.703413][ T5880] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 304.735082][ T5949] usb 5-1: USB disconnect, device number 39 [ 304.836218][ T5880] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 304.924915][ T5880] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 305.001839][ T5880] usb 2-1: Product: syz [ 305.032644][ T5880] usb 2-1: Manufacturer: syz [ 305.200349][ T30] audit: type=1326 audit(1754242937.112:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 305.222121][ T30] audit: type=1326 audit(1754242937.112:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8591 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91838eb69 code=0x7ffc0000 [ 305.243061][ T5880] usb 2-1: config 0 descriptor?? [ 305.286719][ T8585] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 305.415310][ T8604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'. [ 305.586235][ T8594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 306.058911][ T5880] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input15 [ 306.237196][ T5911] usb 2-1: USB disconnect, device number 37 [ 306.237371][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 307.459713][ T6454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.529687][ T6454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.599917][ T8630] 9pnet_fd: Insufficient options for proto=fd [ 308.128776][ T8642] netlink: 'syz.2.728': attribute type 3 has an invalid length. [ 308.136512][ T8642] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 308.468756][ T5880] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 308.527212][ T8641] batadv_slave_1: entered promiscuous mode [ 308.557869][ T8639] batadv_slave_1: left promiscuous mode [ 308.628717][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 308.636308][ T5880] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 308.644913][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.668650][ T5880] usb 2-1: config 0 has no interface number 0 [ 308.690935][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 308.700559][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.730288][ T5880] usb 2-1: Product: syz [ 308.734727][ T5880] usb 2-1: Manufacturer: syz [ 308.739248][ T5911] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 308.750734][ T5880] usb 2-1: SerialNumber: syz [ 308.771443][ T5880] usb 2-1: config 0 descriptor?? [ 308.794324][ T5880] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 308.816921][ T5880] usb 2-1: No valid video chain found. [ 308.899007][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 308.928076][ T5911] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 308.947762][ T5911] usb 5-1: config 162 has no interface number 0 [ 308.958523][ T5911] usb 5-1: config 162 interface 97 has no altsetting 0 [ 308.995648][ T43] usb 2-1: USB disconnect, device number 38 [ 309.003036][ T5911] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 309.024858][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.033497][ T5911] usb 5-1: Product: syz [ 309.037923][ T5911] usb 5-1: Manufacturer: syz [ 309.043427][ T5911] usb 5-1: SerialNumber: syz [ 309.320893][ T5911] metro_usb 5-1:162.97: interrupt-out endpoint missing [ 309.379706][ T5911] usb 5-1: USB disconnect, device number 40 [ 310.161499][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 310.851864][ T8682] team_slave_0: entered promiscuous mode [ 310.858034][ T8682] team_slave_1: entered promiscuous mode [ 311.216161][ T8692] lo speed is unknown, defaulting to 1000 [ 311.795841][ T8702] netlink: 88 bytes leftover after parsing attributes in process `syz.0.741'. [ 312.650247][ T8204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.506113][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.570991][ T8729] C: renamed from team_slave_0 (while UP) [ 313.579917][ T8726] 9pnet_fd: Insufficient options for proto=fd [ 313.601542][ T8729] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 313.624979][ T8729] netlink: 152 bytes leftover after parsing attributes in process `syz.0.747'. [ 313.674966][ T8729] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 314.264356][ T8750] tmpfs: Unknown parameter 'u/tD©ø¡' [ 315.399067][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 316.301164][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 316.319036][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.356186][ T43] usb 3-1: config 0 descriptor?? [ 316.962785][ T43] ath6kl: Failed to submit usb control message: -71 [ 316.982910][ T43] ath6kl: unable to send the bmi data to the device: -71 [ 317.003118][ T43] ath6kl: Unable to send get target info: -71 [ 317.048450][ T43] ath6kl: Failed to init ath6kl core: -71 [ 317.086130][ T43] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 317.189623][ T8792] block device autoloading is deprecated and will be removed. [ 317.198209][ T8792] syz.0.765: attempt to access beyond end of device [ 317.198209][ T8792] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.219392][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.450162][ T43] usb 3-1: USB disconnect, device number 30 [ 317.787289][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.765'. [ 318.409499][ T6456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.747118][ T1313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.883104][ T8832] batadv1: entered promiscuous mode [ 319.926613][ T8833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 319.971131][ T8833] netlink: 'syz.2.776': attribute type 4 has an invalid length. [ 320.020537][ T8833] random: crng reseeded on system resumption [ 320.499786][ T8845] bridge0: entered promiscuous mode [ 320.505418][ T8845] macvlan2: entered promiscuous mode [ 320.539535][ T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 321.272268][ T8852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.322286][ T8855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.434172][ T8861] 9pnet_fd: Insufficient options for proto=fd [ 321.471862][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.490888][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.507546][ T43] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 321.518071][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.532654][ T43] usb 2-1: config 0 descriptor?? [ 321.758182][ T8841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.778'. [ 321.773413][ T8841] tipc: Enabled bearer , priority 0 [ 321.781434][ T8841] syzkaller0: entered promiscuous mode [ 321.786976][ T8841] syzkaller0: entered allmulticast mode [ 321.803903][ T8841] tipc: Resetting bearer [ 321.900635][ T5949] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 322.069029][ T5949] usb 5-1: Using ep0 maxpacket: 32 [ 322.133674][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 322.261050][ T5949] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 322.370811][ T5949] usb 5-1: config 128 has an invalid descriptor of length 58, skipping remainder of the config [ 322.485615][ T43] kye 0003:0458:5011.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 322.507343][ T43] kye 0003:0458:5011.000A: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 322.534241][ T43] kye 0003:0458:5011.000A: tablet-enabling feature report not found [ 322.551247][ T43] kye 0003:0458:5011.000A: tablet enabling failed [ 322.567784][ T43] usb 2-1: USB disconnect, device number 39 [ 322.610426][ T5949] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 322.619633][ T5949] usb 5-1: config 128 has no interface number 0 [ 322.626870][ T5949] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 49, changing to 9 [ 322.638660][ T5949] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 9292, setting to 1024 [ 322.658678][ T5949] usb 5-1: config 128 interface 127 has no altsetting 0 [ 322.668329][ T5949] usb 5-1: Dual-Role OTG device on HNP port [ 322.685791][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 322.700489][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.708703][ T5949] usb 5-1: Product: syz [ 322.712909][ T5949] usb 5-1: Manufacturer: syz [ 322.717541][ T5949] usb 5-1: SerialNumber: syz [ 322.726347][ T8865] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 322.757516][ T8880] lo speed is unknown, defaulting to 1000 [ 322.805467][ T8881] batadv0: entered promiscuous mode [ 322.813814][ T8881] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 322.824559][ T8881] batadv0: left promiscuous mode [ 322.959241][ T5911] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 323.121650][ T8891] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 323.139336][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 323.146963][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.159030][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 323.170683][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.182320][ T5911] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.193586][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.215066][ T5911] usb 3-1: config 0 descriptor?? [ 323.231187][ T8878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 323.241347][ T5911] hub 3-1:0.0: USB hub found [ 323.459357][ T5911] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 323.479880][ T5949] usb 5-1: USB disconnect, device number 41 [ 323.519324][ T5951] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 323.681373][ T5951] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 323.695952][ T5911] hid-generic 0003:046D:C314.000B: unknown main item tag 0x0 [ 323.709614][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.475240][ T8194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.487766][ T5951] usb 2-1: config 0 descriptor?? [ 324.494280][ T5911] hid-generic 0003:046D:C314.000B: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 324.746728][ T8894] binder: BINDER_SET_CONTEXT_MGR already set [ 324.756757][ T8894] binder: 8893:8894 ioctl 4018620d 200000000040 returned -16 [ 324.791755][ T5951] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 325.520445][ T8194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.536945][ T5951] [drm:udl_init] *ERROR* Selecting channel failed [ 325.701277][ T5951] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 325.721363][ T5951] [drm] Initialized udl on minor 2 [ 325.739360][ T5951] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.763222][ T5951] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.776721][ T43] kernel write not supported for file /amidi2 (pid: 43 comm: kworker/1:1) [ 325.800497][ T8921] rtc_cmos 00:00: Alarms can be up to one day in the future [ 325.814370][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.836256][ T5951] usb 2-1: USB disconnect, device number 40 [ 325.844891][ T43] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.869083][ T43] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.968993][ T5949] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 326.133519][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short [ 326.145161][ T5949] usb 5-1: config 3 has an invalid interface number: 190 but max is 0 [ 326.153436][ T5949] usb 5-1: config 3 has no interface number 0 [ 326.163864][ T5949] usb 5-1: config 3 interface 190 has no altsetting 0 [ 326.173032][ T5949] usb 5-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=7c.ec [ 326.187224][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.195431][ T5949] usb 5-1: Manufacturer: 映㳚î◛锛暴ݸ셓॑禫䞎꭮Ӽ䳖㓶주緰먉砵둈蕛鮈㋆è°ç—£áŠ”쎴⧻踰똇碖솊俅㳵ά砀Ờ⢫భï‚垪嚎؆ã˜î©î¤»è§³ïº„摋ꔅ궷휷澠쾲ੌ⬵ꇛ⭜툹笵섅ꉨꨢì¿à®¤è¸¿íŽî°”餙ጻä„ᚯã—뺋蟉訇㧸轊蛹쇈殺䆰㣕ç³ì¹±è—±ï¼†á—㩪ñŠ²Šæšƒìº†ì›´íš«ï²žà£¹ [ 326.227848][ T5949] usb 5-1: SerialNumber: syz [ 326.278752][ T5954] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 326.428876][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 326.436250][ T5954] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 326.490057][ T8924] fuse: Bad value for 'fd' [ 326.513757][ T5954] usb 4-1: config 0 has no interface number 0 [ 326.526384][ T5954] usb 4-1: config 0 interface 92 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 326.537585][ T5954] usb 4-1: config 0 interface 92 has no altsetting 0 [ 326.554495][ T5954] usb 4-1: New USB device found, idVendor=112a, idProduct=cf93, bcdDevice=a8.eb [ 326.566826][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.579980][ T5954] usb 4-1: Product: syz [ 326.587558][ T5954] usb 4-1: Manufacturer: syz [ 326.593461][ T5954] usb 4-1: SerialNumber: syz [ 326.610421][ T5954] usb 4-1: config 0 descriptor?? [ 326.617565][ T8936] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 326.680442][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.688336][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.702615][ T24] usb 3-1: USB disconnect, device number 31 [ 326.716198][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.727637][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 326.735062][ T43] rtc rtc0: __rtc_set_alarm: err=-22 [ 327.176832][ T5954] usb 4-1: USB disconnect, device number 32 [ 327.530191][ T8956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.540833][ T8956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.684004][ T8962] netem: change failed [ 328.692320][ T8966] lo speed is unknown, defaulting to 1000 [ 328.900397][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'. [ 328.909966][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 328.924154][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'. [ 329.081037][ T24] usb 4-1: config 0 has no interfaces? [ 329.093209][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 329.105579][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.116024][ T24] usb 4-1: Product: syz [ 329.120412][ T24] usb 4-1: Manufacturer: syz [ 329.127593][ T24] usb 4-1: SerialNumber: syz [ 329.143700][ T24] usb 4-1: config 0 descriptor?? [ 329.249148][ T8981] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 329.444533][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 330.222614][ T8208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.298787][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 330.309269][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 330.348198][ T10] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 330.349290][ T8966] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.358076][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.394173][ T10] usb 3-1: Product: syz [ 330.412976][ T8967] netlink: 596 bytes leftover after parsing attributes in process `syz.3.815'. [ 330.418953][ T10] usb 3-1: Manufacturer: syz [ 330.426759][ T10] usb 3-1: SerialNumber: syz [ 330.445763][ T10] usb 3-1: config 0 descriptor?? [ 330.467990][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 330.487941][ T10] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 330.547774][ T10] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 330.593929][ T24] usb 4-1: USB disconnect, device number 33 [ 330.605956][ T8993] netlink: 388 bytes leftover after parsing attributes in process `syz.0.822'. [ 330.766322][ T10] libceph: connect (1)[c::]:6789 error -101 [ 330.777858][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 330.778767][ T5911] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 330.810256][ T8995] ceph: No mds server is up or the cluster is laggy [ 330.846052][ T8984] mmap: syz.4.819 (8984): VmData 26103808 exceed data ulimit 2047. Update limits or use boot option ignore_rlimit_data. [ 330.940736][ T5911] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 330.965251][ T5911] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 330.979667][ T5911] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 330.994128][ T5911] usb 2-1: config 220 has no interface number 2 [ 331.002236][ T5911] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 331.024685][ T5911] usb 2-1: config 220 interface 0 has no altsetting 0 [ 331.210135][ T8196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.243614][ T5911] usb 2-1: config 220 interface 76 has no altsetting 0 [ 331.251752][ T5911] usb 2-1: config 220 interface 1 has no altsetting 0 [ 331.260996][ T5911] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 331.277006][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.289911][ T5911] usb 2-1: Product: syz [ 331.294126][ T5911] usb 2-1: Manufacturer: syz [ 331.305977][ T5911] usb 2-1: SerialNumber: syz [ 331.314810][ T5949] gspca_main: spca501-2.14.0 probing 1776:501c [ 331.420117][ T5949] gspca_spca501: reg write: error -32 [ 331.530108][ T5949] spca501 5-1:3.190: Reg write failed for 0x02,0x07,0x05 [ 331.678423][ T5949] spca501 5-1:3.190: probe with driver spca501 failed with error -22 [ 332.006666][ T5949] usb 3-1: USB disconnect, device number 32 [ 333.299576][ T9035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.536545][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 333.546842][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 334.362434][ T5911] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 334.379254][ T5911] usb 2-1: No valid video chain found. [ 334.384904][ T5911] usb 2-1: selecting invalid altsetting 0 [ 334.424710][ T5911] usb 2-1: selecting invalid altsetting 0 [ 334.441674][ T5911] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 334.475849][ T5911] usb 2-1: USB disconnect, device number 41 [ 334.644253][ T9049] lo speed is unknown, defaulting to 1000 [ 334.730308][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.754763][ T9056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.764192][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 334.786442][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.829883][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.870202][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.983439][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.993622][ T24] usb 3-1: config 0 has no interface number 0 [ 335.030938][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.039238][ T5954] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 335.047367][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.100760][ T24] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.140215][ T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 335.174635][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.226781][ T24] usb 3-1: config 0 descriptor?? [ 335.665651][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 335.688552][ T5954] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 335.711661][ T6456] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.715310][ T24] hid (null): report_id 35660 is invalid [ 335.742333][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.768539][ T5954] usb 2-1: Product: syz [ 335.772949][ T5954] usb 2-1: Manufacturer: syz [ 335.783667][ T5954] usb 2-1: SerialNumber: syz [ 335.926653][ T24] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.000C/input/input17 [ 336.058143][ T5954] usb 2-1: config 0 descriptor?? [ 336.065666][ T5954] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 336.091223][ T24] uclogic 0003:28BD:0042.000C: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 336.968520][ T24] usb 3-1: USB disconnect, device number 33 [ 336.970533][ T8204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.203091][ T9081] block nbd4: shutting down sockets [ 337.203096][ T9084] trusted_key: encrypted_key: insufficient parameters specified [ 337.410978][ T5949] usb 2-1: USB disconnect, device number 42 [ 339.306618][ T5911] IPVS: starting estimator thread 0... [ 340.540316][ T9107] IPVS: using max 23 ests per chain, 55200 per kthread [ 340.829470][ T5911] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 340.846607][ T8203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.964644][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 341.631372][ T5911] usb 4-1: config 4 has an invalid interface number: 163 but max is 0 [ 341.658806][ T5911] usb 4-1: config 4 has an invalid descriptor of length 159, skipping remainder of the config [ 341.676280][ T5911] usb 4-1: config 4 has no interface number 0 [ 341.682569][ T5911] usb 4-1: too many endpoints for config 4 interface 163 altsetting 182: 247, using maximum allowed: 30 [ 341.698776][ T5911] usb 4-1: config 4 interface 163 altsetting 182 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 341.716752][ T5911] usb 4-1: config 4 interface 163 has no altsetting 0 [ 341.738850][ T5911] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 341.758409][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.099637][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 342.239547][ T43] usb 3-1: device descriptor read/64, error -71 [ 342.290269][ T9119] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.299143][ T9119] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.480209][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.502062][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 342.658785][ T43] usb 3-1: device descriptor read/64, error -71 [ 342.732793][ T6733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.769686][ T43] usb usb3-port1: attempt power cycle [ 342.958269][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.994070][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.145856][ T5911] usb 4-1: string descriptor 0 read error: -71 [ 343.174253][ T5911] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 343.199083][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 343.229418][ T43] usb 3-1: device descriptor read/8, error -71 [ 343.469225][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 343.502525][ T43] usb 3-1: device descriptor read/8, error -71 [ 343.586060][ T9119] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.609094][ T9119] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.618046][ T9119] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.635219][ T43] usb usb3-port1: unable to enumerate USB device [ 343.643254][ T9119] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.813208][ T9141] sp0: Synchronizing with TNC [ 343.908191][ T9165] dlm: non-version read from control device 0 [ 344.186667][ T9177] netlink: 68 bytes leftover after parsing attributes in process `syz.4.863'. [ 344.636584][ T5911] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 344.647262][ T5911] stv0680 4-1:4.163: STV(e): camera ping failed!! [ 344.661967][ T5911] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 344.679502][ T5911] stv0680 4-1:4.163: last error: 0, command = 0x0 [ 344.699177][ T43] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 344.713320][ T5911] usb 4-1: USB disconnect, device number 34 [ 344.758087][ T9141] [U] è [ 344.881363][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 344.892313][ T43] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 344.962848][ T43] usb 2-1: config 0 has no interface number 0 [ 345.020356][ T43] usb 2-1: config 0 interface 12 has no altsetting 0 [ 345.112036][ T5911] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 345.130430][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 345.146426][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.156536][ T43] usb 2-1: Product: syz [ 345.169979][ T43] usb 2-1: Manufacturer: syz [ 345.178790][ T9134] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 345.179264][ T43] usb 2-1: SerialNumber: syz [ 345.216949][ T43] usb 2-1: config 0 descriptor?? [ 345.268693][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 345.276442][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 345.286446][ T5911] usb 4-1: config 0 has no interface number 0 [ 345.302180][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 345.326565][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 345.336434][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.346418][ T5911] usb 4-1: Product: syz [ 345.355024][ T5911] usb 4-1: Manufacturer: syz [ 345.361204][ T9134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.361921][ T5911] usb 4-1: SerialNumber: syz [ 345.381474][ T5911] usb 4-1: config 0 descriptor?? [ 345.381474][ T9134] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 345.381503][ T9134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.410101][ T9134] usb 3-1: config 0 descriptor?? [ 345.415704][ T5911] smsc75xx v1.0.0 [ 345.474222][ T43] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 345.483337][ T43] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 345.495501][ T43] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 345.497114][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.511986][ T43] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 345.537667][ T43] usb 2-1: USB disconnect, device number 43 [ 345.538090][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.144815][ T9134] lenovo 0003:17EF:60A3.000D: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 346.449615][ T9209] binder: BINDER_SET_CONTEXT_MGR already set [ 346.460699][ T9209] binder: 9208:9209 ioctl 4018620d 200000000040 returned -16 [ 346.570232][ T8204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.620925][ T9210] binder_alloc: binder_alloc_mmap_handler: 9208 200000ffd000-200001000000 already mapped failed -16 [ 346.634152][ T9209] binder: 9208:9209 ioctl c0306201 200000000080 returned -22 [ 346.644952][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.664299][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.750203][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.781472][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.534681][ T9134] IPVS: starting estimator thread 0... [ 347.552923][ T9231] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 347.638903][ T9235] IPVS: using max 24 ests per chain, 57600 per kthread [ 347.774567][ T6454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.067813][ T9238] ip6gretap1: entered allmulticast mode [ 348.403343][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 348.421965][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 348.459002][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 348.471457][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 348.491443][ T5911] usb 4-1: USB disconnect, device number 35 [ 348.521830][ T43] usb 3-1: USB disconnect, device number 38 [ 349.565470][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 349.738899][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 349.746282][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 349.752898][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 349.780480][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.788542][ T43] usb 3-1: Product: syz [ 349.792981][ T43] usb 3-1: Manufacturer: syz [ 349.797609][ T43] usb 3-1: SerialNumber: syz [ 349.826448][ T43] usb 3-1: config 0 descriptor?? [ 349.914133][ T9260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 350.041994][ T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.092348][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 351.919917][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 351.988261][ T43] usb 3-1: USB disconnect, device number 39 [ 352.329992][ T8203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.797432][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.898'. [ 352.820558][ C0] Unknown status report in ack skb [ 352.852214][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.899'. [ 352.881707][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 352.892333][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 352.931259][ T9315] netlink: 50 bytes leftover after parsing attributes in process `syz.2.899'. [ 352.976216][ T8203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.167477][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 353.167496][ T30] audit: type=1326 audit(1754242986.452:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9321 comm="syz.4.901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94ded8eb69 code=0x0 [ 355.749388][ T9343] /dev/nullb0: Can't lookup blockdev [ 356.964490][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 357.138844][ T9361] comedi comedi0: board detection failed [ 357.320330][ T9365] [U] ¹¹ [ 358.569660][ T9129] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 358.665529][ T9395] input: syz1 as /devices/virtual/input/input18 [ 358.737988][ T6454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.818975][ T9129] usb 2-1: device descriptor read/64, error -71 [ 358.925995][ T9403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.956310][ T9403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.079937][ T9129] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 359.238946][ T9129] usb 2-1: device descriptor read/64, error -71 [ 359.349253][ T9129] usb usb2-port1: attempt power cycle [ 359.508782][ T9134] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 359.638735][ T9134] usb 4-1: device descriptor read/64, error -71 [ 359.730998][ T9129] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 359.763510][ T9129] usb 2-1: device descriptor read/8, error -71 [ 359.928879][ T9134] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 360.026791][ T9416] netlink: 52 bytes leftover after parsing attributes in process `syz.2.927'. [ 360.037659][ T9416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.927'. [ 360.098776][ T9129] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 360.119454][ T9134] usb 4-1: device descriptor read/64, error -71 [ 360.133807][ T9129] usb 2-1: device descriptor read/8, error -71 [ 360.229178][ T9134] usb usb4-port1: attempt power cycle [ 360.255608][ T9129] usb usb2-port1: unable to enumerate USB device [ 360.279156][ T9422] 9pnet_fd: Insufficient options for proto=fd [ 360.628698][ T9134] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 361.460197][ T9134] usb 4-1: device descriptor read/8, error -71 [ 361.708931][ T9134] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 361.739357][ T9134] usb 4-1: device descriptor read/8, error -71 [ 361.859651][ T9134] usb usb4-port1: unable to enumerate USB device [ 361.888129][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 361.929861][ T1336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.191851][ T9458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.934'. [ 363.173890][ T9473] nbd: must specify a size in bytes for the device [ 363.314574][ T9129] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 363.378892][ T9471] lo speed is unknown, defaulting to 1000 [ 363.546260][ T9129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.605624][ T9129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 363.630868][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'. [ 363.661969][ T9129] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 363.672880][ T9129] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 363.691674][ T9129] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.715839][ T9129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 363.727751][ T9129] usb 2-1: SerialNumber: syz [ 363.776363][ T9469] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 363.807116][ T9469] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 363.840186][ T9129] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 364.102038][ T9129] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 364.114592][ T9129] usb 2-1: USB disconnect, device number 48 [ 364.152224][ T5911] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 364.272189][ T9496] syz.4.945: attempt to access beyond end of device [ 364.272189][ T9496] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 364.288126][ T9496] hpfs: hpfs_map_sector(): read error [ 364.311610][ T5911] usb 4-1: config 1 has an invalid descriptor of length 187, skipping remainder of the config [ 364.328885][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 364.343212][ T5911] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.365264][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 364.375795][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.395396][ T5911] usb 4-1: Product: syz [ 364.405572][ T5911] usb 4-1: Manufacturer: syz [ 364.414173][ T5911] usb 4-1: SerialNumber: syz [ 364.425631][ T5911] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 364.438328][ T5911] cdc_ncm 4-1:1.0: bind() failure [ 364.500272][ T8204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.540329][ T9503] batadv_slave_1: entered promiscuous mode [ 365.478285][ T9503] batadv_slave_1: left promiscuous mode [ 365.480736][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 366.013720][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 366.038184][ C0] Unknown status report in ack skb [ 366.039595][ T9515] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 366.049754][ T9515] syzkaller0: linktype set to 7 [ 366.179537][ T9523] Invalid source name [ 366.183607][ T9523] UBIFS error (pid: 9523): cannot open "/dev/nbd2", error -22 [ 366.217107][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.234175][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.244685][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.253928][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.438697][ T9129] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 366.588776][ T9129] usb 2-1: Using ep0 maxpacket: 8 [ 366.596071][ T9129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 366.623117][ T9129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.628793][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 366.633212][ T9129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.671909][ T9129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 366.717273][ T9129] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 366.745194][ T9129] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 366.801686][ T9129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.812115][ T43] usb 3-1: device descriptor read/64, error -71 [ 367.068979][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 367.329849][ T9129] usb 2-1: config 0 descriptor?? [ 367.342094][ T43] usb 3-1: device descriptor read/64, error -71 [ 367.445985][ T5156] Bluetooth: hci5: urb ffff888031063300 submission failed (90) [ 367.551662][ T43] usb usb3-port1: attempt power cycle [ 367.553682][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.942'. [ 367.566987][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.574952][ T9539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.692317][ T6733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.932582][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.951799][ T9147] usb 2-1: USB disconnect, device number 49 [ 367.993942][ T9539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.128727][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 368.249477][ T43] usb 3-1: device descriptor read/8, error -71 [ 368.504251][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 368.680637][ T43] usb 3-1: device descriptor read/8, error -71 [ 369.198072][ T9546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.959'. [ 369.573605][ T43] usb usb3-port1: unable to enumerate USB device [ 369.728815][ T9129] usb 4-1: USB disconnect, device number 40 [ 369.813725][ T9555] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 369.824098][ T9555] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 369.833859][ T9555] netlink: 2 bytes leftover after parsing attributes in process `syz.3.962'. [ 369.845769][ T9555] team0: entered promiscuous mode [ 369.855748][ T9555] team_slave_0: entered promiscuous mode [ 369.863819][ T9555] team_slave_1: entered promiscuous mode [ 369.874764][ T9555] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.882781][ T9555] bridge0: port 3(team0) entered blocking state [ 369.892753][ T9555] bridge0: port 3(team0) entered disabled state [ 369.901290][ T9555] team0: entered allmulticast mode [ 369.906467][ T9555] team_slave_0: entered allmulticast mode [ 369.916226][ T9555] team_slave_1: entered allmulticast mode [ 369.925017][ T9555] bridge0: port 3(team0) entered blocking state [ 369.931461][ T9555] bridge0: port 3(team0) entered listening state [ 369.939933][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 370.028533][ T9560] ieee802154 phy0 wpan0: encryption failed: -90 [ 370.035323][ T5880] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 370.048493][ T9560] loop6: detected capacity change from 0 to 7 [ 370.066191][ T9560] Dev loop6: unable to read RDB block 7 [ 370.073265][ T9560] loop6: unable to read partition table [ 370.079442][ T9560] loop6: partition table beyond EOD, truncated [ 370.085670][ T9560] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 370.250426][ T6733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.210302][ T5880] usb 3-1: config 0 has an invalid interface number: 56 but max is 3 [ 371.492937][ T9571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.721040][ T5880] usb 3-1: config 0 has an invalid interface number: 193 but max is 3 [ 371.740505][ T5880] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 371.750139][ T5880] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 371.886130][ T5880] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 371.895363][ T5880] usb 3-1: config 0 has no interface number 0 [ 371.905010][ T5880] usb 3-1: config 0 has no interface number 1 [ 371.911999][ T5880] usb 3-1: config 0 interface 56 altsetting 6 bulk endpoint 0xD has invalid maxpacket 32 [ 371.925126][ T5880] usb 3-1: config 0 interface 56 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 371.937960][ T5880] usb 3-1: config 0 interface 56 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 371.957495][ T5880] usb 3-1: config 0 interface 193 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.983422][ T5880] usb 3-1: config 0 interface 56 has no altsetting 0 [ 372.013552][ T5880] usb 3-1: config 0 interface 193 has no altsetting 0 [ 372.023199][ T5880] usb 3-1: New USB device found, idVendor=0c26, idProduct=0010, bcdDevice=3e.eb [ 372.051812][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.059956][ T5880] usb 3-1: Product: syz [ 372.064274][ T5880] usb 3-1: Manufacturer: syz [ 372.092044][ T5880] usb 3-1: SerialNumber: syz [ 372.116823][ T5880] usb 3-1: config 0 descriptor?? [ 372.146037][ T9554] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 372.312534][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 372.326310][ C0] Unknown status report in ack skb [ 372.407993][ T5880] ftdi_sio 3-1:0.56: FTDI USB Serial Device converter detected [ 372.450290][ T5880] ftdi_sio ttyUSB0: unknown device type: 0x3eeb [ 372.489415][ T5880] ftdi_sio 3-1:0.193: FTDI USB Serial Device converter detected [ 372.508224][ T5880] ftdi_sio ttyUSB1: unknown device type: 0x3eeb [ 372.536445][ T5880] usb 3-1: USB disconnect, device number 44 [ 372.591479][ T5880] ftdi_sio 3-1:0.56: device disconnected [ 372.616387][ T5880] ftdi_sio 3-1:0.193: device disconnected [ 373.452578][ T1336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.559235][ T9614] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 374.624416][ T9614] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 374.754789][ T9622] nfs: Unexpected value for 'acl' [ 374.885188][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 374.909160][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.964247][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.996737][ T9627] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 375.250690][ T5880] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 375.759266][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 375.785714][ T5880] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 375.796714][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 375.806744][ T5880] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 375.816676][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 375.827026][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.932898][ T5880] usb 4-1: config 0 descriptor?? [ 376.009387][ T6733] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.209471][ T5880] hdpvr 4-1:0.0: firmware version 0x0 dated [ 376.215956][ T5880] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 376.270594][ T9147] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 376.515198][ T9147] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 376.553159][ T9147] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.606733][ T9147] usb 3-1: config 0 has no interface number 0 [ 376.663778][ T9147] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 376.664692][ T9644] option changes via remount are deprecated (pid=9642 comm=syz.4.991) [ 376.724950][ T9622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.765493][ T9147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.796337][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 376.808391][ T9643] hsr_slave_0: left promiscuous mode [ 376.815356][ T9643] hsr_slave_1: left promiscuous mode [ 376.840814][ T9645] syz.3.984 (9645): attempted to duplicate a private mapping with mremap. This is not supported. [ 376.849363][ T9147] usb 3-1: Product: syz [ 376.869675][ T9147] usb 3-1: Manufacturer: syz [ 376.883467][ T9147] usb 3-1: SerialNumber: syz [ 376.904772][ T9147] usb 3-1: config 0 descriptor?? [ 377.037786][ T9649] tipc: Started in network mode [ 377.049904][ T9649] tipc: Node identity 4af0bef866e6, cluster identity 4711 [ 377.067502][ T9649] tipc: Enabled bearer , priority 0 [ 377.087548][ T9649] syzkaller0: entered promiscuous mode [ 377.101285][ T9649] syzkaller0: entered allmulticast mode [ 377.588872][ T9134] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 377.758393][ T9134] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 377.771645][ T9134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.784088][ T9134] usb 2-1: config 0 descriptor?? [ 377.793209][ T9134] cp210x 2-1:0.0: cp210x converter detected [ 378.004856][ T5880] hdpvr 4-1:0.0: Could not setup controls [ 378.015177][ T5880] hdpvr 4-1:0.0: registering videodev failed [ 378.350688][ T9129] tipc: Node number set to 739688184 [ 378.381921][ T9134] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 378.435454][ T5880] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 378.579604][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610559][ T5880] usb 4-1: USB disconnect, device number 41 [ 378.619420][ T9134] usb 2-1: cp210x converter now attached to ttyUSB0 [ 378.780407][ T43] usb 2-1: USB disconnect, device number 50 [ 378.789341][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 378.819045][ T43] cp210x 2-1:0.0: device disconnected [ 379.124286][ T5911] usb 3-1: USB disconnect, device number 45 [ 380.201498][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 380.210696][ T9677] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 380.218309][ T9677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.875445][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 380.898297][ T9649] tipc: Resetting bearer [ 381.421562][ T9649] tipc: Disabling bearer [ 381.798859][ T5911] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 381.920181][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.978793][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 382.003070][ T5911] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 382.034442][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.066360][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 382.734459][ T5911] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 382.743641][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.775275][ T5911] usb 4-1: config 0 descriptor?? [ 383.238247][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 383.273595][ T5911] usbhid 4-1:0.0: can't add hid device: -32 [ 383.282772][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 383.421924][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.431402][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.432978][ T9725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.453122][ T9725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.616912][ T5880] usb 4-1: USB disconnect, device number 42 [ 384.624379][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1016'. [ 384.696793][ T9736] binder: Unknown parameter 'Iiùò¢qd' [ 384.830029][ T9747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1019'. [ 384.847484][ T9739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1019'. [ 384.970492][ C0] bridge0: port 3(team0) entered learning state [ 385.026566][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 385.091866][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 385.237562][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.256476][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.588713][ T5911] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 385.749029][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 386.157344][ T9770] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 386.157557][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 386.171517][ T9770] Error validating options; rc = [-22] [ 386.197836][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 386.208989][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.220741][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 386.223981][ T9770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.241084][ T9770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.256959][ T9770] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 386.266526][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 386.327481][ T5911] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 386.398798][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.407022][ T5911] usb 2-1: Product: syz [ 386.414898][ T5911] usb 2-1: Manufacturer: syz [ 387.109916][ T5911] usb 2-1: SerialNumber: syz [ 387.215737][ T5911] usb 2-1: config 0 descriptor?? [ 387.221917][ T9761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.235612][ T5911] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 387.259399][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 387.268847][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1030'. [ 387.327961][ T5191] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 388.311126][ T9783] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 388.359845][ T5191] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 388.459061][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 388.504451][ T5191] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 388.555909][ T5191] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 388.647429][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1031'. [ 388.788229][ T9788] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.856041][ T9795] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 389.074773][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'. [ 389.240931][ T9811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.280338][ T9811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.468832][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 389.602703][ T5911] usb 2-1: USB disconnect, device number 51 [ 389.739366][ T43] usb 4-1: device descriptor read/64, error -71 [ 390.160023][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 390.318679][ T43] usb 4-1: device descriptor read/64, error -71 [ 390.357144][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 390.366998][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'. [ 390.440326][ T43] usb usb4-port1: attempt power cycle [ 390.914239][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 390.949033][ T43] usb 4-1: device descriptor read/8, error -71 [ 391.162777][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 391.175653][ T9858] netlink: 'syz.4.1053': attribute type 1 has an invalid length. [ 391.183752][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'. [ 391.198844][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 391.420184][ T43] usb 4-1: device descriptor read/8, error -71 [ 391.554131][ T43] usb usb4-port1: unable to enumerate USB device [ 391.900585][ T9795] Process accounting resumed [ 392.922224][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.950253][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.988840][ T9887] tap0: tun_chr_ioctl cmd 2147767506 [ 393.139428][ T9896] dummy0: entered promiscuous mode [ 393.608817][ T5911] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 393.778904][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 393.830505][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.915673][ T5911] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 8.68 [ 393.967435][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.037815][ T5911] usb 3-1: Product: syz [ 394.056634][ T5911] usb 3-1: Manufacturer: syz [ 394.066749][ T5911] usb 3-1: SerialNumber: syz [ 394.080127][ T5911] usb 3-1: config 0 descriptor?? [ 394.097824][ T5911] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 394.119220][ T9899] dummy0: left promiscuous mode [ 394.165643][ T9903] loop2: detected capacity change from 0 to 7 [ 394.210320][ T9903] loop2: p1 [ 394.213805][ T9903] loop2: partition table partially beyond EOD, truncated [ 394.281884][ T9903] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 394.321914][ T5911] gspca_sn9c2028: read1 error -71 [ 394.340480][ T5911] gspca_sn9c2028: read1 error -71 [ 394.358664][ T5911] gspca_sn9c2028: read1 error -71 [ 394.364530][ T5911] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 394.422346][ T5911] usb 3-1: USB disconnect, device number 46 [ 394.541936][ T9913] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1065'. [ 394.551460][ T9913] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1065'. [ 394.560842][ T9913] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1065'. [ 395.918916][ T9922] TCP: TCP_TX_DELAY enabled [ 395.924682][ T9922] program syz.1.1067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.048271][ T9926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.087945][ T9926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.298692][ T5911] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 396.478828][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 396.485863][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 396.500869][ T5911] usb 4-1: config 0 has no interface number 0 [ 396.507268][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 396.522696][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 396.620558][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.634293][ T5911] usb 4-1: Product: syz [ 396.638664][ T5911] usb 4-1: Manufacturer: syz [ 396.643374][ T5911] usb 4-1: SerialNumber: syz [ 396.652387][ T5911] usb 4-1: config 0 descriptor?? [ 396.661343][ T5911] smsc75xx v1.0.0 [ 397.091123][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1070'. [ 397.228911][ T9129] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 397.268751][ T5880] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 397.303508][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 397.321503][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 397.336075][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 397.359103][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 397.377176][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 397.388035][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 397.401780][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 397.401915][ T9129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.418745][ T5911] usb 4-1: USB disconnect, device number 47 [ 397.420749][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 397.458905][ T9129] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 397.483636][ T9129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.495672][ T9129] usb 2-1: config 0 descriptor?? [ 397.514680][ T9129] pwc: Askey VC010 type 2 USB webcam detected. [ 397.916898][ T9947] sit0: entered promiscuous mode [ 397.922222][ T9129] pwc: recv_control_msg error -32 req 02 val 2b00 [ 397.935432][ T9947] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 397.945584][ T9947] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1074'. [ 398.003641][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 398.024152][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 398.048706][ T5880] usb 3-1: can't read configurations, error -71 [ 398.065217][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 398.231364][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 399.526541][ T9963] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 399.571603][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.328668][ C0] bridge0: port 3(team0) entered forwarding state [ 400.335204][ C0] bridge0: topology change detected, propagating [ 400.753342][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.764368][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.781336][ T9129] pwc: recv_control_msg error -71 req 02 val 2700 [ 400.788428][ T9129] pwc: recv_control_msg error -71 req 02 val 2c00 [ 400.800311][ T9129] pwc: recv_control_msg error -71 req 04 val 1000 [ 400.817263][ T9129] pwc: recv_control_msg error -71 req 04 val 1300 [ 400.851132][ T9129] pwc: recv_control_msg error -71 req 04 val 1400 [ 400.859640][ T9129] pwc: recv_control_msg error -71 req 02 val 2000 [ 400.881385][ T9129] pwc: recv_control_msg error -71 req 02 val 2100 [ 400.915097][ T9129] pwc: recv_control_msg error -71 req 04 val 1500 [ 400.936611][ T9129] pwc: recv_control_msg error -71 req 02 val 2500 [ 400.953200][ T9982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1086'. [ 400.963230][ T9129] pwc: recv_control_msg error -71 req 02 val 2400 [ 400.974608][ T9129] pwc: recv_control_msg error -71 req 02 val 2600 [ 400.991529][ T5911] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 401.016001][ T9129] pwc: recv_control_msg error -71 req 02 val 2900 [ 401.057264][ T9129] pwc: recv_control_msg error -71 req 02 val 2800 [ 401.079908][ T9129] pwc: recv_control_msg error -71 req 04 val 1100 [ 401.195907][ T9129] pwc: recv_control_msg error -71 req 04 val 1200 [ 401.228774][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 401.237028][ T9129] pwc: Registered as video103. [ 401.239327][ T5911] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 401.252483][ T9129] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 401.279306][ T9129] usb 2-1: USB disconnect, device number 52 [ 401.314120][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.354995][ T5911] usb 3-1: Product: syz [ 401.387923][ T5911] usb 3-1: Manufacturer: syz [ 401.411298][ T5911] usb 3-1: SerialNumber: syz [ 401.469666][ T5911] r8152-cfgselector 3-1: Unknown version 0x0000 [ 401.507919][ T5911] r8152-cfgselector 3-1: config 0 descriptor?? [ 401.538894][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 401.787161][ T43] usb 4-1: config 0 has an invalid interface number: 216 but max is 0 [ 401.843292][ T43] usb 4-1: config 0 has no interface number 0 [ 401.853347][ T43] usb 4-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 401.900649][ T43] usb 4-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.933756][ T43] usb 4-1: config 0 interface 216 has no altsetting 0 [ 401.944411][ T43] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 401.946072][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 401.953798][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.970812][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 401.981589][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 401.982499][ T43] usb 4-1: config 0 descriptor?? [ 401.993720][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 402.019679][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 402.022672][ T9975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.031800][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 402.052469][ T9129] r8152-cfgselector 3-1: USB disconnect, device number 49 [ 402.066816][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 402.079820][ T9988] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 402.082997][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 402.097914][ T43] usb 4-1: NFC: intf ffff88805fc29000 id ffffffff8eb3fac0 [ 402.102085][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 402.328340][ T9129] usb 4-1: USB disconnect, device number 48 [ 403.909183][ T9129] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 404.036040][T10013] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 404.098695][ T9129] usb 3-1: device descriptor read/64, error -71 [ 404.268762][ T43] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 404.369215][ T9129] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 404.383986][T10027] netlink: 'syz.4.1100': attribute type 3 has an invalid length. [ 404.423043][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.450432][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 404.465837][ T43] usb 4-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 404.499819][ T43] usb 4-1: config 219 interface 0 has no altsetting 0 [ 404.528737][ T9129] usb 3-1: device descriptor read/64, error -71 [ 404.536748][ T43] usb 4-1: config 219 interface 0 has no altsetting 1 [ 404.558499][ T43] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 404.585240][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.606356][ T43] usb 4-1: Product: syz [ 404.615659][ T43] usb 4-1: Manufacturer: syz [ 404.632042][ T43] usb 4-1: SerialNumber: syz [ 404.656083][ T9129] usb usb3-port1: attempt power cycle [ 404.900096][ T43] usb 4-1: selecting invalid altsetting 0 [ 404.908273][ T43] usb 4-1: selecting invalid altsetting 0 [ 404.948402][ T43] usb 4-1: USB disconnect, device number 49 [ 405.018894][ T9129] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 405.049490][ T9129] usb 3-1: device descriptor read/8, error -71 [ 405.289029][ T9129] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 405.309453][ T9129] usb 3-1: device descriptor read/8, error -71 [ 405.399188][ T5880] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 405.420071][ T9129] usb usb3-port1: unable to enumerate USB device [ 405.566717][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.578238][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.589107][ T5880] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 405.598201][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.614786][ T5880] usb 2-1: config 0 descriptor?? [ 406.038377][ T5880] usbhid 2-1:0.0: can't add hid device: -71 [ 406.053757][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 406.065318][ T5880] usb 2-1: USB disconnect, device number 53 [ 406.230268][T10059] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 406.892613][T10066] loop2: detected capacity change from 0 to 7 [ 406.914812][T10066] loop2: p1 [ 406.928748][T10066] loop2: partition table partially beyond EOD, truncated [ 406.936114][T10066] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 407.068719][ T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 407.352035][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.367261][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.380010][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 407.389926][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.403072][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.422901][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.461656][ T43] usb 3-1: config 0 descriptor?? [ 407.761291][T10087] __nla_validate_parse: 61 callbacks suppressed [ 407.761313][T10087] netlink: 153 bytes leftover after parsing attributes in process `syz.1.1115'. [ 408.068316][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 408.109054][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 408.193387][ T43] usb 3-1: USB disconnect, device number 54 [ 408.506845][T10096] loop2: detected capacity change from 0 to 7 [ 408.514271][T10096] Dev loop2: unable to read RDB block 7 [ 408.520515][T10096] loop2: AHDI p1 p2 p3 [ 408.524884][T10096] loop2: partition table partially beyond EOD, truncated [ 408.538755][T10096] loop2: p1 start 1601398130 is beyond EOD, truncated [ 408.548614][T10096] loop2: p2 start 1702059890 is beyond EOD, truncated [ 408.828925][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 408.961913][ T30] audit: type=1400 audit(1754243042.242:105): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=10098 comm="syz.2.1119" path="/229" dev="tmpfs" ino=1209 [ 409.108771][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 409.176709][ T43] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 409.240649][ T43] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.281128][ T43] usb 2-1: config 1 has no interface number 1 [ 409.334251][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.480891][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.631930][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.707709][ T43] usb 2-1: Product: syz [ 409.774125][ T43] usb 2-1: Manufacturer: syz [ 409.835702][ T43] usb 2-1: SerialNumber: syz [ 410.084160][ T43] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 410.124305][ T43] usb 2-1: USB disconnect, device number 54 [ 410.275641][T10114] loop2: detected capacity change from 0 to 7 [ 410.285143][T10114] loop2: p1 [ 410.288440][T10114] loop2: partition table partially beyond EOD, truncated [ 410.298796][T10114] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 410.604405][T10116] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 410.611377][T10116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 410.621174][T10116] vhci_hcd vhci_hcd.0: Device attached [ 410.831856][ T9129] vhci_hcd: vhci_device speed not set [ 410.949335][T10118] vhci_hcd: connection closed [ 410.988614][ T1336] vhci_hcd: stop threads [ 411.014420][ T1336] vhci_hcd: release socket [ 411.020507][ T1336] vhci_hcd: disconnect device [ 411.065548][ T9129] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 411.074294][ T9129] usb 33-1: enqueue for inactive port 0 [ 411.439164][ T43] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 411.606661][ T9129] vhci_hcd: vhci_device speed not set [ 411.779880][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 411.922709][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 412.047443][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 412.204054][ T43] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 412.248522][T10122] delete_channel: no stack [ 412.288720][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.312408][ T43] usb 3-1: Product: syz [ 412.316647][ T43] usb 3-1: Manufacturer: syz [ 412.357677][T10130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1128'. [ 412.358512][ T43] usb 3-1: SerialNumber: syz [ 412.475308][T10137] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 412.495236][T10137] netlink: 'syz.1.1127': attribute type 12 has an invalid length. [ 412.532384][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 412.614379][ T43] usb 3-1: config 0 descriptor?? [ 412.627207][T10124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.634771][T10124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 412.653223][ T43] usb 3-1: ucan: probing device on interface #0 [ 412.677469][T10137] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.686841][T10137] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.696428][T10137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.705720][T10137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.770037][T10136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.803153][T10137] netlink: 'syz.1.1127': attribute type 12 has an invalid length. [ 412.854598][ T43] usb 3-1: ucan: device protocol version 416690179 is not supported [ 412.859308][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 412.862881][ T43] usb 3-1: ucan: probe failed; try to update the device firmware [ 413.218231][T10129] ALSA: mixer_oss: invalid OSS volume '' [ 414.329059][ T9129] usb 3-1: USB disconnect, device number 55 [ 414.628723][T10176] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1139'. [ 414.644923][T10177] binder_alloc: binder_alloc_mmap_handler: 10174 200000ffd000-200001000000 already mapped failed -16 [ 414.761360][T10173] syz.2.1137: attempt to access beyond end of device [ 414.761360][T10173] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 414.775867][T10173] gfs2: error -5 reading superblock [ 415.617658][T10175] ALSA: mixer_oss: invalid OSS volume '' [ 415.920878][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 416.148703][ T9129] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 416.438738][ T9129] usb 4-1: Using ep0 maxpacket: 16 [ 416.448249][ T9129] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 416.477637][ T9129] usb 4-1: config 0 has no interface number 0 [ 416.484567][ T9129] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 416.505957][ T9129] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 416.544122][T10208] lo speed is unknown, defaulting to 1000 [ 416.552419][ T9129] usb 4-1: config 0 interface 41 has no altsetting 0 [ 416.569086][ T9129] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 416.583526][ T9129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.596691][ T9129] usb 4-1: Product: syz [ 416.604523][ T9129] usb 4-1: Manufacturer: syz [ 416.627904][ T9129] usb 4-1: SerialNumber: syz [ 416.684336][ T9129] usb 4-1: config 0 descriptor?? [ 416.703960][T10194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.722657][T10194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.778788][T10214] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 416.804364][ T30] audit: type=1326 audit(1754243050.092:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10211 comm="syz.0.1148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0cb78eb69 code=0x0 [ 416.904155][T10218] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 416.910758][T10218] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 416.956424][T10194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.991758][T10194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.075427][T10218] vhci_hcd vhci_hcd.0: Device attached [ 417.249299][ T9134] vhci_hcd: vhci_device speed not set [ 417.265083][ T9129] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -32 [ 417.303007][T10234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 417.309714][T10234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.319311][ T9134] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 417.348642][T10235] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 417.355319][T10235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 417.365043][T10234] vhci_hcd vhci_hcd.0: Device attached [ 417.396856][T10236] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 417.403538][T10236] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 417.428334][T10235] vhci_hcd vhci_hcd.0: Device attached [ 417.457164][T10234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.480340][T10236] vhci_hcd vhci_hcd.0: Device attached [ 417.577956][T10241] vhci_hcd: connection closed [ 417.584248][ T8204] vhci_hcd: stop threads [ 417.595977][T10239] vhci_hcd: connection closed [ 417.608921][ T8204] vhci_hcd: release socket [ 417.690209][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 417.708763][ T9129] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 417.708804][ T8204] vhci_hcd: disconnect device [ 417.721891][T10238] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 417.731806][ T8204] vhci_hcd: stop threads [ 417.736121][ T8204] vhci_hcd: release socket [ 417.742159][T10237] vhci_hcd: connection closed [ 417.745140][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 417.754152][ T8204] vhci_hcd: disconnect device [ 417.766143][ T8204] vhci_hcd: stop threads [ 419.660752][ T8204] vhci_hcd: release socket [ 419.683905][ T5880] usb 4-1: USB disconnect, device number 50 [ 419.695338][ T8204] vhci_hcd: disconnect device [ 419.797711][T10220] vhci_hcd: connection reset by peer [ 419.810171][ T1336] vhci_hcd: stop threads [ 419.814576][ T1336] vhci_hcd: release socket [ 420.176784][ T1336] vhci_hcd: disconnect device [ 421.663588][T10276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.272765][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1163'. [ 422.335873][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1163'. [ 422.389901][T10292] can0: slcan on ttyS3. [ 422.402684][T10295] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1167'. [ 422.478789][ T9134] vhci_hcd: vhci_device speed not set [ 423.013388][ T9129] vhci_hcd: vhci_device speed not set [ 423.254779][T10294] ALSA: mixer_oss: invalid OSS volume '' [ 423.531596][T10292] program syz.2.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.550932][T10292] program syz.2.1165 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.562813][T10292] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 424.047484][ T43] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 424.649381][T10291] can0 (unregistered): slcan off ttyS3. [ 424.818618][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 424.864462][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.926291][T10313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1170'. [ 424.951345][ T43] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 424.975304][T10318] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1172'. [ 425.042366][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.054974][T10316] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1172'. [ 425.100753][ T43] usb 4-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 425.152395][ T43] usb 4-1: Product: syz [ 425.178027][ T43] usb 4-1: Manufacturer: syz [ 425.217060][ T43] usb 4-1: SerialNumber: syz [ 425.501767][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 425.787224][T10336] netlink: 'syz.1.1174': attribute type 2 has an invalid length. [ 425.914191][T10336] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1174'. [ 426.552774][ T43] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 426.625923][T10345] 9pnet_virtio: no channels available for device 127.0.0.1 [ 427.066452][ T43] cdc_ncm 4-1:1.0: bind() failure [ 427.109637][T10344] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 427.142468][ T43] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 427.178046][ T43] cdc_ncm 4-1:1.1: bind() failure [ 427.232585][ T43] usb 4-1: USB disconnect, device number 51 [ 427.775299][ T9151] libceph: connect (1)[c::]:6789 error -101 [ 427.814497][ T9151] libceph: mon0 (1)[c::]:6789 connect error [ 427.882205][T10350] ceph: No mds server is up or the cluster is laggy [ 427.910911][ T43] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 427.927515][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 427.985792][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 428.158585][ T43] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 428.174628][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 428.211585][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 429.618516][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 429.681264][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 429.731452][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.793975][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.821637][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.832496][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.845201][ T43] usb 4-1: config 0 descriptor?? [ 429.848829][T10363] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1180'. [ 429.858085][ T43] usb 4-1: can't set config #0, error -71 [ 429.868434][ T43] usb 4-1: USB disconnect, device number 52 [ 430.684890][T10362] ALSA: mixer_oss: invalid OSS volume '' [ 430.762157][T10369] lo speed is unknown, defaulting to 1000 [ 430.772847][T10376] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 430.823125][T10376] netlink: 'syz.4.1185': attribute type 3 has an invalid length. [ 430.970153][T10376] netlink: 'syz.4.1185': attribute type 3 has an invalid length. [ 432.615810][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 433.024049][T10402] comedi comedi2: c6xdigio: I/O port conflict (0x3,3) [ 433.031085][T10402] ================================================================== [ 433.039191][T10402] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x3d/0x70 [ 433.047214][T10402] Read of size 8 at addr ffff8880253da030 by task syz.4.1192/10402 [ 433.055140][T10402] [ 433.057518][T10402] CPU: 0 UID: 0 PID: 10402 Comm: syz.4.1192 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.057549][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.057573][T10402] Call Trace: [ 433.057586][T10402] [ 433.057596][T10402] dump_stack_lvl+0x189/0x250 [ 433.057627][T10402] ? __virt_addr_valid+0x1c8/0x5c0 [ 433.057656][T10402] ? rcu_is_watching+0x15/0xb0 [ 433.057679][T10402] ? __kasan_check_byte+0x12/0x40 [ 433.057704][T10402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.057729][T10402] ? rcu_is_watching+0x15/0xb0 [ 433.057752][T10402] ? lock_release+0x4b/0x3e0 [ 433.057776][T10402] ? __virt_addr_valid+0x1c8/0x5c0 [ 433.057803][T10402] ? __virt_addr_valid+0x4a5/0x5c0 [ 433.057832][T10402] print_report+0xca/0x240 [ 433.057866][T10402] ? sysfs_remove_file_ns+0x3d/0x70 [ 433.057899][T10402] kasan_report+0x118/0x150 [ 433.057923][T10402] ? sysfs_remove_file_ns+0x3d/0x70 [ 433.057949][T10402] sysfs_remove_file_ns+0x3d/0x70 [ 433.057972][T10402] bus_remove_driver+0x198/0x2f0 [ 433.058013][T10402] comedi_device_detach+0x134/0x720 [ 433.058040][T10402] ? comedi_request_region+0x16c/0x180 [ 433.058072][T10402] comedi_device_attach+0x568/0x670 [ 433.058103][T10402] comedi_unlocked_ioctl+0x686/0xfc0 [ 433.058131][T10402] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 433.058161][T10402] ? __pfx_smack_log+0x10/0x10 [ 433.058191][T10402] ? smk_access+0x14c/0x4e0 [ 433.058226][T10402] ? smk_tskacc+0x2fc/0x370 [ 433.058258][T10402] ? smack_file_ioctl+0x24a/0x340 [ 433.058280][T10402] ? __pfx_smack_file_ioctl+0x10/0x10 [ 433.058306][T10402] ? __fget_files+0x2a/0x420 [ 433.058331][T10402] ? __fget_files+0x3a0/0x420 [ 433.058360][T10402] ? __fget_files+0x2a/0x420 [ 433.058386][T10402] ? bpf_lsm_file_ioctl+0x9/0x20 [ 433.058412][T10402] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 433.058433][T10402] __se_sys_ioctl+0xfc/0x170 [ 433.058468][T10402] do_syscall_64+0xfa/0x3b0 [ 433.058493][T10402] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.058516][T10402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.058538][T10402] ? clear_bhb_loop+0x60/0xb0 [ 433.058561][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.058582][T10402] RIP: 0033:0x7f94ded8eb69 [ 433.058602][T10402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.058623][T10402] RSP: 002b:00007f94dfc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.058647][T10402] RAX: ffffffffffffffda RBX: 00007f94defb5fa0 RCX: 00007f94ded8eb69 [ 433.058664][T10402] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006 [ 433.058679][T10402] RBP: 00007f94dee11df1 R08: 0000000000000000 R09: 0000000000000000 [ 433.058693][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.058707][T10402] R13: 0000000000000000 R14: 00007f94defb5fa0 R15: 00007fffd139b528 [ 433.058733][T10402] [ 433.058740][T10402] [ 433.343005][T10402] Allocated by task 10265: [ 433.347422][T10402] kasan_save_track+0x3e/0x80 [ 433.352127][T10402] __kasan_kmalloc+0x93/0xb0 [ 433.356728][T10402] __kmalloc_noprof+0x27a/0x4f0 [ 433.361598][T10402] io_cache_alloc_new+0x40/0x100 [ 433.366567][T10402] __io_prep_rw+0x23f/0xd80 [ 433.371083][T10402] io_prep_rwv+0x8c/0x3d0 [ 433.375427][T10402] io_submit_sqes+0x90c/0x1c50 [ 433.380224][T10402] __se_sys_io_uring_enter+0x2df/0x2b20 [ 433.385785][T10402] do_syscall_64+0xfa/0x3b0 [ 433.390308][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.396222][T10402] [ 433.398553][T10402] Freed by task 10265: [ 433.402625][T10402] kasan_save_track+0x3e/0x80 [ 433.407325][T10402] kasan_save_free_info+0x46/0x50 [ 433.412377][T10402] __kasan_slab_free+0x62/0x70 [ 433.417146][T10402] kfree+0x18e/0x440 [ 433.421056][T10402] io_clean_op+0x386/0x400 [ 433.425485][T10402] __io_submit_flush_completions+0xc20/0xe40 [ 433.431480][T10402] io_handle_tw_list+0x44e/0x4c0 [ 433.436428][T10402] tctx_task_work_run+0x99/0x370 [ 433.441399][T10402] tctx_task_work+0x3f/0x90 [ 433.445913][T10402] task_work_run+0x1d1/0x260 [ 433.450518][T10402] get_signal+0x11c5/0x1310 [ 433.455030][T10402] arch_do_signal_or_restart+0x9a/0x750 [ 433.460595][T10402] exit_to_user_mode_loop+0x75/0x110 [ 433.465888][T10402] do_syscall_64+0x2bd/0x3b0 [ 433.470492][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.476413][T10402] [ 433.478753][T10402] The buggy address belongs to the object at ffff8880253da000 [ 433.478753][T10402] which belongs to the cache kmalloc-256 of size 256 [ 433.492834][T10402] The buggy address is located 48 bytes inside of [ 433.492834][T10402] freed 256-byte region [ffff8880253da000, ffff8880253da100) [ 433.506556][T10402] [ 433.508896][T10402] The buggy address belongs to the physical page: [ 433.515323][T10402] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880253dba00 pfn:0x253da [ 433.525395][T10402] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 433.533904][T10402] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 433.542424][T10402] page_type: f5(slab) [ 433.546421][T10402] raw: 00fff00000000240 ffff88801a441b40 ffffea0000cbcb10 ffff88801a440708 [ 433.555016][T10402] raw: ffff8880253dba00 0000000000100002 00000000f5000000 0000000000000000 [ 433.563608][T10402] head: 00fff00000000240 ffff88801a441b40 ffffea0000cbcb10 ffff88801a440708 [ 433.572285][T10402] head: ffff8880253dba00 0000000000100002 00000000f5000000 0000000000000000 [ 433.580972][T10402] head: 00fff00000000001 ffffea000094f681 00000000ffffffff 00000000ffffffff [ 433.589658][T10402] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 433.598338][T10402] page dumped because: kasan: bad access detected [ 433.604755][T10402] page_owner tracks the page as allocated [ 433.610487][T10402] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5220, tgid 5220 (udevadm), ts 38851520257, free_ts 38824145591 [ 433.630643][T10402] post_alloc_hook+0x240/0x2a0 [ 433.635423][T10402] get_page_from_freelist+0x21d5/0x22b0 [ 433.640981][T10402] __alloc_frozen_pages_noprof+0x181/0x370 [ 433.646798][T10402] alloc_pages_mpol+0x232/0x4a0 [ 433.651658][T10402] allocate_slab+0x8a/0x3b0 [ 433.656176][T10402] ___slab_alloc+0xbfc/0x1480 [ 433.660862][T10402] __kmalloc_cache_noprof+0x296/0x3d0 [ 433.666241][T10402] smk_fetch+0x95/0x140 [ 433.670415][T10402] smack_d_instantiate+0x837/0x940 [ 433.675537][T10402] security_d_instantiate+0x10a/0x200 [ 433.680926][T10402] d_splice_alias+0x6e/0x330 [ 433.685535][T10402] __lookup_slow+0x297/0x3d0 [ 433.690140][T10402] lookup_slow+0x53/0x70 [ 433.694401][T10402] walk_component+0x2d2/0x400 [ 433.699092][T10402] path_lookupat+0x163/0x430 [ 433.703696][T10402] filename_lookup+0x212/0x570 [ 433.708473][T10402] page last free pid 5206 tgid 5206 stack trace: [ 433.714821][T10402] __free_frozen_pages+0xc65/0xe60 [ 433.719944][T10402] __slab_free+0x326/0x400 [ 433.724372][T10402] qlist_free_all+0x97/0x140 [ 433.728981][T10402] kasan_quarantine_reduce+0x148/0x160 [ 433.734452][T10402] __kasan_slab_alloc+0x22/0x80 [ 433.739307][T10402] __kmalloc_noprof+0x224/0x4f0 [ 433.744169][T10402] tomoyo_realpath_from_path+0xe3/0x5d0 [ 433.749729][T10402] tomoyo_check_open_permission+0x1c1/0x3b0 [ 433.755631][T10402] security_file_open+0xb1/0x270 [ 433.760578][T10402] do_dentry_open+0x35e/0x1970 [ 433.765355][T10402] vfs_open+0x3b/0x340 [ 433.769435][T10402] path_openat+0x2ee5/0x3830 [ 433.774046][T10402] do_filp_open+0x1fa/0x410 [ 433.778573][T10402] do_sys_openat2+0x121/0x1c0 [ 433.783290][T10402] __x64_sys_openat+0x138/0x170 [ 433.788181][T10402] do_syscall_64+0xfa/0x3b0 [ 433.792702][T10402] [ 433.795030][T10402] Memory state around the buggy address: [ 433.800666][T10402] ffff8880253d9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.808761][T10402] ffff8880253d9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.816830][T10402] >ffff8880253da000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.824898][T10402] ^ [ 433.830536][T10402] ffff8880253da080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 433.838619][T10402] ffff8880253da100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 433.846717][T10402] ================================================================== [ 433.855826][T10402] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 433.863108][T10402] CPU: 1 UID: 0 PID: 10402 Comm: syz.4.1192 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.873128][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.883225][T10402] Call Trace: [ 433.886541][T10402] [ 433.889504][T10402] dump_stack_lvl+0x99/0x250 [ 433.894147][T10402] ? __asan_memcpy+0x40/0x70 [ 433.898790][T10402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.904029][T10402] ? __pfx__printk+0x10/0x10 [ 433.908750][T10402] panic+0x2db/0x790 [ 433.912682][T10402] ? __pfx_preempt_schedule+0x10/0x10 [ 433.918103][T10402] ? __pfx_panic+0x10/0x10 [ 433.922565][T10402] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 433.928513][T10402] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 433.934903][T10402] ? sysfs_remove_file_ns+0x3d/0x70 [ 433.940153][T10402] check_panic_on_warn+0x89/0xb0 [ 433.945148][T10402] ? sysfs_remove_file_ns+0x3d/0x70 [ 433.950387][T10402] end_report+0x78/0x160 [ 433.954674][T10402] kasan_report+0x129/0x150 [ 433.959221][T10402] ? sysfs_remove_file_ns+0x3d/0x70 [ 433.964467][T10402] sysfs_remove_file_ns+0x3d/0x70 [ 433.969533][T10402] bus_remove_driver+0x198/0x2f0 [ 433.974518][T10402] comedi_device_detach+0x134/0x720 [ 433.979757][T10402] ? comedi_request_region+0x16c/0x180 [ 433.985245][T10402] comedi_device_attach+0x568/0x670 [ 433.990478][T10402] comedi_unlocked_ioctl+0x686/0xfc0 [ 433.995886][T10402] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 434.001721][T10402] ? __pfx_smack_log+0x10/0x10 [ 434.007121][T10402] ? smk_access+0x14c/0x4e0 [ 434.011655][T10402] ? smk_tskacc+0x2fc/0x370 [ 434.016183][T10402] ? smack_file_ioctl+0x24a/0x340 [ 434.021228][T10402] ? __pfx_smack_file_ioctl+0x10/0x10 [ 434.026716][T10402] ? __fget_files+0x2a/0x420 [ 434.031322][T10402] ? __fget_files+0x3a0/0x420 [ 434.036012][T10402] ? __fget_files+0x2a/0x420 [ 434.040617][T10402] ? bpf_lsm_file_ioctl+0x9/0x20 [ 434.045567][T10402] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 434.051385][T10402] __se_sys_ioctl+0xfc/0x170 [ 434.055999][T10402] do_syscall_64+0xfa/0x3b0 [ 434.060521][T10402] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.065733][T10402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.071811][T10402] ? clear_bhb_loop+0x60/0xb0 [ 434.076504][T10402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.082408][T10402] RIP: 0033:0x7f94ded8eb69 [ 434.086835][T10402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.106462][T10402] RSP: 002b:00007f94dfc10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.114981][T10402] RAX: ffffffffffffffda RBX: 00007f94defb5fa0 RCX: 00007f94ded8eb69 [ 434.122961][T10402] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000006 [ 434.130954][T10402] RBP: 00007f94dee11df1 R08: 0000000000000000 R09: 0000000000000000 [ 434.138935][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.146914][T10402] R13: 0000000000000000 R14: 00007f94defb5fa0 R15: 00007fffd139b528 [ 434.154916][T10402] [ 434.158347][T10402] Kernel Offset: disabled [ 434.162692][T10402] Rebooting in 86400 seconds..