last executing test programs: 17m43.07724262s ago: executing program 32 (id=1): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0xfe, 0x0}, 0x0, 0x1, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in6=@loopback, 0x10, 0x5, 0x3, 0xb7}}, 0xe8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 16m56.089539452s ago: executing program 33 (id=68): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_init_net_socket$ax25(0x3, 0x2, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 16m52.606330197s ago: executing program 34 (id=72): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[], 0x23c}}, 0x20000091) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a00000000000000040000"], 0x50}}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x2, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0xfffffffffffffffe, r6, r5}) 14m43.316907208s ago: executing program 35 (id=400): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 14m42.326186222s ago: executing program 36 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000805000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 14m40.800571955s ago: executing program 37 (id=416): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) 14m39.328724103s ago: executing program 38 (id=429): rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) io_setup(0x7, &(0x7f0000001e00)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000000140)=[{}, {}, {}], 0x0) io_destroy(r0) 12m44.407340279s ago: executing program 6 (id=1150): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 12m44.135199463s ago: executing program 6 (id=1153): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) timerfd_create(0x0, 0x0) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x8234a50b338765ba, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12m43.595506184s ago: executing program 6 (id=1160): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) sendmmsg$unix(r1, &(0x7f000000a500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r3}}}], 0x40, 0x80}}], 0x1, 0x0) 12m43.283807801s ago: executing program 6 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9) 12m42.897022119s ago: executing program 6 (id=1168): io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 12m40.583577682s ago: executing program 6 (id=1181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) sendmmsg$inet6(r1, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="891e52", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000) 12m40.132800788s ago: executing program 39 (id=1181): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) sendmmsg$inet6(r1, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="891e52", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000) 12m26.948699281s ago: executing program 9 (id=1253): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r1 = syz_io_uring_setup(0x52a, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x261, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) 12m25.902932824s ago: executing program 9 (id=1259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x3a, 0x0, 0x1, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0xffffffffffffffff}, 0x0, 0x0) shutdown(r0, 0x0) 12m24.563467144s ago: executing program 9 (id=1264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40002002) 12m24.218103708s ago: executing program 9 (id=1265): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 12m23.91515715s ago: executing program 9 (id=1266): recvmsg(0xffffffffffffffff, 0x0, 0x61) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 12m22.904353053s ago: executing program 9 (id=1270): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m22.497872373s ago: executing program 40 (id=1270): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m2.146840608s ago: executing program 3 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x52000a11) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 12m1.587465723s ago: executing program 3 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) 12m1.243166231s ago: executing program 3 (id=1382): socket$nl_netfilter(0x10, 0x3, 0xc) openat$full(0xffffffffffffff9c, 0x0, 0x4082c0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 12m1.003309282s ago: executing program 3 (id=1385): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) 12m0.1497968s ago: executing program 3 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11m59.711738214s ago: executing program 3 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0xc048851}, 0x8094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 11m44.530615891s ago: executing program 41 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=ANY=[@ANYBLOB="20000000170a0103000000000000000002000008090001"], 0x20}, 0x1, 0x0, 0x0, 0xc048851}, 0x8094) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 10m47.319420403s ago: executing program 2 (id=1620): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 10m40.498869736s ago: executing program 2 (id=1635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 10m29.190738297s ago: executing program 2 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 10m27.956158082s ago: executing program 2 (id=1662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000180)={0x4, 0x7000, 0x8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x344) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x8, 0x4, 0x4004, 0x1000, 0x4000ee, 0x0, 0x7fffffffffffb, 0x5, 0x10000000000000, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x347255}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, 0x0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 10m26.012950622s ago: executing program 2 (id=1667): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m20.219297209s ago: executing program 2 (id=1679): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 10m4.868926017s ago: executing program 42 (id=1679): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 4m29.978222589s ago: executing program 7 (id=3804): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, 0x0) write$P9_RLOPEN(r3, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2818000, &(0x7f00000001c0)={[{@grpquota_inode_hardlimit}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) unshare(0x22020400) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$inet_nvme_icreq_pdu(r7, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m28.643210646s ago: executing program 7 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 4m28.052128288s ago: executing program 7 (id=3816): syz_open_dev$video4linux(&(0x7f0000000040), 0x159bf131, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x15, 0x5, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r0], 0x0) 4m24.885534181s ago: executing program 7 (id=3856): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 4m24.631604694s ago: executing program 7 (id=3859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@multicast2, @in=@private=0xa010102, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x40000000000004, 0x3, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c004010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0xa010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 4m23.939428247s ago: executing program 7 (id=3870): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4m23.385278515s ago: executing program 43 (id=3870): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 17.015483596s ago: executing program 8 (id=5470): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) sendmsg(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0}, 0x40000) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r3, 0x102, 0x1) 16.918102946s ago: executing program 4 (id=5473): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x129081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f00000000c0)=""/36, 0x0) 14.264629697s ago: executing program 8 (id=5476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002019d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 13.951354403s ago: executing program 4 (id=5477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) 11.31889238s ago: executing program 8 (id=5482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) 11.220057759s ago: executing program 0 (id=5483): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) gettid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='fd\xb6(\xa9%', &(0x7f00000000c0)='\x0f', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x17}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x2e]}}, 0x0, 0x2b, 0x0, 0x9, 0xfff}, 0x28) 11.044591979s ago: executing program 4 (id=5485): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000000c40)=""/261, 0x105}], 0x1, 0x40000004, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB=',cache=mmap,subj_user=+,smackfstransmute=%$-{']) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840d0"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 9.675207631s ago: executing program 0 (id=5487): openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="cf9fe76d2b0f767220cfec14923d860a0048f5f8fc30f92d1f2279087b0bfa672e4768dfec0c86f942b1e1974cdce8bbd76fb84b7154fb5c02f311c10a421f8bcad6ef11af09cf55fc7952b3c00ca8f84ca5a7a6ecff8473f3c0b219637e7a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="2f0000000600000000000000000000000400000000000000030000000000000006000000000000007663616e300000"], 0x2f) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 9.431301835s ago: executing program 5 (id=5488): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(0x3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20040054) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x3, 0xb, 0x0, 0x1}, &(0x7f0000000180)=0x14) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{0x4, 0x9, 0xb8, 0xf09}, {0x8, 0x4d, 0x0, 0x401}, {0x4091, 0x22, 0x9, 0x4}, {0x2, 0x1, 0x9, 0xb7}, {0x5, 0x8, 0x7, 0x1ff}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 8.306542896s ago: executing program 0 (id=5489): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8080) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0xffffff11, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x8}}, 0x20) r2 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x1000) fanotify_mark(r8, 0x105, 0x5000003a, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) 8.283048445s ago: executing program 4 (id=5491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002019d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 8.199479555s ago: executing program 8 (id=5492): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a}, 0x0) 7.158339638s ago: executing program 5 (id=5493): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x80800}) listen(r4, 0x5) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 5.955958986s ago: executing program 1 (id=5494): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) ptrace$peekuser(0x3, r1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r4, 0x4b2) keyctl$setperm(0x5, r4, 0x40808) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.691492255s ago: executing program 8 (id=5495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) 3.260735902s ago: executing program 1 (id=5496): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r6 = openat(0xffffffffffffff9c, 0x0, 0x14b302, 0x8c) pwritev2(r6, &(0x7f0000000100), 0x0, 0x5412, 0x0, 0x0) fstat(r5, 0x0) sendfile(r5, r5, &(0x7f00000000c0)=0x7, 0x6fecb1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) 3.240938853s ago: executing program 0 (id=5497): socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x20000014) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x8994, 0x0) sendmsg$kcm(r2, 0x0, 0xfc40) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3.222659553s ago: executing program 5 (id=5498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.135916807s ago: executing program 4 (id=5499): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) gettimeofday(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @private=0x10}, {0x306, @broadcast}, 0x0, {0x2, 0x4e22, @local}, 'veth1_virt_wifi\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407f9, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @empty}, &(0x7f0000000200)=0xc) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007bd, 0x0, 0x0) 2.768978475s ago: executing program 5 (id=5500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$VT_DISALLOCATE(r1, 0x5608) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 2.767732998s ago: executing program 0 (id=5501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r2, 0x9, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0xcf, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100), 0x10}}], 0x2, 0x45) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x104) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/214, &(0x7f0000000180)=0xd6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) 2.711269803s ago: executing program 1 (id=5502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) 2.685206164s ago: executing program 8 (id=5503): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) 1.340061521s ago: executing program 1 (id=5504): accept(0xffffffffffffffff, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000004c0), &(0x7f0000000400)=r3}, 0x20) 636.294708ms ago: executing program 5 (id=5505): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x92, 0x0) 516.472659ms ago: executing program 1 (id=5506): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x80000000, @empty, 0xe}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffffc]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xfffeffff}, &(0x7f0000000380), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x0) 502.724877ms ago: executing program 0 (id=5507): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) 500.024874ms ago: executing program 4 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r1 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) r7 = inotify_init1(0x80800) inotify_add_watch(r7, 0x0, 0x10000200) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 423.822788ms ago: executing program 5 (id=5509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002019d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 0s ago: executing program 1 (id=5510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) socket$inet(0x2b, 0x801, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, 0x0, 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): from 1 choice [ 840.395765][ T7332] usb 1-1: USB disconnect, device number 18 [ 840.533097][ T5799] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 840.689532][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.689567][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.689607][ T5799] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 840.689630][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.710375][ T5799] usb 2-1: config 0 descriptor?? [ 841.166440][ T5799] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 841.166480][ T5799] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 841.166507][ T5799] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 841.166533][ T5799] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 841.166559][ T5799] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 841.235914][ T5799] asus 0003:0B05:1ABE.0015: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 841.399245][ T5799] usb 2-1: USB disconnect, device number 22 [ 841.432893][ T7332] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 841.584048][ T7332] usb 1-1: Using ep0 maxpacket: 16 [ 841.589148][ T7332] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.589184][ T7332] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.589209][ T7332] usb 1-1: config 0 interface 0 has no altsetting 0 [ 841.589247][ T7332] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 841.589272][ T7332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.600920][ T7332] usb 1-1: config 0 descriptor?? [ 841.815099][T14418] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 841.965912][T14418] usb 9-1: Using ep0 maxpacket: 32 [ 841.971832][T14418] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.971931][T14418] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.971974][T14418] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 841.971999][T14418] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.020576][T14418] usb 9-1: config 0 descriptor?? [ 842.304625][ T7332] hid (null): unknown global tag 0x7d [ 842.304653][ T7332] hid (null): unknown global tag 0xed [ 842.305718][ T7332] hid (null): global environment stack underflow [ 842.481763][T14418] koneplus 0003:1E7D:2D51.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 842.615916][ T31] usb 1-1: USB disconnect, device number 19 [ 842.635017][T14418] koneplus 0003:1E7D:2D51.0017: couldn't init struct koneplus_device [ 842.635084][T14418] koneplus 0003:1E7D:2D51.0017: couldn't install mouse [ 842.691634][T14418] koneplus 0003:1E7D:2D51.0017: probe with driver koneplus failed with error -32 [ 842.708129][T14418] usb 9-1: USB disconnect, device number 25 [ 842.828360][T16968] fido_id[16968]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 843.054762][T14418] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 843.207409][T14418] usb 2-1: Using ep0 maxpacket: 8 [ 843.209509][T14418] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 843.209539][T14418] usb 2-1: config 0 has no interface number 0 [ 843.209584][T14418] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 843.209603][T14418] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 843.209619][T14418] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 843.209634][T14418] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 843.209661][T14418] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 843.209678][T14418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.321170][T14418] usb 2-1: config 0 descriptor?? [ 843.342278][T14418] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 843.479625][T16985] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3031'. [ 843.564867][T15585] usb 2-1: USB disconnect, device number 23 [ 843.584181][T15585] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 844.003974][T14418] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 844.183507][T16997] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3036'. [ 844.207804][T14418] usb 1-1: Using ep0 maxpacket: 32 [ 844.214465][T14418] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 844.214494][T14418] usb 1-1: config 0 has no interface number 0 [ 844.217045][T14418] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 844.217084][T14418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.217105][T14418] usb 1-1: Product: syz [ 844.217138][T14418] usb 1-1: Manufacturer: syz [ 844.217152][T14418] usb 1-1: SerialNumber: syz [ 844.254749][T14418] usb 1-1: config 0 descriptor?? [ 844.294191][T14418] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 844.508773][T17003] tipc: Started in network mode [ 844.508808][T17003] tipc: Node identity ac14140f, cluster identity 4711 [ 844.509192][T17003] tipc: New replicast peer: 255.255.255.255 [ 844.510374][T17003] tipc: Enabled bearer , priority 10 [ 844.515581][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3039'. [ 844.515604][T17003] tipc: Disabling bearer [ 844.559978][T14418] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 844.617535][T14418] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 844.921248][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 844.926177][ T31] usb 1-1: USB disconnect, device number 20 [ 844.985817][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 845.010478][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 845.011432][ T31] quatech2 1-1:0.51: device disconnected [ 845.104580][T17009] tap0: tun_chr_ioctl cmd 2147767520 [ 846.138127][T17034] IPv6: NLM_F_CREATE should be specified when creating new route [ 846.771374][T17058] tipc: Started in network mode [ 846.771409][T17058] tipc: Node identity ac14140f, cluster identity 4711 [ 846.771757][T17058] tipc: New replicast peer: 255.255.255.255 [ 846.776514][T17058] tipc: Enabled bearer , priority 10 [ 846.864144][ T31] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 846.925668][T17064] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 847.012879][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 847.015369][ T31] usb 9-1: config 1 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 847.015404][ T31] usb 9-1: config 1 interface 0 has no altsetting 0 [ 847.018539][ T31] usb 9-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 847.018568][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.018589][ T31] usb 9-1: Product: syz [ 847.018604][ T31] usb 9-1: Manufacturer: syz [ 847.018619][ T31] usb 9-1: SerialNumber: syz [ 847.079586][T17067] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3070'. [ 847.096851][T17068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3071'. [ 847.096881][T17068] netlink: 'syz.1.3071': attribute type 6 has an invalid length. [ 847.096895][T17068] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3071'. [ 847.267323][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.267909][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.270967][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.271600][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.330951][ T31] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input32 [ 847.433463][T17080] [U] u*ß+RÄš‡…,4 [ 847.433489][T17080] [U] R*Ã*> [ 847.433511][T17080] [U] øÅ–Œ¡ªá S­‹í¸ΗIxVì,üx—É¡#ò9²pCÈK/‰Ðán—@ôD`þ³‹8쾞½ÂñÄF†úØÝo6Gþ‰Â±tòÔ‘¢´eLM‘'—ð…à5üý/#žk뿦ÔÈÊüÛõ¯'æT u= 'bÉÆ~mJCWäfy-ŽÖ×W€BKYW ŒØÛܘ]M [ 847.433534][T17080] [U] Ñy+2¡ïN9É^á®É„DLc[×l‰~L\À!à >Jøh‰i[“+7&¬p 45©?¬ùÙi`Z®DëÅÍ ûäi® [ 847.433547][T17080] [U] 1ÐQéÀ2!8ﶌí)rFº>Þ|KºS!9Æê>Ù¼¤‘í4[x*LÊ™9uÁ [ 847.433571][T17080] [U] öÝ#°Â ©< ;¦©ÏÈ%Ô×jŒÀ: £áJ¼—¹]é/¶#_IŒžSU Ò#]Ry€D¿í—^ÚIpbÃÖð6v`¦ž§—ÂÛ~JFH­ÎºÝÃ!rþ‰[¸Uo˪8yß‘œÇÀ“EÓ7¿=8WÀÜÜÜ¡æßÒB:4öÒu bl [ 847.433595][T17080] [U] Í{“^À– J‚,eU*Ü#^,Î\sòyÕÔ±S¸¡mdJôBþ`y»ëÆ‚x´[!jª¹O“Ó]“MÎ~fÏäó‡Ro˜æ8JeÉãðÕæ’ÃXx#(Z«ÊæäÉ}T5|O¨ò¿ßyKˆFö_ô¹ªñXîé-=.vŒ¼ËŠº¬töÆ× [ 847.434148][T17079] [U] ï [ 847.459527][ T31] usb 9-1: USB disconnect, device number 26 [ 847.532898][T15585] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 847.666968][ T31] appletouch 9-1:1.0: input: appletouch disconnected [ 847.686033][T15585] usb 2-1: unable to get BOS descriptor or descriptor too short [ 847.692546][T15585] usb 2-1: string descriptor 0 read error: -22 [ 847.696567][T15585] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 847.696595][T15585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.833306][ T5954] tipc: Node number set to 2886997007 [ 848.679666][T15585] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 848.879336][T15585] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 849.095612][T15585] usb 2-1: USB disconnect, device number 24 [ 849.103000][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 849.233805][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3092'. [ 849.552877][ T5799] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 849.703355][ T5799] usb 6-1: Using ep0 maxpacket: 32 [ 849.707861][ T5799] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 849.707891][ T5799] usb 6-1: config 0 has no interface number 0 [ 849.720173][ T5799] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 849.720203][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.720222][ T5799] usb 6-1: Product: syz [ 849.720235][ T5799] usb 6-1: Manufacturer: syz [ 849.720248][ T5799] usb 6-1: SerialNumber: syz [ 849.796154][ T5799] usb 6-1: config 0 descriptor?? [ 849.845234][ T5799] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 850.104595][ T5799] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 850.171841][ T5799] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 850.540931][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 850.548389][ T5799] usb 6-1: USB disconnect, device number 15 [ 850.575267][ T5799] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 850.587500][ T5799] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 850.588419][ T5799] quatech2 6-1:0.51: device disconnected [ 850.882519][T17146] netlink: 'syz.8.3105': attribute type 21 has an invalid length. [ 850.882568][T17146] netlink: 'syz.8.3105': attribute type 6 has an invalid length. [ 850.882577][T17146] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3105'. [ 851.042888][T14418] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 851.192902][T14418] usb 1-1: Using ep0 maxpacket: 8 [ 851.195500][T14418] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 851.195531][T14418] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 851.195554][T14418] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 851.195575][T14418] usb 1-1: config 250 has no interface number 0 [ 851.195628][T14418] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 851.195657][T14418] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 851.195685][T14418] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 851.195708][T14418] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 851.195734][T14418] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 851.195764][T14418] usb 1-1: config 250 interface 228 has no altsetting 0 [ 851.199796][T14418] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 851.199826][T14418] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 851.199847][T14418] usb 1-1: Product: syz [ 851.199862][T14418] usb 1-1: SerialNumber: syz [ 851.247654][T14418] hub 1-1:250.228: bad descriptor, ignoring hub [ 851.247694][T14418] hub 1-1:250.228: probe with driver hub failed with error -5 [ 851.392944][ T7332] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 851.511501][T14418] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 21 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 851.557966][ T7332] usb 2-1: Using ep0 maxpacket: 8 [ 851.609822][ T7332] usb 2-1: unable to get BOS descriptor or descriptor too short [ 851.629392][ T7332] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 851.629444][ T7332] usb 2-1: can't read configurations, error -71 [ 852.306786][T14418] usb 1-1: reset high-speed USB device number 21 using dummy_hcd [ 852.858162][T17174] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.3117'. [ 852.935236][ T5954] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 853.103244][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 853.119308][T14418] usb 1-1: USB disconnect, device number 21 [ 853.134770][ T5954] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 853.134804][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.134826][ T5954] usb 2-1: Product: syz [ 853.134841][ T5954] usb 2-1: Manufacturer: syz [ 853.134856][ T5954] usb 2-1: SerialNumber: syz [ 853.147238][T14418] usblp0: removed [ 853.192038][ T5954] usb 2-1: config 0 descriptor?? [ 853.367373][ T5954] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 853.367427][ T5954] pctv452e: pctv452e_power_ctrl: 1 [ 853.367427][ T5954] [ 853.367480][ T5954] usb 2-1: selecting invalid altsetting 3 [ 853.367497][ T5954] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 853.367497][ T5954] [ 853.367514][ T5954] dvb-usb: bulk message failed: -22 (5/0) [ 853.418217][T17172] dvb-usb: bulk message failed: -22 (7/0) [ 853.418240][T17172] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 853.451763][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.452662][ T5954] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 853.470855][ T5954] usb 2-1: media controller created [ 853.471776][ T5954] dvb-usb: bulk message failed: -22 (8/0) [ 853.471799][ T5954] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 853.471983][ T5954] dvb-usb: MAC address reading failed. [ 853.531435][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.744489][ T5954] DVB: Unable to find symbol stb0899_attach() [ 853.744508][ T5954] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 853.942853][ T5954] rc_core: IR keymap rc-tt-1500 not found [ 853.942878][ T5954] Registered IR keymap rc-empty [ 853.963658][ T5954] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 853.967424][ T5954] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input33 [ 853.996510][ T5954] dvb-usb: schedule remote query interval to 100 msecs. [ 853.996535][ T5954] pctv452e: pctv452e_power_ctrl: 0 [ 853.996535][ T5954] [ 853.996547][ T5954] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 854.002505][ T5954] usb 2-1: USB disconnect, device number 27 [ 854.148816][ T5954] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 854.229653][T17196] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3133'. [ 854.874001][ T5954] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 855.028624][ T5954] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 855.028646][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.059321][ T5954] usb 6-1: config 0 descriptor?? [ 855.079032][T17220] qrtr: Invalid version 0 [ 855.382537][ T5954] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 855.600020][ T5954] [drm:udl_init] *ERROR* Selecting channel failed [ 855.702522][ T5954] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 855.702549][ T5954] [drm] Initialized udl on minor 2 [ 855.719483][ T5954] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 855.733650][ T5954] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 855.768474][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 855.789534][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 855.789790][ T31] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 855.821893][ T5954] usb 6-1: USB disconnect, device number 16 [ 856.778656][T17241] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3142'. [ 857.157855][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'. [ 858.029924][ T7332] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 858.073365][T17268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3155'. [ 858.192864][ T7332] usb 6-1: Using ep0 maxpacket: 8 [ 858.195475][ T7332] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 858.195507][ T7332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.251036][ T7332] pvrusb2: Hardware description: Terratec Grabster AV400 [ 858.251057][ T7332] pvrusb2: ********** [ 858.251065][ T7332] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 858.251078][ T7332] pvrusb2: Important functionality might not be entirely working. [ 858.251087][ T7332] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 858.251099][ T7332] pvrusb2: ********** [ 858.466134][ T2366] pvrusb2: Invalid write control endpoint [ 858.619936][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3163'. [ 858.707347][T17264] pvrusb2: Invalid write control endpoint [ 858.709846][ T7332] usb 6-1: USB disconnect, device number 17 [ 858.768541][ T6601] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 858.840134][ T2366] pvrusb2: Invalid write control endpoint [ 858.840152][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 858.840163][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 858.840172][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 858.840183][ T2366] pvrusb2: Device being rendered inoperable [ 858.888327][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 858.888393][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 859.000156][ T2366] pvrusb2: Attached sub-driver cx25840 [ 859.000169][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 859.000175][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 860.039858][T17321] program syz.7.3178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 860.712848][T14418] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 860.863466][T14418] usb 6-1: Using ep0 maxpacket: 16 [ 860.871902][T14418] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 860.871939][T14418] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.871961][T14418] usb 6-1: Product: syz [ 860.871975][T14418] usb 6-1: Manufacturer: syz [ 860.871990][T14418] usb 6-1: SerialNumber: syz [ 861.134099][T14418] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 861.145060][T14418] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 861.145569][T14418] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 861.145624][T14418] usb 6-1: media controller created [ 861.184782][T14418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.202911][ T5954] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 861.356680][ T5954] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 861.356713][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.383963][ T5954] usb 1-1: config 0 descriptor?? [ 861.400100][ T5954] cp210x 1-1:0.0: cp210x converter detected [ 861.456652][T14418] zl10353_read_register: readreg error (reg=127, ret==-110) [ 861.569513][T14418] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 861.600305][T14418] usb 6-1: USB disconnect, device number 18 [ 861.713714][T17358] input: syz1 as /devices/virtual/input/input35 [ 861.820830][ T5954] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 861.848423][ T5954] usb 1-1: cp210x converter now attached to ttyUSB0 [ 862.032780][ T5954] usb 1-1: USB disconnect, device number 22 [ 862.053776][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 862.125692][T17366] loop2: detected capacity change from 0 to 7 [ 862.129882][T17366] Dev loop2: unable to read RDB block 7 [ 862.129930][T17366] loop2: unable to read partition table [ 862.130186][T17366] loop2: partition table beyond EOD, truncated [ 862.130227][T17366] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 862.158038][ T31] kernel read not supported for file /dsp1 (pid: 31 comm: kworker/1:0) [ 862.167537][T15585] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 862.243548][ T5954] cp210x 1-1:0.0: device disconnected [ 862.315244][T15585] usb 9-1: Using ep0 maxpacket: 16 [ 862.319084][T15585] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 862.319123][T15585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.342413][T15585] usb 9-1: config 0 descriptor?? [ 862.381070][T15585] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 862.542444][T17373] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3199'. [ 863.183033][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 863.202490][ T37] audit: type=1326 audit(1774860785.555:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17385 comm="syz.0.3206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff33cfdc799 code=0x0 [ 863.253491][T15585] gspca_sonixj: reg_r err -71 [ 863.253603][T15585] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 863.272406][ T5954] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 863.273870][T15585] usb 9-1: USB disconnect, device number 27 [ 863.340943][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3207'. [ 863.457480][ T5954] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 863.457508][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0 [ 863.460344][ T5954] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 863.460379][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 863.460391][ T5954] usb 6-1: Product: syz [ 863.460400][ T5954] usb 6-1: Manufacturer: syz [ 863.460408][ T5954] usb 6-1: SerialNumber: syz [ 863.509937][ T5954] usb 6-1: config 0 descriptor?? [ 863.542492][T17394] program syz.7.3209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.560351][ T5954] usb 6-1: selecting invalid altsetting 0 [ 863.950446][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3212'. [ 864.010891][T15585] usb 6-1: USB disconnect, device number 19 [ 864.312962][T17407] UHID_CREATE from different security context by process 1261 (syz.1.3215), this is not allowed. [ 864.644194][T17414] bond0 (unregistering): Released all slaves [ 864.837041][T17427] netlink: 'syz.0.3225': attribute type 25 has an invalid length. [ 864.837066][T17427] netlink: 'syz.0.3225': attribute type 28 has an invalid length. [ 865.122860][T15585] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 865.287086][T15585] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 865.287123][T15585] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.287148][T15585] usb 9-1: config 0 interface 0 has no altsetting 0 [ 865.287185][T15585] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 865.287211][T15585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.345884][T15585] usb 9-1: config 0 descriptor?? [ 865.605768][T17456] netlink: 'syz.1.3239': attribute type 3 has an invalid length. [ 865.605792][T17456] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3239'. [ 865.809714][T15585] hid-steam 0003:28DE:1102.0018: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 865.867549][T15585] hid-steam 0003:28DE:1102.0018: Steam Controller 'XXXXXXXXXX' connected [ 865.888841][T15585] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.0018/input/input36 [ 866.068267][T17472] sg_write: process 1476 (syz.0.3247) changed security contexts after opening file descriptor, this is not allowed. [ 866.104454][T15585] hid-steam 0003:28DE:1102.0019: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0 [ 866.194417][T15585] usb 9-1: USB disconnect, device number 28 [ 866.461483][T17473] fido_id[17473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 866.488160][T15585] hid-steam 0003:28DE:1102.0018: Steam Controller 'XXXXXXXXXX' disconnected [ 867.177300][T17517] input: syz1 as /devices/virtual/input/input37 [ 868.162910][ T31] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 868.320748][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 868.345593][ T31] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 868.345628][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.345647][ T31] usb 9-1: Product: syz [ 868.345660][ T31] usb 9-1: Manufacturer: syz [ 868.345673][ T31] usb 9-1: SerialNumber: syz [ 868.638872][ T31] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 868.675987][ T31] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 868.676494][ T31] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 868.676553][ T31] usb 9-1: media controller created [ 868.721637][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.977934][ T31] zl10353_read_register: readreg error (reg=127, ret==-110) [ 869.046279][ T31] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 869.064876][ T31] usb 9-1: USB disconnect, device number 29 [ 869.080383][T13578] udevd[13578]: setting mode of /dev/bus/usb/009/029 to 020664 failed: No such file or directory [ 869.080604][T13578] udevd[13578]: setting owner of /dev/bus/usb/009/029 to uid=0, gid=0 failed: No such file or directory [ 869.432480][T17613] program syz.1.3313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.245895][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.245971][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.755598][T17662] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 871.167593][T17674] netlink: 'syz.8.3342': attribute type 3 has an invalid length. [ 871.372905][ T7332] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 871.530346][ T7332] usb 1-1: Using ep0 maxpacket: 16 [ 871.546317][ T7332] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 871.546355][ T7332] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.546382][ T7332] usb 1-1: config 0 interface 0 has no altsetting 0 [ 871.546420][ T7332] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 871.546443][ T7332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.581636][ T7332] usb 1-1: config 0 descriptor?? [ 872.012243][ T7332] hid_parser_main: 437 callbacks suppressed [ 872.012272][ T7332] logitech 0003:046D:C24F.001A: unknown main item tag 0x6 [ 872.012304][ T7332] logitech 0003:046D:C24F.001A: invalid report_size 26545 [ 872.012321][ T7332] logitech 0003:046D:C24F.001A: item 0 2 1 7 parsing failed [ 872.021081][ T7332] logitech 0003:046D:C24F.001A: parse failed [ 872.021197][ T7332] logitech 0003:046D:C24F.001A: probe with driver logitech failed with error -22 [ 872.143003][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 872.198847][ T5954] usb 1-1: USB disconnect, device number 23 [ 872.702629][T17743] random: crng reseeded on system resumption [ 873.322912][ T5954] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 873.475245][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 873.475282][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 873.475309][ T5954] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 873.478381][ T5954] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 873.478409][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.478432][ T5954] usb 1-1: Product: syz [ 873.478447][ T5954] usb 1-1: Manufacturer: syz [ 873.478461][ T5954] usb 1-1: SerialNumber: syz [ 873.549511][ T5954] usb 1-1: config 0 descriptor?? [ 873.550770][T17760] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 873.551057][T17760] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 873.576343][ T5954] usb 1-1: ucan: probing device on interface #0 [ 874.228317][T17792] futex_wake_op: syz.7.3396 tries to shift op by 32; fix this program [ 874.293909][ T5954] ucan 1-1:0.0 can0: registered device [ 874.374031][ T5954] ucan 1-1:0.0 can0: firmware string: ‡ [ 874.499375][T17803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 874.575177][ T7332] usb 1-1: USB disconnect, device number 24 [ 875.059689][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 875.067311][T17829] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 875.067336][T17829] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 875.231122][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 876.647828][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'. [ 877.054708][T17894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3443'. [ 877.733175][T17917] netlink: 49 bytes leftover after parsing attributes in process `syz.1.3455'. [ 877.733201][T17917] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3455'. [ 877.733223][T17917] netlink: 49 bytes leftover after parsing attributes in process `syz.1.3455'. [ 878.090178][T17927] netlink: 4740 bytes leftover after parsing attributes in process `syz.7.3460'. [ 878.090209][T17927] netlink: 4740 bytes leftover after parsing attributes in process `syz.7.3460'. [ 878.090225][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3460'. [ 878.282990][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 878.432820][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 878.437503][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 878.437535][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 878.437560][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 878.437584][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.437630][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 878.437653][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.776686][ T31] usb 2-1: usb_control_msg returned -32 [ 878.776741][ T31] usbtmc 2-1:16.0: can't read capabilities [ 878.911052][ T31] usb 2-1: USB disconnect, device number 28 [ 879.364178][T17965] overlayfs: failed to clone upperpath [ 879.819008][ T31] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 879.972820][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 879.979167][ T31] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 879.979325][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.979349][ T31] usb 9-1: Product: syz [ 879.979364][ T31] usb 9-1: Manufacturer: syz [ 879.979379][ T31] usb 9-1: SerialNumber: syz [ 880.043857][ T31] usb 9-1: config 0 descriptor?? [ 880.265218][ T31] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 880.375207][T18002] dummy0: entered promiscuous mode [ 880.376827][T18002] team0: entered promiscuous mode [ 880.398278][T18002] debugfs: 'hsr1' already exists in 'hsr' [ 880.398300][T18002] Cannot create hsr debugfs directory [ 880.398439][T18002] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 880.398452][T18002] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 880.429263][T18002] hsr1: entered allmulticast mode [ 880.429288][T18002] dummy0: entered allmulticast mode [ 880.429718][T18002] team0: entered allmulticast mode [ 880.727289][T18008] binder: 18007:18008 ioctl 4018620d 0 returned -22 [ 881.064397][ T31] usb write operation failed. (-71) [ 881.094456][ T31] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 881.095153][ T31] dvbdev: DVB: registering new adapter (Terratec H7) [ 881.095206][ T31] usb 9-1: media controller created [ 881.097119][ T31] usb read operation failed. (-71) [ 881.100936][ T31] usb write operation failed. (-71) [ 881.123676][ T31] dvb_usb_az6007 9-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 881.145081][ T31] usb 9-1: USB disconnect, device number 30 [ 881.350882][T18030] erspan0: entered promiscuous mode [ 881.351088][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 881.764537][ T5954] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 881.926559][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 881.929721][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 881.929751][ T5954] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 881.929777][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 881.938493][ T5954] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 881.938522][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.938541][ T5954] usb 2-1: Product: syz [ 881.938554][ T5954] usb 2-1: Manufacturer: syz [ 881.938567][ T5954] usb 2-1: SerialNumber: syz [ 881.949079][ T5954] usb 2-1: config 0 descriptor?? [ 882.398085][ T5954] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 883.822858][ T5802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 883.986433][ T5954] usb 2-1: USB disconnect, device number 29 [ 884.303058][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.304439][T18131] cgroup: Unknown subsys name 'appraise' [ 886.796035][ T5799] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 886.956765][ T5799] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 886.956799][ T5799] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 886.956820][ T5799] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 886.956873][ T5799] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 886.956900][ T5799] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 886.958817][ T5799] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 886.958847][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 886.958869][ T5799] usb 1-1: Product: syz [ 886.958884][ T5799] usb 1-1: Manufacturer: syz [ 887.114728][ T5799] cdc_wdm 1-1:1.0: skipping garbage [ 887.114753][ T5799] cdc_wdm 1-1:1.0: skipping garbage [ 887.120360][ T5799] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 887.120382][ T5799] cdc_wdm 1-1:1.0: Unknown control protocol [ 887.241332][T18160] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3563'. [ 888.234689][T14418] usb 1-1: USB disconnect, device number 25 [ 890.703600][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 893.219366][T18354] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3651'. [ 893.780847][T18378] loop5: detected capacity change from 0 to 7 [ 893.782583][ C1] blk_print_req_error: 10 callbacks suppressed [ 893.782603][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.782635][ C1] buffer_io_error: 10 callbacks suppressed [ 893.782647][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.826763][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.826807][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.827109][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.827139][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.827394][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.827422][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.827680][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.827707][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.828146][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.828174][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.828587][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.828617][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.831128][T18378] ldm_validate_partition_table(): Disk read failed. [ 893.853558][ T5954] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 893.876839][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.876875][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.935204][T18379] loop5: detected capacity change from 7 to 0 [ 893.935585][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 893.935618][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 893.935734][T18378] Dev loop5: unable to read RDB block 0 [ 893.935762][T18378] loop5: unable to read partition table [ 893.935984][T18378] loop5: partition table beyond EOD, truncated [ 893.936013][T18378] loop_reread_partitions: partition scan of loop5 (íðÉÔn/C>|¶×n˜èªÐ˨“Ò,l¤-"@Iy}˜“c¤9¬ás„GQäªa§üG%xÔ?) failed (rc=-5) [ 894.006010][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 894.009335][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.009365][ T5954] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.009386][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0 [ 894.009417][ T5954] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 894.009439][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.055268][ T5954] usb 1-1: config 0 descriptor?? [ 894.700480][T14418] usb 1-1: USB disconnect, device number 26 [ 896.484233][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3681'. [ 897.307287][T18452] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3693'. [ 897.512855][ T8460] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 897.662874][ T8460] usb 2-1: Using ep0 maxpacket: 16 [ 897.668554][ T8460] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 897.668585][ T8460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.668606][ T8460] usb 2-1: Product: syz [ 897.668621][ T8460] usb 2-1: Manufacturer: syz [ 897.668636][ T8460] usb 2-1: SerialNumber: syz [ 897.734471][ T8460] usb 2-1: config 0 descriptor?? [ 897.793606][ T8460] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 897.972577][ T8460] usb 2-1: USB disconnect, device number 30 [ 898.263051][T14418] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 898.441095][T14418] usb 1-1: Using ep0 maxpacket: 32 [ 898.448656][T14418] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 898.448677][T14418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.472151][T14418] usb 1-1: config 0 descriptor?? [ 898.710313][T14418] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 898.725610][T14418] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.732054][T14418] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 898.732114][T14418] usb 1-1: media controller created [ 898.775820][T14418] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.343555][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 899.343976][T14418] az6027: usb out operation failed. (-32) [ 899.343994][T14418] stb0899_attach: Driver disabled by Kconfig [ 899.344005][T14418] az6027: no front-end attached [ 899.344005][T14418] [ 899.344447][T14418] az6027: usb out operation failed. (-71) [ 899.344461][T14418] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 899.347455][T14418] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 899.405598][T14418] dvb-usb: schedule remote query interval to 400 msecs. [ 899.405622][T14418] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 899.429578][T14418] usb 1-1: USB disconnect, device number 27 [ 899.711452][T14418] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 900.293060][ T5954] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 900.457972][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 900.458012][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 900.458041][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 900.458075][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 900.458121][ T5954] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 900.458147][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.477238][ T5954] usb 1-1: config 0 descriptor?? [ 900.893964][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894003][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894029][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894055][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894080][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894107][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894143][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894169][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894195][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 900.894221][ T5954] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 901.000170][ T5954] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 901.172854][ T5954] usb 1-1: USB disconnect, device number 28 [ 901.480851][T18600] input: syz0 as /devices/virtual/input/input39 [ 901.481231][T18600] input: failed to attach handler leds to device input39, error: -6 [ 901.821447][T18613] loop5: detected capacity change from 0 to 7 [ 901.832460][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.832499][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 901.844889][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.844925][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 901.875767][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.875806][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 901.925171][T18618] loop5: detected capacity change from 7 to 0 [ 901.935358][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.935394][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 901.935551][T13578] ldm_validate_partition_table(): Disk read failed. [ 901.935579][T13578] Dev loop5: unable to read RDB block 0 [ 901.935605][T13578] loop5: unable to read partition table [ 901.935872][T13578] loop5: partition table beyond EOD, truncated [ 902.061258][T18622] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3772'. [ 902.432849][T14418] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 902.572862][T15585] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 902.583398][T14418] usb 1-1: Using ep0 maxpacket: 8 [ 902.585969][T14418] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.585995][T14418] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.586019][T14418] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.586040][T14418] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.586089][T14418] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 902.586110][T14418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.746267][T15585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.746312][T15585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.746335][T15585] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 902.746380][T15585] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.746406][T15585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.806899][T15585] usb 2-1: config 0 descriptor?? [ 902.827106][T14418] usb 1-1: GET_CAPABILITIES returned 0 [ 902.827163][T14418] usbtmc 1-1:16.0: can't read capabilities [ 903.055894][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.056619][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.056701][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.066957][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.067040][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.071804][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.071884][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.071951][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.073973][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.074056][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.074122][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.083192][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.083271][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.083342][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.086975][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.088573][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 903.104936][T14418] usb 1-1: USB disconnect, device number 29 [ 903.337839][T15585] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 903.604510][ T31] usb 2-1: USB disconnect, device number 31 [ 904.212869][ T31] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 904.362786][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 904.365475][ T31] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 904.365502][ T31] usb 9-1: config 0 has no interface number 0 [ 904.365569][ T31] usb 9-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 904.365592][ T31] usb 9-1: config 0 interface 1 has no altsetting 0 [ 904.369693][ T31] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 904.369723][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.369744][ T31] usb 9-1: Product: syz [ 904.369760][ T31] usb 9-1: Manufacturer: syz [ 904.369775][ T31] usb 9-1: SerialNumber: syz [ 904.462035][ T31] usb 9-1: config 0 descriptor?? [ 904.758821][ T31] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 904.758857][ T31] cx231xx 9-1:0.1: Not found matching IAD interface [ 904.782510][ T31] usb 9-1: USB disconnect, device number 31 [ 906.560131][ T100] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.563330][ T100] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.563382][ T100] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.563421][ T100] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 906.768681][T18709] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3810'. [ 911.132832][ T8460] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 911.242866][ T5954] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 911.282930][ T8460] usb 9-1: Using ep0 maxpacket: 32 [ 911.284895][ T8460] usb 9-1: config 2 has an invalid interface number: 88 but max is 0 [ 911.284924][ T8460] usb 9-1: config 2 has no interface number 0 [ 911.284964][ T8460] usb 9-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 911.284979][ T8460] usb 9-1: config 2 interface 88 has no altsetting 0 [ 911.287284][ T8460] usb 9-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 911.287313][ T8460] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.287333][ T8460] usb 9-1: Product: syz [ 911.287344][ T8460] usb 9-1: Manufacturer: syz [ 911.287352][ T8460] usb 9-1: SerialNumber: syz [ 911.313442][T18831] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 911.393015][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 911.395262][ T5954] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 911.395288][ T5954] usb 1-1: config 0 has no interface number 0 [ 911.399584][ T5954] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 911.399613][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.399634][ T5954] usb 1-1: Product: syz [ 911.399651][ T5954] usb 1-1: Manufacturer: syz [ 911.399665][ T5954] usb 1-1: SerialNumber: syz [ 911.456979][ T5954] usb 1-1: config 0 descriptor?? [ 911.462417][ T5954] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 911.538811][T18831] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 911.736843][ T5954] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 911.781939][ T5954] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 912.225850][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 912.226573][ T5954] usb 1-1: USB disconnect, device number 30 [ 912.258882][ T5954] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 912.276225][ T5954] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 912.294323][ T5954] quatech2 1-1:0.51: device disconnected [ 912.372133][ T8460] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 912.372155][ T8460] asix 9-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 912.372342][ T8460] asix 9-1:2.88: probe with driver asix failed with error -71 [ 912.384076][ T8460] usb 9-1: USB disconnect, device number 32 [ 912.427386][T18849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3875'. [ 912.590563][ T3836] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.711338][T18849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3875'. [ 912.718451][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 912.732406][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 912.739536][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 912.741063][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 912.742329][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 913.698947][ T3836] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.852961][ T5954] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 914.226187][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.226225][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.226258][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.226305][ T5954] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.226329][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.936689][ T5802] Bluetooth: hci2: command tx timeout [ 915.031373][ T5954] usb 9-1: config 0 descriptor?? [ 915.177780][ T3836] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.508937][ T5954] hid_parser_main: 15 callbacks suppressed [ 915.508964][ T5954] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x4 [ 915.559476][ T5954] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 915.828384][ T5954] usb 9-1: USB disconnect, device number 33 [ 916.943010][ T5802] Bluetooth: hci2: command tx timeout [ 917.134420][T18963] netlink: 'syz.0.3927': attribute type 15 has an invalid length. [ 919.022947][ T5802] Bluetooth: hci2: command tx timeout [ 921.103274][ T5802] Bluetooth: hci2: command tx timeout [ 924.789973][ T3836] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.010812][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4123'. [ 927.004870][T18857] chnl_net:caif_netlink_parms(): no params data found [ 927.290402][ T3836] bridge_slave_1: left allmulticast mode [ 927.290437][ T3836] bridge_slave_1: left promiscuous mode [ 927.290714][ T3836] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.369694][ T3836] bridge_slave_0: left allmulticast mode [ 927.369725][ T3836] bridge_slave_0: left promiscuous mode [ 927.369995][ T3836] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.772803][T15585] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 927.944765][T15585] usb 2-1: Using ep0 maxpacket: 8 [ 927.961427][T15585] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 927.961461][T15585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.961574][T15585] usb 2-1: Product: syz [ 927.961590][T15585] usb 2-1: Manufacturer: syz [ 927.961605][T15585] usb 2-1: SerialNumber: syz [ 928.009729][T15585] usb 2-1: config 0 descriptor?? [ 928.218710][T15585] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 929.011263][ T3836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.028234][T15585] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 929.062982][T15585] usb 2-1: USB disconnect, device number 32 [ 929.166976][T19436] loop8: detected capacity change from 0 to 7 [ 929.193853][ T3836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.194148][T19436] Dev loop8: unable to read RDB block 7 [ 929.194194][T19436] loop8: unable to read partition table [ 929.194463][T19436] loop8: partition table beyond EOD, truncated [ 929.194483][T19436] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 929.358448][ T3836] bond0 (unregistering): Released all slaves [ 930.880493][ T3836] tipc: Left network mode [ 931.105293][T18857] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.105441][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.105710][T18857] bridge_slave_0: entered allmulticast mode [ 931.109333][T18857] bridge_slave_0: entered promiscuous mode [ 931.120866][T18857] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.121089][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.121292][T18857] bridge_slave_1: entered allmulticast mode [ 931.124523][T18857] bridge_slave_1: entered promiscuous mode [ 931.237052][ T37] audit: type=1326 audit(1774860853.595:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.239203][ T37] audit: type=1326 audit(1774860853.595:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.241095][ T37] audit: type=1326 audit(1774860853.595:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.241438][ T37] audit: type=1326 audit(1774860853.595:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.241754][ T37] audit: type=1326 audit(1774860853.595:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.242038][ T37] audit: type=1326 audit(1774860853.595:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.242398][ T37] audit: type=1326 audit(1774860853.595:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.396806][ T37] audit: type=1326 audit(1774860853.755:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.397187][ T37] audit: type=1326 audit(1774860853.755:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.397644][ T37] audit: type=1326 audit(1774860853.755:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19490 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f10c799 code=0x7ffc0000 [ 931.524617][T18857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.574919][T18857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.673740][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.673812][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.832768][ T3836] IPVS: stopping backup sync thread 16293 ... [ 931.966289][T18857] team0: Port device team_slave_0 added [ 931.992062][T18857] team0: Port device team_slave_1 added [ 932.282827][ T8460] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 932.475936][ T8460] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 932.476014][ T8460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.477576][ T8460] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 932.477606][ T8460] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 932.477627][ T8460] usb 1-1: Manufacturer: syz [ 932.486653][ T8460] usb 1-1: config 0 descriptor?? [ 932.887098][ T8460] rc_core: IR keymap rc-hauppauge not found [ 932.887123][ T8460] Registered IR keymap rc-empty [ 932.889195][ T8460] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 932.893603][ T8460] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input40 [ 933.046921][T19535] rc rc0: two consecutive events of type space [ 933.300484][T18857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.300503][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.300532][T18857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.304323][T18857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.304340][T18857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.304367][T18857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.312315][ T5988] usb 1-1: USB disconnect, device number 31 [ 934.474266][T18857] hsr_slave_0: entered promiscuous mode [ 934.475829][T18857] hsr_slave_1: entered promiscuous mode [ 934.476815][T18857] debugfs: 'hsr0' already exists in 'hsr' [ 934.476840][T18857] Cannot create hsr debugfs directory [ 936.256879][ T3836] hsr_slave_0: left promiscuous mode [ 936.335206][ T3836] hsr_slave_1: left promiscuous mode [ 936.335967][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.335986][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.416895][ T3836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.416926][ T3836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.420866][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4216'. [ 936.563594][ T3836] veth1_macvtap: left promiscuous mode [ 936.563720][ T3836] veth0_macvtap: left promiscuous mode [ 938.186737][ T3836] team0 (unregistering): Port device team_slave_1 removed [ 938.293875][ T3836] team0 (unregistering): Port device team_slave_0 removed [ 938.777543][T19604] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 940.532843][ T7332] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 940.687842][ T7332] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 940.687878][ T7332] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 940.687893][ T7332] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 940.715343][ T7332] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 940.715375][ T7332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.715394][ T7332] usb 1-1: Product: syz [ 940.715408][ T7332] usb 1-1: Manufacturer: syz [ 940.715420][ T7332] usb 1-1: SerialNumber: syz [ 940.729093][ T7332] usb 1-1: config 0 descriptor?? [ 940.730139][T19706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 940.730319][T19706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 940.742449][ T7332] usb 1-1: ucan: probing device on interface #0 [ 940.982874][ T7332] usb 1-1: ucan: device protocol version 0 is not supported [ 940.982902][ T7332] usb 1-1: ucan: probe failed; try to update the device firmware [ 941.178017][ T7332] usb 1-1: USB disconnect, device number 32 [ 941.491462][T19738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.536445][T19738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.622887][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 941.782322][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 941.797037][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 941.797071][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 941.797093][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 941.797165][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 941.797187][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 941.797212][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 941.797257][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 941.797289][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.835716][ T31] usb 2-1: config 0 descriptor?? [ 942.061366][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 942.120505][ T31] usb 2-1: USB disconnect, device number 33 [ 942.133637][ T31] usblp0: removed [ 942.348002][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 942.348023][ T37] audit: type=1326 audit(1774860864.705:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.386222][ T37] audit: type=1326 audit(1774860864.705:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.387386][ T37] audit: type=1326 audit(1774860864.745:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.387747][ T37] audit: type=1326 audit(1774860864.745:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.388455][ T37] audit: type=1326 audit(1774860864.745:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.388880][ T37] audit: type=1326 audit(1774860864.745:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.389218][ T37] audit: type=1326 audit(1774860864.745:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.390078][ T37] audit: type=1326 audit(1774860864.745:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.390395][ T37] audit: type=1326 audit(1774860864.745:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.390937][ T37] audit: type=1326 audit(1774860864.745:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19754 comm="syz.8.4279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7ffc0000 [ 942.612903][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 942.762881][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 942.776271][ T31] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 942.776302][ T31] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 942.776323][ T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 942.776380][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 942.776404][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 942.776430][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 942.776477][ T31] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 942.776501][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.867099][ T31] usb 2-1: config 0 descriptor?? [ 943.116480][ T31] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 943.426723][T16067] usb 2-1: USB disconnect, device number 34 [ 943.457095][T16067] usblp0: removed [ 943.702303][T19793] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4293'. [ 945.022075][T18857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 945.152136][T18857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 945.235882][T18857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 945.284098][T18857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 945.734880][T18857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.785410][T18857] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.806944][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.807040][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.855684][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.855770][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.013194][T15585] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 946.173111][T15585] usb 2-1: Using ep0 maxpacket: 8 [ 946.191099][T15585] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.191157][T15585] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 946.191182][T15585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.239869][T15585] usb 2-1: config 0 descriptor?? [ 946.499006][T15585] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 946.964856][T16067] usb 2-1: USB disconnect, device number 35 [ 947.222312][T18857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.416421][T18857] veth0_vlan: entered promiscuous mode [ 948.468255][T18857] veth1_vlan: entered promiscuous mode [ 948.719308][T18857] veth0_macvtap: entered promiscuous mode [ 948.739533][T18857] veth1_macvtap: entered promiscuous mode [ 948.815537][T18857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.878065][T18857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.895271][ T3836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.895422][ T3836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.895567][ T3836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.895704][ T3836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.980683][T19935] loop5: detected capacity change from 0 to 7 [ 948.999687][T19935] Dev loop5: unable to read RDB block 7 [ 948.999723][T19935] loop5: AHDI p3 [ 948.999758][T19935] loop5: partition table partially beyond EOD, truncated [ 949.638750][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.638773][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.920777][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.920801][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.282882][ T5988] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 951.440222][ T5988] usb 9-1: Using ep0 maxpacket: 32 [ 951.457922][ T5988] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 951.457959][ T5988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.457992][ T5988] usb 9-1: Product: syz [ 951.458007][ T5988] usb 9-1: Manufacturer: syz [ 951.458022][ T5988] usb 9-1: SerialNumber: syz [ 951.507583][ T5988] usb 9-1: config 0 descriptor?? [ 951.740124][ T5988] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 034 [ 952.817772][T14418] usb 9-1: USB disconnect, device number 34 [ 954.357757][T20047] qrtr: Invalid version 0 [ 956.984738][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4377'. [ 957.263031][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 958.362783][ T31] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 958.526403][ T31] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 958.526437][ T31] usb 2-1: config 0 has no interface number 0 [ 958.526511][ T31] usb 2-1: config 0 interface 41 has no altsetting 0 [ 958.529757][ T31] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 958.529789][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.529811][ T31] usb 2-1: Product: syz [ 958.529827][ T31] usb 2-1: Manufacturer: syz [ 958.529842][ T31] usb 2-1: SerialNumber: syz [ 958.569020][ T31] usb 2-1: config 0 descriptor?? [ 959.479948][ T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 959.904050][ T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 959.904085][ T31] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 959.904486][ T31] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 959.923230][ T31] usb 2-1: USB disconnect, device number 36 [ 962.543531][ T31] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 962.716649][ T31] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 962.716712][ T31] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 962.716742][ T31] usb 1-1: config 2 interface 0 has no altsetting 0 [ 962.720000][ T31] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 962.720032][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.720053][ T31] usb 1-1: Product: syz [ 962.720068][ T31] usb 1-1: Manufacturer: syz [ 962.720083][ T31] usb 1-1: SerialNumber: syz [ 963.032804][T15585] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 963.191255][ T31] ims_pcu 1-1:2.0: Zero length descriptor [ 963.191327][ T31] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 963.239455][T15585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.239494][T15585] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.239537][T15585] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 963.239562][T15585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.256970][ T31] usb 1-1: USB disconnect, device number 33 [ 963.264919][T15585] usb 5-1: config 0 descriptor?? [ 963.706510][T15585] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 963.706549][T15585] playstation 0003:054C:0DF2.001F: unknown main item tag 0x0 [ 963.773118][T15585] playstation 0003:054C:0DF2.001F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 963.902428][T15585] playstation 0003:054C:0DF2.001F: Invalid byte count transferred, expected 20 got 0 [ 963.902461][T15585] playstation 0003:054C:0DF2.001F: Failed to retrieve DualSense pairing info: -22 [ 963.902520][T15585] playstation 0003:054C:0DF2.001F: Failed to get MAC address from DualSense [ 963.902537][T15585] playstation 0003:054C:0DF2.001F: Failed to create dualsense. [ 963.922407][T15585] playstation 0003:054C:0DF2.001F: probe with driver playstation failed with error -22 [ 963.982910][T14418] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 964.121974][ T8460] usb 5-1: USB disconnect, device number 7 [ 964.139458][T14418] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 964.139491][T14418] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 964.189201][T14418] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 964.189234][T14418] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.189257][T14418] usb 2-1: Product: syz [ 964.189272][T14418] usb 2-1: Manufacturer: syz [ 964.189288][T14418] usb 2-1: SerialNumber: syz [ 964.243716][T14418] usb 2-1: config 0 descriptor?? [ 964.258897][T14418] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 964.827190][T20292] serio: Serial port pts0 [ 965.888230][T14418] gspca_sunplus: reg_r err -71 [ 965.888344][T14418] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 965.918313][T14418] usb 2-1: USB disconnect, device number 37 [ 965.994955][T20326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.372846][T16067] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 968.532997][T16067] usb 2-1: Using ep0 maxpacket: 16 [ 968.537224][T16067] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.537269][T16067] usb 2-1: config 0 interface 0 has no altsetting 0 [ 968.537306][T16067] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 968.537330][T16067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.647123][T16067] usb 2-1: config 0 descriptor?? [ 969.123873][T16067] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 969.123899][T16067] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 969.123914][T16067] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 969.123929][T16067] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 969.123950][T16067] nzxt-smart2 0003:1E71:2009.0020: unknown main item tag 0x0 [ 969.151945][T16067] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 969.315312][T20365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.315946][T20365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.476094][T16067] usb 2-1: USB disconnect, device number 38 [ 970.214192][T20403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4483'. [ 970.214222][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4483'. [ 970.214241][T20403] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4483'. [ 970.214258][T20403] netlink: 'syz.1.4483': attribute type 2 has an invalid length. [ 970.214272][T20403] netlink: 'syz.1.4483': attribute type 3 has an invalid length. [ 970.214285][T20403] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4483'. [ 970.283442][T20394] fido_id[20394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 971.376978][T20438] overlayfs: workdir and upperdir must reside under the same mount [ 971.674723][ T5802] Bluetooth: hci1: unexpected event for opcode 0x040d [ 971.871764][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 971.969229][T20459] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 971.969254][T20459] overlayfs: failed to set xattr on upper [ 971.969266][T20459] overlayfs: ...falling back to redirect_dir=nofollow. [ 971.969272][T20459] overlayfs: ...falling back to index=off. [ 971.969276][T20459] overlayfs: ...falling back to uuid=null. [ 971.969281][T20459] overlayfs: ...falling back to xino=off. [ 972.713621][T20468] loop2: detected capacity change from 0 to 7 [ 972.950713][T20468] Dev loop2: unable to read RDB block 7 [ 972.950758][T20468] loop2: AHDI p1 p2 p3 [ 972.950795][T20468] loop2: partition table partially beyond EOD, truncated [ 972.951093][T20468] loop2: p1 start 1818582900 is beyond EOD, truncated [ 972.951115][T20468] loop2: p3 start 335544320 is beyond EOD, truncated [ 978.654485][ T5799] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 979.314650][ T5799] usb 5-1: Using ep0 maxpacket: 32 [ 979.335703][ T5799] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 979.335736][ T5799] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 979.335758][ T5799] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 979.335781][ T5799] usb 5-1: config 1 has no interface number 0 [ 979.335841][ T5799] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 979.335871][ T5799] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 979.335915][ T5799] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 979.335939][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.359821][ T5799] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 979.810517][ T5799] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 980.233458][T15585] usb 5-1: USB disconnect, device number 8 [ 980.238093][T15585] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 982.889771][T20715] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4590'. [ 984.674680][T20750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 985.352971][ T5988] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 985.645230][ T5988] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 985.645263][ T5988] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 985.645286][ T5988] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 985.645342][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 985.645366][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 985.645395][ T5988] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 985.645438][ T5988] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 985.645462][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.672265][ T5988] usb 1-1: config 0 descriptor?? [ 985.678612][T20767] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 985.905149][ T5988] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 986.002956][T15585] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 986.133161][ C0] usblp0: nonzero read bulk status received: -71 [ 986.139871][ T5954] usb 1-1: USB disconnect, device number 34 [ 986.167666][ T5954] usblp0: removed [ 986.172783][T15585] usb 2-1: Using ep0 maxpacket: 32 [ 986.178771][T15585] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 986.178803][T15585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.178825][T15585] usb 2-1: Product: syz [ 986.178840][T15585] usb 2-1: Manufacturer: syz [ 986.178856][T15585] usb 2-1: SerialNumber: syz [ 986.223591][T15585] usb 2-1: config 0 descriptor?? [ 986.491736][T15585] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 039 [ 987.109848][ T31] usb 2-1: USB disconnect, device number 39 [ 988.833666][ T31] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 989.483548][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 989.486049][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 989.489999][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 989.490023][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.490035][ T31] usb 1-1: Product: syz [ 989.490043][ T31] usb 1-1: Manufacturer: syz [ 989.490051][ T31] usb 1-1: SerialNumber: syz [ 989.498635][ T31] usb 1-1: config 0 descriptor?? [ 989.532359][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 989.532393][ T31] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 990.239328][ T31] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 990.602853][ T5954] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 990.752876][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 990.755872][ T5954] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 990.755899][ T5954] usb 2-1: config 0 has no interface number 0 [ 990.760383][ T5954] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 990.760463][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.760483][ T5954] usb 2-1: Product: syz [ 990.760497][ T5954] usb 2-1: Manufacturer: syz [ 990.760564][ T5954] usb 2-1: SerialNumber: syz [ 990.793270][ T5954] usb 2-1: config 0 descriptor?? [ 990.885353][ T31] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 990.885391][ T31] em28xx 1-1:0.0: board has no eeprom [ 990.907808][ T5954] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 991.172956][ T31] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 991.172988][ T31] em28xx 1-1:0.0: dvb set to bulk mode. [ 991.174151][ T5861] em28xx 1-1:0.0: Binding DVB extension [ 991.293037][ T31] usb 1-1: USB disconnect, device number 35 [ 991.345604][ T31] em28xx 1-1:0.0: Disconnecting em28xx [ 991.480081][ T5861] em28xx 1-1:0.0: Registering input extension [ 991.480603][ T31] em28xx 1-1:0.0: Closing input extension [ 991.893795][ T31] em28xx 1-1:0.0: Freeing device [ 991.895935][T14418] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 992.043277][T14418] usb 9-1: Using ep0 maxpacket: 32 [ 992.045767][T14418] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 992.045794][T14418] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.045815][T14418] usb 9-1: config 0 has no interface number 0 [ 992.045862][T14418] usb 9-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 992.051503][T14418] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 992.051532][T14418] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.051553][T14418] usb 9-1: Product: syz [ 992.051567][T14418] usb 9-1: Manufacturer: syz [ 992.051582][T14418] usb 9-1: SerialNumber: syz [ 992.149101][T14418] usb 9-1: config 0 descriptor?? [ 992.159108][T14418] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 992.159433][T14418] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 992.591704][T20912] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 992.666387][ T5954] gspca_spca1528: reg_r err -71 [ 992.666499][ T5954] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 992.682984][ T5954] usb 2-1: USB disconnect, device number 40 [ 992.869832][ T7332] usb 9-1: USB disconnect, device number 35 [ 993.110961][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.111012][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.472924][ T7332] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 993.582809][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 993.627572][ T7332] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 993.627603][ T7332] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 993.627623][ T7332] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 993.627677][ T7332] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 993.627705][ T7332] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 993.630036][ T7332] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 993.630067][ T7332] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 993.630088][ T7332] usb 5-1: Product: syz [ 993.630104][ T7332] usb 5-1: Manufacturer: syz [ 993.644841][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4686'. [ 993.672901][ T5954] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 993.756857][ T7332] cdc_wdm 5-1:1.0: skipping garbage [ 993.756901][ T7332] cdc_wdm 5-1:1.0: skipping garbage [ 993.775116][ T7332] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 993.775139][ T7332] cdc_wdm 5-1:1.0: Unknown control protocol [ 993.835454][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.835520][ T5954] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 993.835545][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.880118][ T5954] usb 1-1: config 0 descriptor?? [ 993.890069][ T5954] pwc: Askey VC010 type 2 USB webcam detected. [ 994.321821][ T5954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 994.327767][ T5954] pwc: recv_control_msg error -32 req 02 val 2700 [ 994.332581][ T5954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 994.337377][ T5954] pwc: recv_control_msg error -32 req 04 val 1000 [ 994.339969][ T5954] pwc: recv_control_msg error -32 req 04 val 1300 [ 994.343645][ T5954] pwc: recv_control_msg error -32 req 04 val 1400 [ 994.551213][ T5954] pwc: recv_control_msg error -71 req 02 val 2100 [ 994.554816][ T5954] pwc: recv_control_msg error -71 req 04 val 1500 [ 994.557608][ T5954] pwc: recv_control_msg error -71 req 02 val 2500 [ 994.560011][ T5954] pwc: recv_control_msg error -71 req 02 val 2400 [ 994.562943][ T5954] pwc: recv_control_msg error -71 req 02 val 2600 [ 994.565213][ T5954] pwc: recv_control_msg error -71 req 02 val 2900 [ 994.566999][ T5954] pwc: recv_control_msg error -71 req 02 val 2800 [ 994.569229][ T5954] pwc: recv_control_msg error -71 req 04 val 1100 [ 994.572586][ T5954] pwc: recv_control_msg error -71 req 04 val 1200 [ 994.778394][ T5954] pwc: Registered as video103. [ 994.819764][ T5954] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 994.977635][ T5954] usb 1-1: USB disconnect, device number 36 [ 995.060461][ T5861] usb 5-1: USB disconnect, device number 9 [ 995.413690][T20994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 995.543205][T20993] ptrace attach of "./syz-executor exec"[20997] was attempted by "./syz-executor exec"[20993] [ 996.780131][T21029] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4711'. [ 997.502810][T15585] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 997.710790][T15585] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 997.710823][T15585] usb 9-1: config 0 has no interface number 0 [ 997.710873][T15585] usb 9-1: config 0 interface 41 has no altsetting 0 [ 997.723454][T15585] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 997.723483][T15585] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.723502][T15585] usb 9-1: Product: syz [ 997.723515][T15585] usb 9-1: Manufacturer: syz [ 997.723528][T15585] usb 9-1: SerialNumber: syz [ 997.728872][T15585] usb 9-1: config 0 descriptor?? [ 998.162832][T15585] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 998.163155][T15585] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 998.178812][T15585] usb 9-1: USB disconnect, device number 36 [ 998.907051][T21086] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 999.716360][T21113] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.4741'. [ 999.825919][T21119] binder_alloc: 21118: binder_alloc_buf size 16777216 failed, no address space [ 999.826089][T21119] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1002.187187][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4750'. [ 1002.823595][ T5954] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1003.059985][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1003.145562][ T5954] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1003.145595][ T5954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1003.145621][ T5954] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1003.145646][ T5954] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.145692][ T5954] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1003.145717][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.343011][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1003.556647][ T5954] usb 1-1: GET_CAPABILITIES returned 0 [ 1003.556702][ T5954] usbtmc 1-1:16.0: can't read capabilities [ 1003.800889][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.800978][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.801053][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.801368][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.801445][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.801743][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.801816][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.801889][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.802218][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.802296][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.802371][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.802910][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.802980][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.803049][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.813622][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.813722][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1003.835349][ T5954] usb 1-1: USB disconnect, device number 37 [ 1004.122160][T21175] binder: BINDER_SET_CONTEXT_MGR already set [ 1004.122179][T21175] binder: 21171:21175 ioctl 4018620d 200000000040 returned -16 [ 1004.718743][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1004.759547][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1004.759911][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1004.782437][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1004.793429][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1004.940957][T21195] binder: 21194:21195 ioctl c0306201 2000000003c0 returned -14 [ 1005.248097][ T7332] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1005.595477][ T7332] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.595541][ T7332] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1005.595566][ T7332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.601872][ T7332] usb 5-1: config 0 descriptor?? [ 1006.360488][ T7332] pwc: Askey VC010 type 2 USB webcam detected. [ 1006.917462][ T7332] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1006.921508][ T7332] pwc: recv_control_msg error -32 req 02 val 2700 [ 1006.924219][ T7332] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1006.925901][ T7332] pwc: recv_control_msg error -32 req 04 val 1000 [ 1006.927682][ T7332] pwc: recv_control_msg error -32 req 04 val 1300 [ 1006.934974][ T7332] pwc: recv_control_msg error -32 req 04 val 1400 [ 1006.936068][ T7332] pwc: recv_control_msg error -32 req 02 val 2000 [ 1007.139321][ T7332] pwc: recv_control_msg error -71 req 04 val 1500 [ 1007.139884][ T7332] pwc: recv_control_msg error -71 req 02 val 2500 [ 1007.142519][ T7332] pwc: recv_control_msg error -71 req 02 val 2400 [ 1007.143294][ T7332] pwc: recv_control_msg error -71 req 02 val 2600 [ 1007.143755][ T7332] pwc: recv_control_msg error -71 req 02 val 2900 [ 1007.144494][ T7332] pwc: recv_control_msg error -71 req 02 val 2800 [ 1007.153302][ T7332] pwc: recv_control_msg error -71 req 04 val 1100 [ 1007.155708][ T7332] pwc: recv_control_msg error -71 req 04 val 1200 [ 1007.196865][ T7332] pwc: Registered as video103. [ 1007.202030][ T7332] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 1007.861907][ T7332] usb 5-1: USB disconnect, device number 10 [ 1008.215682][T21246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1008.932941][ T5954] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1009.121779][ T5954] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1009.121813][ T5954] usb 5-1: config 0 has no interface number 0 [ 1009.121866][ T5954] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1009.148357][ T5954] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1009.148394][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.148415][ T5954] usb 5-1: Product: syz [ 1009.148431][ T5954] usb 5-1: Manufacturer: syz [ 1009.148446][ T5954] usb 5-1: SerialNumber: syz [ 1009.245155][ T5954] usb 5-1: config 0 descriptor?? [ 1010.102936][ T5954] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1011.315106][ T5954] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1011.315128][ T5954] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1011.315302][ T5954] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1011.321054][ T5954] usb 5-1: USB disconnect, device number 11 [ 1012.755269][T21360] qrtr: Invalid version 0 [ 1013.761589][T21374] program syz.8.4833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.761870][T21374] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1015.297721][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4841'. [ 1015.381878][T21389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1015.576500][T21389] veth0_to_bond: entered promiscuous mode [ 1015.614928][T21389] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1016.692778][ T8460] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1016.865485][ T8460] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.865551][ T8460] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1016.865575][ T8460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.872797][ T5954] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1016.956995][ T8460] usb 2-1: config 0 descriptor?? [ 1017.016171][ T8460] pwc: Askey VC010 type 2 USB webcam detected. [ 1017.056207][ T5954] usb 9-1: Using ep0 maxpacket: 32 [ 1017.092941][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.092979][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.093020][ T5954] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1017.093046][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.111892][ T5954] usb 9-1: config 0 descriptor?? [ 1017.224819][ T5954] hub 9-1:0.0: USB hub found [ 1017.397713][ T5954] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 1017.404594][ T8460] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1017.406206][ T8460] pwc: recv_control_msg error -32 req 02 val 2700 [ 1017.413064][ T8460] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1017.423410][ T8460] pwc: recv_control_msg error -32 req 04 val 1000 [ 1017.437481][ T8460] pwc: recv_control_msg error -32 req 04 val 1300 [ 1017.438257][ T8460] pwc: recv_control_msg error -32 req 04 val 1400 [ 1017.438959][ T8460] pwc: recv_control_msg error -32 req 02 val 2000 [ 1017.458851][ T8460] pwc: recv_control_msg error -32 req 02 val 2100 [ 1017.608235][ T5954] usbhid 9-1:0.0: can't add hid device: -71 [ 1017.608373][ T5954] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1017.682246][ T8460] pwc: recv_control_msg error -71 req 02 val 2500 [ 1017.689520][ T8460] pwc: recv_control_msg error -71 req 02 val 2400 [ 1017.690075][ T8460] pwc: recv_control_msg error -71 req 02 val 2600 [ 1017.690588][ T8460] pwc: recv_control_msg error -71 req 02 val 2900 [ 1017.698121][ T5954] usb 9-1: USB disconnect, device number 37 [ 1017.721442][ T8460] pwc: recv_control_msg error -71 req 02 val 2800 [ 1017.732913][ T8460] pwc: recv_control_msg error -71 req 04 val 1100 [ 1017.733961][ T8460] pwc: recv_control_msg error -71 req 04 val 1200 [ 1017.738107][ T8460] pwc: Registered as video103. [ 1017.773220][ T8460] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 1017.833327][ T8460] usb 2-1: USB disconnect, device number 41 [ 1018.193506][ T5954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1018.308417][T21445] tipc: Failed to remove unknown binding: 66,0,0/0:1446882182/1446882184 [ 1018.308460][T21445] tipc: Failed to remove unknown binding: 66,0,0/0:1446882182/1446882183 [ 1018.309098][T21445] tipc: Failed to remove unknown binding: 66,0,0/0:1446882182/1446882184 [ 1018.309135][T21445] tipc: Failed to remove unknown binding: 66,0,0/0:1446882182/1446882183 [ 1018.355666][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.355697][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1018.357291][ T5954] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1018.357321][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1018.357341][ T5954] usb 5-1: SerialNumber: syz [ 1018.856804][ T5954] usb 5-1: 0:2 : does not exist [ 1019.152376][ T5954] usb 5-1: USB disconnect, device number 12 [ 1019.246657][T20397] udevd[20397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.953427][T16067] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1021.725547][T16067] usb 5-1: Using ep0 maxpacket: 8 [ 1021.729749][T16067] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1021.729778][T16067] usb 5-1: config 0 has no interface number 0 [ 1021.729827][T16067] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1021.729851][T16067] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1021.729877][T16067] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1021.729902][T16067] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1021.729947][T16067] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1021.729970][T16067] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.845283][T16067] usb 5-1: config 0 descriptor?? [ 1021.893014][T16067] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1022.267245][T16067] usb 5-1: USB disconnect, device number 13 [ 1022.267338][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1022.270614][T16067] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1022.284485][T21476] ldusb: No device or device unplugged -19 [ 1024.682933][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 1024.682955][ T37] audit: type=1326 audit(1774860947.035:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21522 comm="syz.8.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f874c9ac799 code=0x7fc00000 [ 1025.452938][ T37] audit: type=1326 audit(1774860947.795:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21522 comm="syz.8.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f874c9a6517 code=0x7fc00000 [ 1025.453001][ T37] audit: type=1326 audit(1774860947.795:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21522 comm="syz.8.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f874c94db19 code=0x7fc00000 [ 1025.453048][ T37] audit: type=1326 audit(1774860947.795:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21522 comm="syz.8.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f874c94dbdd code=0x7fc00000 [ 1025.985747][T21552] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1026.180813][T21552] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1026.198700][T21552] overlayfs: failed to look up (tracing) for ino (-66) [ 1026.910239][T21570] qrtr: Invalid version 0 [ 1029.092827][ T8460] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1029.248845][ T8460] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.248874][ T8460] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1029.248913][ T8460] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1029.248937][ T8460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.320725][ T8460] usb 2-1: config 0 descriptor?? [ 1030.187731][ T8460] usb 2-1: string descriptor 0 read error: -71 [ 1030.192316][ T8460] usb 2-1: USB disconnect, device number 42 [ 1031.685604][T21629] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1031.779763][T21624] kvm: pic: level sensitive irq not supported [ 1031.779837][T21624] kvm: pic: non byte read [ 1031.780071][T21624] kvm: pic: level sensitive irq not supported [ 1031.780122][T21624] kvm: pic: non byte read [ 1031.780324][T21624] kvm: pic: level sensitive irq not supported [ 1031.780374][T21624] kvm: pic: non byte read [ 1031.780576][T21624] kvm: pic: level sensitive irq not supported [ 1031.780626][T21624] kvm: pic: non byte read [ 1031.780827][T21624] kvm: pic: level sensitive irq not supported [ 1031.780878][T21624] kvm: pic: non byte read [ 1031.781084][T21624] kvm: pic: level sensitive irq not supported [ 1031.781135][T21624] kvm: pic: non byte read [ 1031.781336][T21624] kvm: pic: level sensitive irq not supported [ 1031.781387][T21624] kvm: pic: non byte read [ 1031.781589][T21624] kvm: pic: level sensitive irq not supported [ 1031.781639][T21624] kvm: pic: non byte read [ 1031.781841][T21624] kvm: pic: level sensitive irq not supported [ 1031.781892][T21624] kvm: pic: non byte read [ 1031.782098][T21624] kvm: pic: level sensitive irq not supported [ 1031.782149][T21624] kvm: pic: non byte read [ 1032.583759][T21652] netlink: 'syz.1.4938': attribute type 3 has an invalid length. [ 1033.228791][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4944'. [ 1033.360123][T21667] bridge0: port 3(syz_tun) entered disabled state [ 1033.547724][T21667] syz_tun (unregistering): left allmulticast mode [ 1033.547747][T21667] syz_tun (unregistering): left promiscuous mode [ 1033.547820][T21667] bridge0: port 3(syz_tun) entered disabled state [ 1034.082017][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4950'. [ 1035.018746][ T8460] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1036.224192][T21684] Bluetooth: hci2: command 0x0406 tx timeout [ 1038.662791][ T8460] usb 2-1: Using ep0 maxpacket: 16 [ 1038.770879][ T8460] usb 2-1: device descriptor read/all, error -71 [ 1038.802797][ T5861] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1041.007312][T21781] syzkaller0: entered promiscuous mode [ 1041.007343][T21781] syzkaller0: entered allmulticast mode [ 1042.090419][T21799] syzkaller0: entered promiscuous mode [ 1042.090447][T21799] syzkaller0: entered allmulticast mode [ 1043.992843][T21825] netlink: 'syz.4.5009': attribute type 39 has an invalid length. [ 1052.176734][T21929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5045'. [ 1052.762804][T16067] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1054.179186][T16067] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.179264][T16067] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1054.179293][T16067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1054.179321][T16067] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 148, setting to 64 [ 1054.179349][T16067] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1054.246894][T16067] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1054.246930][T16067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1054.246953][T16067] usb 5-1: Product: syz [ 1054.246968][T16067] usb 5-1: Manufacturer: syz [ 1054.246983][T16067] usb 5-1: SerialNumber: syz [ 1054.319454][T16067] usb 5-1: config 0 descriptor?? [ 1054.327988][T21937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1054.554325][T16067] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1054.554356][T16067] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1054.556137][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.559446][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.638926][T21957] qrtr: Invalid version 0 [ 1054.701819][T21958] syz_tun: entered allmulticast mode [ 1054.706693][T21954] syz_tun: left allmulticast mode [ 1054.773809][T16067] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1054.773837][T16067] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1054.773856][T16067] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1054.969471][T16067] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1054.969806][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1054.970013][ C1] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 1054.970102][T16067] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1054.970475][T16067] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 1055.021119][T16067] usb 5-1: USB disconnect, device number 14 [ 1057.359138][T22001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5073'. [ 1057.397638][T22001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5073'. [ 1070.712780][ T7332] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1071.397428][ T7332] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1071.397460][ T7332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.397472][ T7332] usb 5-1: Product: syz [ 1071.397481][ T7332] usb 5-1: Manufacturer: syz [ 1071.397489][ T7332] usb 5-1: SerialNumber: syz [ 1071.461780][ T7332] usb 5-1: config 0 descriptor?? [ 1071.724781][T22211] fuse: Bad value for 'fd' [ 1071.842855][ T7332] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1073.256814][ T7332] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1073.274747][ T7332] usb 5-1: USB disconnect, device number 15 [ 1074.230495][T15585] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1074.553884][T15585] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.553903][T15585] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.554987][T15585] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1074.555004][T15585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1074.555015][T15585] usb 5-1: SerialNumber: syz [ 1074.787685][T15585] usb 5-1: 0:2 : does not exist [ 1075.369017][T15585] usb 5-1: USB disconnect, device number 16 [ 1077.757251][T20397] udevd[20397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.764402][T22283] tipc: Enabled bearer , priority 0 [ 1077.799387][T22283] syzkaller0: entered promiscuous mode [ 1077.799415][T22283] syzkaller0: entered allmulticast mode [ 1082.185303][T22286] tipc: Resetting bearer [ 1082.303551][T22281] tipc: Resetting bearer [ 1084.802578][T22281] tipc: Disabling bearer [ 1085.583135][ T5954] tipc: Node number set to 757989376 [ 1087.866916][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802affd000: rx timeout, send abort [ 1088.369053][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802affd000: abort rx timeout. Force session deactivation [ 1089.420384][T22409] program syz.0.5225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1089.669839][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880346b1000: rx timeout, send abort [ 1090.383455][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1091.845841][T22437] batman_adv: batadv0: Adding interface: dummy0 [ 1091.845861][T22437] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.845898][T22437] batman_adv: batadv0: Interface activated: dummy0 [ 1092.004530][T22437] batadv0: mtu less than device minimum [ 1092.289535][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.323885][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.366571][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.401753][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.449586][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.486588][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.516752][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.536610][T22452] overlayfs: failed to clone upperpath [ 1092.566406][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1092.592943][T22437] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1093.422954][ T8460] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1093.599430][ T8460] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1093.599466][ T8460] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.599488][ T8460] usb 9-1: Product: syz [ 1093.599503][ T8460] usb 9-1: Manufacturer: syz [ 1093.599518][ T8460] usb 9-1: SerialNumber: syz [ 1093.611067][ T8460] usb 9-1: config 0 descriptor?? [ 1093.842811][ T8460] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1096.792020][ T8460] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1096.798356][ T8460] usb 9-1: USB disconnect, device number 38 [ 1097.805925][T22527] qrtr: Invalid version 0 [ 1100.357152][T22540] syzkaller0: entered promiscuous mode [ 1100.357182][T22540] syzkaller0: entered allmulticast mode [ 1102.651317][T22568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.652208][T22568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.685156][ T8460] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1102.832779][ T8460] usb 9-1: Using ep0 maxpacket: 32 [ 1102.840704][ T8460] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1102.840737][ T8460] usb 9-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1102.840765][ T8460] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1102.840792][ T8460] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1102.840815][ T8460] usb 9-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1102.840842][ T8460] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1102.840878][ T8460] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1102.840903][ T8460] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.864873][ T8460] usb 9-1: config 0 descriptor?? [ 1103.103633][T22595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5298'. [ 1103.298398][ T8460] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 1103.298438][ T8460] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 1103.298464][ T8460] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 1103.298490][ T8460] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 1103.298516][ T8460] hid-thrustmaster 0003:044F:B65D.0021: unknown main item tag 0x0 [ 1103.311019][ T8460] hid-thrustmaster 0003:044F:B65D.0021: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1103.311286][ T8460] hid-thrustmaster 0003:044F:B65D.0021: setup data couldn't be sent [ 1103.626648][T22568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.667671][T22568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.702113][T22568] ip6gre1: left promiscuous mode [ 1104.702260][T22568] ip6gre1: left allmulticast mode [ 1104.733130][ T6601] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.733441][ T6601] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.733535][ T6601] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.733634][ T6601] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.735422][ C0] hid-thrustmaster 0003:044F:B65D.0021: URB to get model id failed with error -71 [ 1104.743681][ T7332] usb 9-1: USB disconnect, device number 39 [ 1105.055571][T22642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5315'. [ 1107.212795][ T7332] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1107.361050][T22655] kvm: kvm [22652]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100006929 [ 1107.371718][ T7332] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.371775][ T7332] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1107.371797][ T7332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.406326][ T7332] usb 9-1: config 0 descriptor?? [ 1107.485942][T22655] kvm: kvm [22652]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x7208 [ 1107.486033][T22655] kvm: kvm [22652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1107.488763][ T7332] pwc: Askey VC010 type 2 USB webcam detected. [ 1107.523104][T20402] udevd[20402]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1107.728276][T19350] udevd[19350]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1108.330175][ T7332] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1108.330864][ T7332] pwc: recv_control_msg error -32 req 02 val 2700 [ 1108.532713][ T7332] pwc: recv_control_msg error -32 req 04 val 1000 [ 1108.533814][ T7332] pwc: recv_control_msg error -32 req 04 val 1300 [ 1108.534923][ T7332] pwc: recv_control_msg error -32 req 04 val 1400 [ 1108.535880][ T7332] pwc: recv_control_msg error -32 req 02 val 2000 [ 1108.537012][ T7332] pwc: recv_control_msg error -32 req 02 val 2100 [ 1108.538076][ T7332] pwc: recv_control_msg error -32 req 04 val 1500 [ 1108.539132][ T7332] pwc: recv_control_msg error -32 req 02 val 2500 [ 1108.540170][ T7332] pwc: recv_control_msg error -32 req 02 val 2400 [ 1108.542077][ T7332] pwc: recv_control_msg error -32 req 02 val 2600 [ 1108.543292][ T7332] pwc: recv_control_msg error -32 req 02 val 2900 [ 1108.544343][ T7332] pwc: recv_control_msg error -32 req 02 val 2800 [ 1108.545594][ T7332] pwc: recv_control_msg error -32 req 04 val 1100 [ 1108.549539][ T7332] pwc: Registered as video103. [ 1108.553641][ T7332] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input45 [ 1108.781356][ T7332] usb 9-1: USB disconnect, device number 40 [ 1115.286305][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1116.620454][T22750] netlink: 'syz.4.5354': attribute type 7 has an invalid length. [ 1116.817233][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.817318][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.474547][T22769] tipc: Enabling of bearer rejected, failed to enable media [ 1122.663161][T22788] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1126.826308][T22815] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1131.102861][T22863] ceph: No mds server is up or the cluster is laggy [ 1131.110564][T16067] libceph: connect (1)[c::]:6789 error -101 [ 1131.113864][T16067] libceph: mon0 (1)[c::]:6789 connect error [ 1135.286585][T22906] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5404'. [ 1135.303745][T22906] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5404'. [ 1135.303777][T22906] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5404'. [ 1135.343012][T22906] net_ratelimit: 10 callbacks suppressed [ 1135.343028][T22906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.457841][ T7332] IPVS: starting estimator thread 0... [ 1135.553087][T22911] IPVS: using max 13 ests per chain, 31200 per kthread [ 1135.604093][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.695925][T22919] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 1137.585917][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.207789][T22927] binder: 22923:22927 ioctl c0306201 0 returned -14 [ 1139.712444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.982915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.195933][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1163.982860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.018098][T23136] overlayfs: failed to clone upperpath [ 1169.466387][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5489'. [ 1173.995336][T23203] usb usb7: usbfs: process 23203 (syz.8.5503) did not claim interface 0 before use [ 1175.260176][T23215] ================================================================== [ 1175.260198][T23215] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 1175.260298][T23215] Read of size 1 at addr ffff88804f9b5868 by task syz.0.5507/23215 [ 1175.260318][T23215] [ 1175.260335][T23215] CPU: 0 UID: 0 PID: 23215 Comm: syz.0.5507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1175.260367][T23215] Tainted: [L]=SOFTLOCKUP [ 1175.260376][T23215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1175.260390][T23215] Call Trace: [ 1175.260399][T23215] [ 1175.260409][T23215] dump_stack_lvl+0xe8/0x150 [ 1175.260443][T23215] print_report+0xba/0x230 [ 1175.260473][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.260494][T23215] kasan_report+0x117/0x150 [ 1175.260543][T23215] ? irqentry_exit+0x59e/0x620 [ 1175.260597][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.260624][T23215] __kasan_check_byte+0x2a/0x40 [ 1175.260647][T23215] lock_acquire+0x79/0x2e0 [ 1175.260669][T23215] ? rcu_is_watching+0x15/0xb0 [ 1175.260696][T23215] _raw_spin_lock_irqsave+0x40/0x60 [ 1175.260718][T23215] ? rt_spin_lock+0x157/0x400 [ 1175.260749][T23215] rt_spin_lock+0x157/0x400 [ 1175.260781][T23215] ? __pfx_rt_spin_lock+0x10/0x10 [ 1175.260814][T23215] ? fd_install+0x30c/0x3e0 [ 1175.260887][T23215] dma_buf_fd+0xb0/0x370 [ 1175.260944][T23215] udmabuf_create+0xf26/0xfe0 [ 1175.260998][T23215] ? __pfx_udmabuf_create+0x10/0x10 [ 1175.261030][T23215] udmabuf_ioctl+0x1f6/0x310 [ 1175.261053][T23215] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1175.261128][T23215] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1175.261161][T23215] ? __fget_files+0x2a/0x420 [ 1175.261190][T23215] ? __fget_files+0x2a/0x420 [ 1175.261219][T23215] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1175.261266][T23215] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1175.261288][T23215] __se_sys_ioctl+0xff/0x170 [ 1175.261330][T23215] do_syscall_64+0x14d/0xf80 [ 1175.261371][T23215] ? trace_irq_disable+0x3b/0x150 [ 1175.261398][T23215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.261421][T23215] ? clear_bhb_loop+0x40/0x90 [ 1175.261447][T23215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.261470][T23215] RIP: 0033:0x7ff33cfdc799 [ 1175.261490][T23215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.261510][T23215] RSP: 002b:00007ff33b1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.261537][T23215] RAX: ffffffffffffffda RBX: 00007ff33d256180 RCX: 00007ff33cfdc799 [ 1175.261554][T23215] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000009 [ 1175.261570][T23215] RBP: 00007ff33d072c99 R08: 0000000000000000 R09: 0000000000000000 [ 1175.261583][T23215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.261596][T23215] R13: 00007ff33d256218 R14: 00007ff33d256180 R15: 00007fffc2ea8148 [ 1175.261621][T23215] [ 1175.261629][T23215] [ 1175.261635][T23215] Allocated by task 23215: [ 1175.261646][T23215] kasan_save_track+0x3e/0x80 [ 1175.261696][T23215] __kasan_kmalloc+0x93/0xb0 [ 1175.261726][T23215] __kmalloc_noprof+0x3e7/0x7b0 [ 1175.261763][T23215] dma_buf_export+0x3ba/0xb10 [ 1175.261798][T23215] udmabuf_create+0xee5/0xfe0 [ 1175.261818][T23215] udmabuf_ioctl+0x1f6/0x310 [ 1175.261896][T23215] __se_sys_ioctl+0xff/0x170 [ 1175.261913][T23215] do_syscall_64+0x14d/0xf80 [ 1175.261926][T23215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.261940][T23215] [ 1175.261945][T23215] Freed by task 23216: [ 1175.261955][T23215] kasan_save_track+0x3e/0x80 [ 1175.261983][T23215] kasan_save_free_info+0x46/0x50 [ 1175.262006][T23215] __kasan_slab_free+0x5c/0x80 [ 1175.262036][T23215] kfree+0x1c1/0x6c0 [ 1175.262113][T23215] __dentry_kill+0x211/0x5e0 [ 1175.262133][T23215] finish_dput+0xc9/0x480 [ 1175.262158][T23215] __fput+0x6a3/0xa90 [ 1175.262223][T23215] task_work_run+0x1d9/0x270 [ 1175.262247][T23215] exit_to_user_mode_loop+0xed/0x480 [ 1175.262278][T23215] do_syscall_64+0x32d/0xf80 [ 1175.262298][T23215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.262319][T23215] [ 1175.262325][T23215] The buggy address belongs to the object at ffff88804f9b5800 [ 1175.262325][T23215] which belongs to the cache kmalloc-1k of size 1024 [ 1175.262346][T23215] The buggy address is located 104 bytes inside of [ 1175.262346][T23215] freed 1024-byte region [ffff88804f9b5800, ffff88804f9b5c00) [ 1175.262369][T23215] [ 1175.262375][T23215] The buggy address belongs to the physical page: [ 1175.262388][T23215] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f9b0 [ 1175.262409][T23215] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1175.262428][T23215] flags: 0x80000000000040(head|node=0|zone=1) [ 1175.262446][T23215] page_type: f5(slab) [ 1175.262466][T23215] raw: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 1175.262484][T23215] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1175.262504][T23215] head: 0080000000000040 ffff88813fe19dc0 dead000000000100 dead000000000122 [ 1175.262523][T23215] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1175.262542][T23215] head: 0080000000000003 ffffea00013e6c01 00000000ffffffff 00000000ffffffff [ 1175.262560][T23215] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1175.262569][T23215] page dumped because: kasan: bad access detected [ 1175.262578][T23215] page_owner tracks the page as allocated [ 1175.262585][T23215] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 751, tgid 751 (kworker/u8:6), ts 1174776813163, free_ts 1167913896919 [ 1175.262641][T23215] post_alloc_hook+0x231/0x280 [ 1175.262698][T23215] get_page_from_freelist+0x28bb/0x2950 [ 1175.262722][T23215] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1175.262744][T23215] allocate_slab+0x77/0x660 [ 1175.262791][T23215] refill_objects+0x334/0x3c0 [ 1175.262812][T23215] __pcs_replace_empty_main+0x35c/0x710 [ 1175.262839][T23215] __kmalloc_noprof+0x530/0x7b0 [ 1175.262856][T23215] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 1175.262923][T23215] ieee80211_inform_bss+0x161/0x1160 [ 1175.262966][T23215] cfg80211_inform_single_bss_data+0xd2f/0x1bd0 [ 1175.263029][T23215] cfg80211_inform_bss_data+0x266/0x3c40 [ 1175.263051][T23215] cfg80211_inform_bss_frame_data+0x3c7/0x760 [ 1175.263075][T23215] ieee80211_bss_info_update+0x794/0xa40 [ 1175.263098][T23215] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0 [ 1175.263156][T23215] ieee80211_iface_work+0x84e/0x1340 [ 1175.263182][T23215] cfg80211_wiphy_work+0x2ab/0x4a0 [ 1175.263244][T23215] page last free pid 23158 tgid 23158 stack trace: [ 1175.263258][T23215] __free_frozen_pages+0xfe3/0x1170 [ 1175.263276][T23215] __slab_free+0x24f/0x2a0 [ 1175.263294][T23215] qlist_free_all+0x97/0x100 [ 1175.263345][T23215] kasan_quarantine_reduce+0x148/0x160 [ 1175.263374][T23215] __kasan_slab_alloc+0x22/0x80 [ 1175.263405][T23215] kmem_cache_alloc_noprof+0x33b/0x680 [ 1175.263437][T23215] jbd2__journal_start+0x145/0x5b0 [ 1175.263506][T23215] __ext4_journal_start_sb+0x203/0x620 [ 1175.263563][T23215] ext4_dirty_inode+0x93/0x110 [ 1175.263628][T23215] __mark_inode_dirty+0x3a4/0x1470 [ 1175.263696][T23215] file_update_time_flags+0x3f4/0x4b0 [ 1175.263729][T23215] ext4_page_mkwrite+0x21a/0x11a0 [ 1175.263749][T23215] do_page_mkwrite+0x150/0x310 [ 1175.263790][T23215] do_pte_missing+0x711/0x29e0 [ 1175.263812][T23215] handle_mm_fault+0xd0a/0x13c0 [ 1175.263863][T23215] do_user_addr_fault+0xa73/0x1340 [ 1175.263894][T23215] [ 1175.263900][T23215] Memory state around the buggy address: [ 1175.263913][T23215] ffff88804f9b5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1175.263929][T23215] ffff88804f9b5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1175.263944][T23215] >ffff88804f9b5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1175.263955][T23215] ^ [ 1175.263968][T23215] ffff88804f9b5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1175.263982][T23215] ffff88804f9b5900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1175.263993][T23215] ================================================================== [ 1175.264007][T23215] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1175.264027][T23215] CPU: 0 UID: 0 PID: 23215 Comm: syz.0.5507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1175.264058][T23215] Tainted: [L]=SOFTLOCKUP [ 1175.264067][T23215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1175.264080][T23215] Call Trace: [ 1175.264090][T23215] [ 1175.264101][T23215] vpanic+0x56c/0xa60 [ 1175.264137][T23215] ? __pfx_vpanic+0x10/0x10 [ 1175.264177][T23215] panic+0xc5/0xd0 [ 1175.264209][T23215] ? __pfx_panic+0x10/0x10 [ 1175.264243][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264267][T23215] ? rcu_is_watching+0x15/0xb0 [ 1175.264294][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264318][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264340][T23215] check_panic_on_warn+0x89/0xb0 [ 1175.264366][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264389][T23215] end_report+0x73/0x180 [ 1175.264410][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264431][T23215] kasan_report+0x128/0x150 [ 1175.264451][T23215] ? irqentry_exit+0x59e/0x620 [ 1175.264476][T23215] ? _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264502][T23215] __kasan_check_byte+0x2a/0x40 [ 1175.264524][T23215] lock_acquire+0x79/0x2e0 [ 1175.264546][T23215] ? rcu_is_watching+0x15/0xb0 [ 1175.264574][T23215] _raw_spin_lock_irqsave+0x40/0x60 [ 1175.264596][T23215] ? rt_spin_lock+0x157/0x400 [ 1175.264634][T23215] rt_spin_lock+0x157/0x400 [ 1175.264666][T23215] ? __pfx_rt_spin_lock+0x10/0x10 [ 1175.264698][T23215] ? fd_install+0x30c/0x3e0 [ 1175.264727][T23215] dma_buf_fd+0xb0/0x370 [ 1175.264758][T23215] udmabuf_create+0xf26/0xfe0 [ 1175.264793][T23215] ? __pfx_udmabuf_create+0x10/0x10 [ 1175.264826][T23215] udmabuf_ioctl+0x1f6/0x310 [ 1175.264854][T23215] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1175.264888][T23215] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1175.264914][T23215] ? __fget_files+0x2a/0x420 [ 1175.264943][T23215] ? __fget_files+0x2a/0x420 [ 1175.264973][T23215] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1175.264996][T23215] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1175.265020][T23215] __se_sys_ioctl+0xff/0x170 [ 1175.265042][T23215] do_syscall_64+0x14d/0xf80 [ 1175.265066][T23215] ? trace_irq_disable+0x3b/0x150 [ 1175.265092][T23215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.265115][T23215] ? clear_bhb_loop+0x40/0x90 [ 1175.265141][T23215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.265163][T23215] RIP: 0033:0x7ff33cfdc799 [ 1175.265183][T23215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.265203][T23215] RSP: 002b:00007ff33b1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.265229][T23215] RAX: ffffffffffffffda RBX: 00007ff33d256180 RCX: 00007ff33cfdc799 [ 1175.265246][T23215] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000009 [ 1175.265262][T23215] RBP: 00007ff33d072c99 R08: 0000000000000000 R09: 0000000000000000 [ 1175.265277][T23215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1175.265292][T23215] R13: 00007ff33d256218 R14: 00007ff33d256180 R15: 00007fffc2ea8148 [ 1175.265318][T23215] [ 1175.265492][T23215] Kernel Offset: disabled