last executing test programs: 12m16.29605691s ago: executing program 1 (id=2748): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 12m15.552547033s ago: executing program 1 (id=2752): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000002140)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) 12m14.498782015s ago: executing program 1 (id=2755): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f0000000280)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be48880c7da002f8b5f2a33978bb5e36b0", 0x34}], 0x2}, 0x40011) 12m13.295611166s ago: executing program 1 (id=2757): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c081) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100000009000300738c7a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002050002000300000008000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 12m11.613483574s ago: executing program 1 (id=2761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 12m9.488659961s ago: executing program 1 (id=2765): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x2) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 11m54.223401964s ago: executing program 32 (id=2765): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x2) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2004410, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 10m57.765773928s ago: executing program 5 (id=3078): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80342, 0x168) pwrite64(r1, &(0x7f0000002440)="b274d8ef1d6d", 0x6, 0x40fecc) mmap(&(0x7f0000622000/0x4000)=nil, 0x4000, 0x2, 0x28011, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 10m57.602029394s ago: executing program 5 (id=3081): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x6, 0x7}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0x2, 0x3}) 10m57.064190494s ago: executing program 5 (id=3085): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 10m55.876092532s ago: executing program 5 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 10m55.822620282s ago: executing program 5 (id=3094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 10m51.623903646s ago: executing program 5 (id=3113): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/43, 0x2b}, 0xa8}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, 0x0, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x80) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r8 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r8, 0x3554000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 10m50.849375174s ago: executing program 33 (id=3113): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/43, 0x2b}, 0xa8}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, 0x0, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x80) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r8 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r8, 0x3554000) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 17.639816658s ago: executing program 4 (id=7985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x40305829, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15.54495893s ago: executing program 4 (id=8004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) 12.540429539s ago: executing program 4 (id=8014): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000005340)=[{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000002e00)="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", 0x1ec}], 0x1, 0x0, 0x0, 0x24004000}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001500)=""/4086, 0xff6}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$inet(r0, 0x0, 0x40000) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r3}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x4c8b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c0c0, 0xa, 0x2e2}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x811) shutdown(r9, 0x1) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.637609811s ago: executing program 4 (id=8030): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5d5dfca8) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x4000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) open$dir(&(0x7f0000000040)='./bus\x00', 0xc000, 0x60) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000001) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, 0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0xc, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000080, 0x1}) ioctl$XFS_IOC_AG_GEOMETRY(0xffffffffffffffff, 0xc080583d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x39, 0x107, 0x70bd2c, 0x25dfdbff, {0x15, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r7, 0x917}, 0x14}, 0x1, 0x620b}, 0x40000) syz_usb_connect(0x5, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c6112f082104c904418e010203010902008000000510010b04fd06000202ff00051d02"], 0x0) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x6e6bb9, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) writev(r9, &(0x7f0000000c40)=[{&(0x7f0000000540)='%', 0x1}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0xed41, 0xc5) 8.684328231s ago: executing program 0 (id=8046): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 8.328673537s ago: executing program 4 (id=8051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='vhci_hcd.0', 0xa) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000480)={0x80000000, 0xffffffffffffffff, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x50) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r5], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x8) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0xfff, 0xa925, 0x9, 0x8007, 0x8, "7a3800e5ffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f00000006c0)=0x16) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0xe, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x544, r6) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r0, 0x7}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) 8.108652643s ago: executing program 0 (id=8055): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x3, 0xcfc9, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x7], 0x2000, 0x340}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = dup(r3) write$P9_RSTATFS(r4, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x4, 0x4, 0x0, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82072071ec25f2f792f6b4ffff6304"}) r5 = syz_open_pts(r3, 0x80) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.834803491s ago: executing program 2 (id=8058): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close_range(r2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) r3 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/gnss0\x00', 0x776) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000090000000700000004000000", @ANYRES32, @ANYBLOB="000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0100"/24], 0x48) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f0009051500f4"], 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/73, 0xb50}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2) 7.257389414s ago: executing program 0 (id=8066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="02c312c3348dbd2499554539cb4bc3c3e45a82da08a0872b678a78519934900254086422c7aa4fe568530f051e314022d04e2e64f6dc13405bd0f6f3c04eec770007219859daca270029ee38799d8a20f1d6c208d2fb8c67f6dd32c69ed7c8af858150478381ffae2cbf57c31a9913ba15bc4ad28364fcc3557864c468e2bbffc8c4498f36144a8b51166b1f81bed9305b1c63764a11275dfbbc8e3e7b1d48748a2fe7ba73fcb549dcb89b204897ae8c9a92b6e42b2b139426ba9e0d34d1f3014f3b940d7c6cda05cafe1a38ba25106c03a4337df320c735c3bc55ad4a49", @ANYRES64=r0, @ANYBLOB="d8ee214eb8e50283de9135f0e91ad3934782e87d83c262cd93915d3372a59ea9d55f499cdbc7796296dcaf6cecb4213ffa6e433ccea9779ae2c55abcc6ebf551679ef1dbc25846cf4e8d7959472e6eabe57e021c1750ac06f1f008ecd52da3d5dc337d4bce6e2c75cc302274fbc84875d5e6d93a235c34d8fc168ecf7f11c68fb320b9134eb2b4558a9a3880d7dadb50399f7045ce0a26b95c610106b353a74029677ad186835f8344a25a9973cfbd8a6c55a75d53ac23292459958d30a2df4800015e9b28263d0f67f663c5"], 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000c450) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r1, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000a0000050900020073797a3200000000380004"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x7, 0x0, 0x3, 0x13, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) listen(r4, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@dev={0xac, 0x14, 0x14, 0x3c}, @in=@loopback, 0x0, 0x5, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x6f0}, 0x0, 0x6e6bb3, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac8e}}, 0xe8) sendto$inet(0xffffffffffffffff, &(0x7f0000000600)="12", 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[], 0x0) close(r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) 6.290960194s ago: executing program 2 (id=8075): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000240)='F', 0x45) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x181241) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x204) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x6) bind(r6, 0x0, 0x0) listen(r6, 0x5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 5.8465826s ago: executing program 0 (id=8081): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000240)='F', 0x45) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x181241) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x204) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x6) bind(r6, 0x0, 0x0) listen(r6, 0x5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) 4.659238654s ago: executing program 2 (id=8086): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x402) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x2, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.370240087s ago: executing program 2 (id=8089): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.311163005s ago: executing program 3 (id=8090): socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1001) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xffff, 0xe27, 0x0, 0x0, 0x1000, 0x801, 0xffffffffffffffff, 0x0, 0x19}}}, &(0x7f0000000400)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.257683548s ago: executing program 6 (id=8091): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000240)='F', 0x45) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x181241) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x204) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x6) bind(r6, 0x0, 0x0) listen(r6, 0x5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) connect(0xffffffffffffffff, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 4.034637584s ago: executing program 6 (id=8092): socket(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1001) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xffff, 0xe27, 0x0, 0x0, 0x1000, 0x801, 0xffffffffffffffff, 0x0, 0x19}}}, &(0x7f0000000400)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.034368874s ago: executing program 3 (id=8093): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) writev(r0, 0x0, 0x0) fsopen(&(0x7f0000000000)='afs\x00', 0x0) 4.019966865s ago: executing program 0 (id=8094): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x2, 0x8, 0xd780, 0xa1, 0x0, 0x6, 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e65766500002000028014000700fc000000000000000000000000000000060005004e210000"], 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setns(0xc9, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r4, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) 3.749941224s ago: executing program 3 (id=8095): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000240)='F', 0x45) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x181241) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x204) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x6) bind(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) connect(0xffffffffffffffff, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 3.57999128s ago: executing program 6 (id=8096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], &(0x7f00000003c0)=""/143, 0x2d, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 919.170578ms ago: executing program 2 (id=8097): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0xffffffffffffffff, 0xffff7171}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r3}, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100004000000000000020000000002000000070000000900010073797a300000000014000000100001"], 0x48}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, r0}]) sendmsg$NL80211_CMD_LEAVE_MESH(r5, 0x0, 0x404c800) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 902.173657ms ago: executing program 3 (id=8098): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0030000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) getdents(r1, &(0x7f0000000340)=""/220, 0xdc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaabaabb86dd6000000800282aff00000000000000000000000000000000ff020000000000000000000000000001870090780000002f80bdf7aa00fe8000000000000000000000000000ff7f02000000000000000000887c8d7a773c605bbde727c9000a2352634f4439f9c3c1529ca6612ee51dac3fe3a01128c82b6e11718e0852b5f5e31e547b5c8d80e3d33f63277cfa626c84525008866c5670cceb6719f98ea0bc3e208349d6bc4af6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000440)='./bus\x00', 0x12) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r3, &(0x7f0000002200)="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", 0x1000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x2, 0x34005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x4000002, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 627.748593ms ago: executing program 6 (id=8099): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x402) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x2, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 574.091424ms ago: executing program 0 (id=8100): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 565.752414ms ago: executing program 2 (id=8101): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000240)='F', 0x45) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x181241) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x204) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$inet(0x2, 0x1, 0x6) bind(r6, 0x0, 0x0) listen(r6, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) connect(0xffffffffffffffff, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) 411.842373ms ago: executing program 3 (id=8102): gettid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}]}, 0x38}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x2) fsopen(0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 411.382397ms ago: executing program 6 (id=8103): r0 = socket$netlink(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000003ec0), 0x840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f00)=ANY=[@ANYBLOB="0206000002000000000000"], 0x10}}, 0x10000000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_GET_NO_NEW_PRIVS(0x27) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000003e40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1412, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x4, 0x1, {{0x16, 0x4, 0x3, 0x8, 0x58, 0x66, 0x0, 0xad, 0x4, 0x0, @private=0xa010102, @loopback, {[@noop, @lsrr={0x83, 0xf, 0x1d, [@local, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1]}, @noop, @ssrr={0x89, 0x1f, 0xea, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101]}, @end, @ssrr={0x89, 0x7, 0x5b, [@multicast2]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "cf84df07"}]}]}}}}}) sendmsg$nl_route_sched(r7, 0x0, 0x24000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 136.134434ms ago: executing program 6 (id=8104): socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003640)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='i', 0x1}], 0x1, 0x0, 0x0, 0x2200c004}], 0x1, 0x8010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1001) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x21, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0xffff, 0xe27, 0x0, 0x0, 0x1000, 0x801, 0xffffffffffffffff, 0x0, 0x19}}}, &(0x7f0000000400)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 135.59272ms ago: executing program 3 (id=8105): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000640)={{0x0, 0x2, 0xf, 0x8000000000000000, 0x1, 0x401, 0x1, 0x9, 0x5, 0x7ff, 0x9, 0x8, 0x6, 0x3, 0x8}, 0x8, [0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 0s ago: executing program 4 (id=8106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000000)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) fsopen(&(0x7f00000003c0)='zonefs\x00', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x40, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xfffffffd}]}}}}}}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, 0x0) kernel console output (not intermixed with test programs): aces: 253, using maximum allowed: 32 [ 1000.794037][ T204] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1000.841729][ T204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.841759][ T204] usb 3-1: Product: syz [ 1000.841776][ T204] usb 3-1: Manufacturer: syz [ 1000.841792][ T204] usb 3-1: SerialNumber: syz [ 1000.909618][ T204] usb 3-1: config 0 descriptor?? [ 1000.940129][ T204] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1002.553508][ T204] gspca_sunplus: reg_r err -71 [ 1002.553631][ T204] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1002.582844][ T204] usb 3-1: USB disconnect, device number 37 [ 1004.435075][ T5314] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1004.596791][ T5314] usb 3-1: Using ep0 maxpacket: 32 [ 1004.600206][ T5314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1004.600260][ T5314] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1004.602795][ T5314] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1004.602824][ T5314] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1004.602846][ T5314] usb 3-1: config 14 has no interface number 0 [ 1004.602865][ T5314] usb 3-1: config 14 has no interface number 1 [ 1004.602939][ T5314] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1004.602967][ T5314] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1004.602994][ T5314] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1004.603021][ T5314] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1004.603050][ T5314] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1004.603078][ T5314] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1004.603107][ T5314] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1004.603127][ T5314] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1004.625189][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.625263][ T5314] usb 3-1: Product: syz [ 1004.625329][ T5314] usb 3-1: Manufacturer: syz [ 1004.625363][ T5314] usb 3-1: SerialNumber: syz [ 1005.302164][ T5314] legousbtower 3-1:14.57: interrupt endpoints not found [ 1005.574746][T16787] ALSA: mixer_oss: invalid OSS volume 'G(`*_*h%L' [ 1005.574886][T16787] ALSA: mixer_oss: invalid OSS volume '?;%D֛56h^34' [ 1005.586651][T16787] ALSA: mixer_oss: invalid OSS volume 'E9V7BL*~]3jP`Q;"' [ 1005.586741][T16787] ALSA: mixer_oss: invalid OSS volume '%X4 Z0@Y*Z_i;G' [ 1005.586909][T16787] ALSA: mixer_oss: invalid OSS volume ' >U̷U~%8Uv88~' [ 1005.587019][T16787] ALSA: mixer_oss: invalid OSS volume '~\v=&tV' [ 1005.587140][T16787] ALSA: mixer_oss: invalid OSS volume '*Ԅb3;٦]M?ٗ' [ 1005.587236][T16787] ALSA: mixer_oss: invalid OSS volume '{FSX&ĎP[І' [ 1005.587329][T16787] ALSA: mixer_oss: invalid OSS volume 'r2ݗdȸc;`' [ 1005.604851][T16787] ALSA: mixer_oss: invalid OSS volume ':lLݳ6&/1O' [ 1005.604990][T16787] ALSA: mixer_oss: invalid OSS volume '(,",; +AnjZo9op' [ 1005.605010][T16787] ALSA: mixer_oss: invalid OSS volume 'A 8tfK./j|' [ 1005.605062][T16787] ALSA: mixer_oss: invalid OSS volume 'Y75Ƣ v7{' [ 1005.605234][T16787] ALSA: mixer_oss: invalid OSS volume 'ƢT2,#r4z#U' [ 1005.605305][T16787] ALSA: mixer_oss: invalid OSS volume 'xZ)]̜zʌrkJb؇lXc' [ 1005.605346][T16787] ALSA: mixer_oss: invalid OSS volume 'tG>j@EkW6' [ 1005.605420][T16787] ALSA: mixer_oss: invalid OSS volume 'Oqua;5^>QlV' [ 1005.605483][T16787] ALSA: mixer_oss: invalid OSS volume '66#"pn,S?2hfr' [ 1005.605538][T16787] ALSA: mixer_oss: invalid OSS volume 'yi' [ 1005.605611][T16787] ALSA: mixer_oss: invalid OSS volume 'Y#U7n^F ~Cil|c' [ 1005.605656][T16787] ALSA: mixer_oss: invalid OSS volume ':ȴ]16),dc iPAs' [ 1005.605722][T16787] ALSA: mixer_oss: invalid OSS volume ',~sh2e-?ΰT1?V&' [ 1005.605873][T16787] ALSA: mixer_oss: invalid OSS volume 'XBDP`!WLφU;rMh' [ 1005.605911][T16787] ALSA: mixer_oss: invalid OSS volume '9N' [ 1005.605963][T16787] ALSA: mixer_oss: invalid OSS volume '0' [ 1005.605991][T16787] ALSA: mixer_oss: invalid OSS volume '\5;[殷KXԙ' [ 1005.606039][T16787] ALSA: mixer_oss: invalid OSS volume 'PvG7?@wo]' [ 1005.606102][T16787] ALSA: mixer_oss: invalid OSS volume '1EMl' [ 1005.606143][T16787] ALSA: mixer_oss: invalid OSS volume 'Z. fٽ32%jISO|S0x1' [ 1005.619827][T16787] ALSA: mixer_oss: invalid OSS volume '' [ 1005.619905][T16787] ALSA: mixer_oss: invalid OSS volume '"#jjR ] a(#3;l3' [ 1005.619922][T16787] ALSA: mixer_oss: invalid OSS volume '7z*OAj#8BwՐz' [ 1005.620139][T16787] ALSA: mixer_oss: invalid OSS volume 'Agđ/;' [ 1005.620234][T16787] ALSA: mixer_oss: invalid OSS volume 'k d% {ixFBx''o' [ 1005.620349][T16787] ALSA: mixer_oss: invalid OSS volume 'GR k_!QR.|' [ 1005.620413][T16787] ALSA: mixer_oss: invalid OSS volume ')Ҽh' [ 1005.620441][T16787] ALSA: mixer_oss: invalid OSS volume '5jS)P,Dc&k' [ 1005.620527][T16787] ALSA: mixer_oss: invalid OSS volume 'iyJ#ZWsV̱ݤCr}' [ 1005.620622][T16787] ALSA: mixer_oss: invalid OSS volume 'BٌN*pc%_' [ 1005.620768][T16787] ALSA: mixer_oss: invalid OSS volume ']PB,HJ<[x0P'T\1rcR:W' [ 1005.620854][T16787] ALSA: mixer_oss: invalid OSS volume 'h(' [ 1005.620957][T16787] ALSA: mixer_oss: invalid OSS volume ' řULۀ^ZQ̗"' [ 1005.621045][T16787] ALSA: mixer_oss: invalid OSS volume 'f&s<|i3@IRG' [ 1005.621105][T16787] ALSA: mixer_oss: invalid OSS volume 'N;tBM2N_ .u6o[Ltz'N' [ 1005.649245][T16787] ALSA: mixer_oss: invalid OSS volume 'Xz^.TXs|KViyLvZI3' [ 1005.649335][T16787] ALSA: mixer_oss: invalid OSS volume 'MdIE7&W!OQ|1)Dk' [ 1005.649385][T16787] ALSA: mixer_oss: invalid OSS volume '>;?+7C г6S+P qq' [ 1005.649463][T16787] ALSA: mixer_oss: invalid OSS volume '= !M>y_N5#HBA' [ 1005.649525][T16787] ALSA: mixer_oss: invalid OSS volume 'qsbRa|\~OqT24' [ 1005.649576][T16787] ALSA: mixer_oss: invalid OSS volume 'Mz7z]ǢYoq71.C' [ 1005.649680][T16787] ALSA: mixer_oss: invalid OSS volume 'YIU' [ 1005.649793][T16787] ALSA: mixer_oss: invalid OSS volume 'p:zӍ;˅ӳsP,_Eˣ' [ 1005.649893][T16787] ALSA: mixer_oss: invalid OSS volume 'N&Z}텫*5g ' [ 1005.910378][ T5314] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1006.304383][ T5314] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1006.407333][ T5314] usb 3-1: USB disconnect, device number 38 [ 1006.559587][ T5314] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1013.367807][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1013.367929][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4050'. [ 1014.419656][T16884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.468338][T16884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.955221][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4089'. [ 1018.350672][T16884] gretap1: left promiscuous mode [ 1018.372924][T17033] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1018.386436][ T5704] lo speed is unknown, defaulting to 1000 [ 1018.393059][ T5704] syz0: Port: 1 Link DOWN [ 1018.531668][ T8091] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.531704][ T8091] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.531747][ T8091] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.531774][ T8091] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.531822][ T8091] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.531850][ T8091] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.531888][ T8091] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.531917][ T8091] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.135161][ T5314] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1019.309844][ T5314] usb 3-1: Using ep0 maxpacket: 32 [ 1019.314638][ T5314] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1019.325519][ T5314] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1019.325600][ T5314] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1019.325677][ T5314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1019.368688][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.368719][ T5314] usb 3-1: Product: syz [ 1019.368736][ T5314] usb 3-1: Manufacturer: syz [ 1019.368752][ T5314] usb 3-1: SerialNumber: syz [ 1019.384121][T17097] netlink: 'syz.4.4118': attribute type 12 has an invalid length. [ 1019.384145][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4118'. [ 1019.423444][ T5314] usb 3-1: config 0 descriptor?? [ 1019.457470][T17097] netlink: 'syz.4.4118': attribute type 12 has an invalid length. [ 1019.457493][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4118'. [ 1019.865182][ T5314] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 1019.865231][ T5314] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 1020.086945][ T5314] usb 3-1: USB disconnect, device number 39 [ 1020.405119][ T204] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1020.586800][ T204] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1020.625638][ T204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.625665][ T204] usb 5-1: Product: syz [ 1020.625679][ T204] usb 5-1: Manufacturer: syz [ 1020.625694][ T204] usb 5-1: SerialNumber: syz [ 1021.160112][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1021.160175][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1022.178365][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 1022.178425][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1022.262835][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1022.310287][ T204] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1022.393123][ T204] usb 5-1: USB disconnect, device number 37 [ 1023.925115][ T204] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1024.089414][ T204] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1024.110457][ T204] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1024.110488][ T204] usb 3-1: Product: syz [ 1024.110504][ T204] usb 3-1: SerialNumber: syz [ 1024.165679][ T204] usb 3-1: config 0 descriptor?? [ 1024.403738][ T204] hso 3-1:0.0: Failed to find BULK eps [ 1024.596238][ T5314] usb 3-1: USB disconnect, device number 40 [ 1024.843844][T10807] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1024.844743][T10807] Bluetooth: hci4: Injecting HCI hardware error event [ 1024.850976][ T5591] Bluetooth: hci4: hardware error 0x00 [ 1025.683424][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1026.995114][ T5591] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1027.345066][ T5703] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1027.555174][ T5703] usb 5-1: Using ep0 maxpacket: 32 [ 1027.556349][ T5703] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1027.558057][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.594107][ T5703] usb 5-1: config 0 descriptor?? [ 1027.670674][ T5703] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1027.802652][ T5703] gspca_vc032x: reg_r err -71 [ 1027.802678][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802691][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802701][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802711][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802719][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802729][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802738][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802748][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802758][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802768][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802777][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802787][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802797][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802806][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802816][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802825][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802834][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802843][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 1027.802853][ T5703] gspca_vc032x: Unknown sensor... [ 1027.802940][ T5703] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1027.938965][ T5703] usb 5-1: USB disconnect, device number 38 [ 1029.397993][T17326] dvmrp8: entered allmulticast mode [ 1030.385487][T17360] binder: 17357:17360 ioctl c0306201 200000000080 returned -14 [ 1030.432169][T17360] binder: 17357:17360 ioctl c0306201 2000000003c0 returned -14 [ 1032.465049][T17393] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[17398] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[17393] [ 1035.847502][ T5314] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1035.999470][ T5314] usb 5-1: Using ep0 maxpacket: 32 [ 1036.002305][ T5314] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1036.014877][ T5314] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1036.016780][ T5314] usb 5-1: config 0 has no interface number 0 [ 1036.016914][ T5314] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1036.073265][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.073303][ T5314] usb 5-1: Product: syz [ 1036.073321][ T5314] usb 5-1: Manufacturer: syz [ 1036.073337][ T5314] usb 5-1: SerialNumber: syz [ 1036.196982][ T5314] usb 5-1: config 0 descriptor?? [ 1037.262368][ T40] oom_reaper: reaped process 17440 (syz.0.4268), now anon-rss:0kB, file-rss:21640kB, shmem-rss:0kB [ 1037.588516][T17440] syz.0.4268 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1037.588581][T17440] CPU: 1 UID: 0 PID: 17440 Comm: syz.0.4268 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.588618][T17440] Tainted: [L]=SOFTLOCKUP [ 1037.588627][T17440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1037.588649][T17440] Call Trace: [ 1037.588659][T17440] [ 1037.588669][T17440] dump_stack_lvl+0xe8/0x150 [ 1037.588730][T17440] dump_header+0xd3/0x4b0 [ 1037.588767][T17440] out_of_memory+0x10d4/0x1480 [ 1037.588820][T17440] ? __pfx_out_of_memory+0x10/0x10 [ 1037.588861][T17440] ? lockdep_hardirqs_on+0x7a/0x110 [ 1037.588908][T17440] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1037.588945][T17440] ? _mutex_lock_killable+0x152/0x1d0 [ 1037.588972][T17440] ? try_charge_memcg+0xbb6/0x15b0 [ 1037.589003][T17440] try_charge_memcg+0xc75/0x15b0 [ 1037.589048][T17440] ? __pfx_try_charge_memcg+0x10/0x10 [ 1037.589080][T17440] ? percpu_ref_tryget+0x15/0x180 [ 1037.589121][T17440] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 1037.589159][T17440] ? __memcg_slab_post_alloc_hook+0x755/0xf60 [ 1037.589201][T17440] __memcg_slab_post_alloc_hook+0x94e/0xf60 [ 1037.589261][T17440] kmem_cache_alloc_lru_noprof+0x410/0x650 [ 1037.589303][T17440] ? __d_alloc+0x37/0x6f0 [ 1037.589326][T17440] ? __d_alloc+0x37/0x6f0 [ 1037.589359][T17440] __d_alloc+0x37/0x6f0 [ 1037.589392][T17440] d_alloc_parallel+0xde/0x16c0 [ 1037.589420][T17440] ? irqentry_exit+0x218/0x8f0 [ 1037.589461][T17440] ? __d_lookup+0x66/0x790 [ 1037.589494][T17440] ? lookup_slow+0x46/0x70 [ 1037.589518][T17440] ? lookup_slow+0x46/0x70 [ 1037.589543][T17440] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1037.589583][T17440] ? down_read+0x156/0x200 [ 1037.589619][T17440] ? __pfx_down_read+0x10/0x10 [ 1037.589659][T17440] __lookup_slow+0x82/0x2f0 [ 1037.589688][T17440] lookup_slow+0x53/0x70 [ 1037.589713][T17440] lookup_noperm_positive_unlocked+0x1e/0xa0 [ 1037.589741][T17440] debugfs_lookup+0x100/0x150 [ 1037.589768][T17440] ? __pfx_debugfs_lookup+0x10/0x10 [ 1037.589802][T17440] ? relay_close+0x1c7/0x630 [ 1037.589834][T17440] debugfs_lookup_and_remove+0x1d/0x90 [ 1037.589862][T17440] blk_trace_free+0xbc/0x110 [ 1037.589888][T17440] blk_trace_setup_prepare+0x4a5/0x5a0 [ 1037.589925][T17440] blk_trace_setup+0x2f5/0x520 [ 1037.589956][T17440] ? __pfx_blk_trace_setup+0x10/0x10 [ 1037.590004][T17440] ? snprintf+0xe8/0x140 [ 1037.590058][T17440] blk_trace_ioctl+0x37f/0x910 [ 1037.590088][T17440] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1037.590117][T17440] ? kasan_quarantine_put+0xbb/0x1f0 [ 1037.590165][T17440] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1037.590205][T17440] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1037.590249][T17440] ? do_vfs_ioctl+0x1184/0x1550 [ 1037.590284][T17440] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1037.590315][T17440] ? __pfx_smack_log+0x10/0x10 [ 1037.590359][T17440] ? smk_tskacc+0x2fb/0x370 [ 1037.590396][T17440] ? smack_file_ioctl+0x2c2/0x360 [ 1037.590436][T17440] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1037.590481][T17440] blkdev_ioctl+0x4c4/0x750 [ 1037.590520][T17440] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1037.590550][T17440] ? __fget_files+0x2a/0x420 [ 1037.590577][T17440] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1037.590613][T17440] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1037.590648][T17440] __se_sys_ioctl+0xff/0x170 [ 1037.590678][T17440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.590704][T17440] do_syscall_64+0x174/0x580 [ 1037.590737][T17440] ? trace_irq_disable+0x3b/0x140 [ 1037.590776][T17440] ? clear_bhb_loop+0x70/0xc0 [ 1037.590806][T17440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.590831][T17440] RIP: 0033:0x7f4f21ffe0d9 [ 1037.590866][T17440] Code: Unable to access opcode bytes at 0x7f4f21ffe0af. [ 1037.590878][T17440] RSP: 002b:00007f4f20256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1037.590919][T17440] RAX: ffffffffffffffda RBX: 00007f4f22285fa0 RCX: 00007f4f21ffe0d9 [ 1037.590937][T17440] RDX: 0000200000000040 RSI: 00000000c0481273 RDI: 0000000000000006 [ 1037.590952][T17440] RBP: 00007f4f22095024 R08: 0000000000000000 R09: 0000000000000000 [ 1037.590967][T17440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.590981][T17440] R13: 00007f4f22286038 R14: 00007f4f22285fa0 R15: 00007fffe4821778 [ 1037.591022][T17440] [ 1038.058452][T17440] memory: usage 8kB, limit 8kB, failcnt 165 [ 1038.058476][T17440] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1038.058501][T17440] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 1038.058517][T17440] Memory cgroup stats for /syz0/test: [ 1038.059532][T17440] cache 4096 [ 1038.059546][T17440] rss 0 [ 1038.059554][T17440] shmem 0 [ 1038.059561][T17440] mapped_file 0 [ 1038.059569][T17440] dirty 0 [ 1038.059577][T17440] writeback 0 [ 1038.059585][T17440] workingset_refault_anon 0 [ 1038.059593][T17440] workingset_refault_file 0 [ 1038.059602][T17440] swap 0 [ 1038.059610][T17440] swapcached 0 [ 1038.059618][T17440] pgpgin 1 [ 1038.059626][T17440] pgpgout 0 [ 1038.059634][T17440] pgfault 4 [ 1038.059642][T17440] pgmajfault 0 [ 1038.059649][T17440] inactive_anon 0 [ 1038.059658][T17440] active_anon 0 [ 1038.059665][T17440] inactive_file 4096 [ 1038.059674][T17440] active_file 0 [ 1038.059682][T17440] unevictable 0 [ 1038.059690][T17440] hierarchical_memory_limit 8192 [ 1038.059699][T17440] hierarchical_memsw_limit 9223372036854771712 [ 1038.059709][T17440] total_cache 4096 [ 1038.059718][T17440] total_rss 0 [ 1038.059725][T17440] total_shmem 0 [ 1038.059733][T17440] total_mapped_file 0 [ 1038.059742][T17440] total_dirty 0 [ 1038.059750][T17440] total_writeback 0 [ 1038.059759][T17440] total_workingset_refault_anon 0 [ 1038.059769][T17440] total_workingset_refault_file 0 [ 1038.059778][T17440] total_swap 0 [ 1038.059786][T17440] total_swapcached 0 [ 1038.059795][T17440] total_pgpgin 1 [ 1038.059803][T17440] total_pgpgout 0 [ 1038.059811][T17440] total_pgfault 4 [ 1038.059819][T17440] total_pgmajfault 0 [ 1038.059828][T17440] total_inactive_anon 0 [ 1038.059837][T17440] total_active_anon 0 [ 1038.059845][T17440] total_inactive_file 4096 [ 1038.059854][T17440] total_active_file 0 [ 1038.059862][T17440] total_unevictable 0 [ 1038.059870][T17440] anon_cost 0 [ 1038.059878][T17440] file_cost 0 [ 1038.059887][T17440] Out of memory and no killable processes... [ 1038.700655][ T5314] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1038.700720][ T5314] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1038.700738][ T5314] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1038.700836][ T5314] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1038.835244][T10891] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1038.879756][ T5314] usb 5-1: USB disconnect, device number 39 [ 1038.985048][T10891] usb 3-1: Using ep0 maxpacket: 16 [ 1038.987589][T10891] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1038.989438][T10891] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1038.989466][T10891] usb 3-1: config 0 has no interface number 0 [ 1038.989517][T10891] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1038.989548][T10891] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1038.995861][T10891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.995934][T10891] usb 3-1: Product: syz [ 1038.995983][T10891] usb 3-1: Manufacturer: syz [ 1038.996027][T10891] usb 3-1: SerialNumber: syz [ 1039.134285][T10891] usb 3-1: config 0 descriptor?? [ 1039.143471][T17518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1039.158868][T17518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1039.212004][T17526] syzkaller0: entered promiscuous mode [ 1039.212773][T17526] syzkaller0: entered allmulticast mode [ 1039.408262][T17518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1039.408370][T17518] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1039.612468][T10891] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1041.140019][T17567] binder: 17564:17567 ioctl c0306201 200000000180 returned -14 [ 1041.398627][T10891] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1041.398664][T10891] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1041.398971][T10891] asix 3-1:0.34: probe with driver asix failed with error -71 [ 1041.542048][T17576] netlink: 'syz.4.4328': attribute type 1 has an invalid length. [ 1041.684745][T17579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4328'. [ 1041.803727][T10891] usb 3-1: USB disconnect, device number 41 [ 1042.015473][T17579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1046.337358][T17706] input: syz1 as /devices/virtual/input/input24 [ 1048.929019][T17761] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4394'. [ 1051.175155][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4421'. [ 1052.595119][ T204] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1052.776495][ T204] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1052.778707][ T204] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1052.778738][ T204] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.778785][ T204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.941099][ T204] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.492104][ T204] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1054.658767][ T204] usb 1-1: USB disconnect, device number 30 [ 1054.759374][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.422882][T17913] syzkaller1: entered promiscuous mode [ 1055.422908][T17913] syzkaller1: entered allmulticast mode [ 1060.650600][T18031] team0: Device ipvlan2 failed to register rx_handler [ 1062.105031][ T204] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1062.269187][ T204] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1062.271261][ T204] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1062.271292][ T204] usb 5-1: config 179 has no interface number 0 [ 1062.271344][ T204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF is Bulk; changing to Interrupt [ 1062.271370][ T204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1062.271397][ T204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1062.271427][ T204] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1062.271458][ T204] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1062.271507][ T204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.431031][T18045] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1062.700996][T18045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.728448][T18045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.865037][ T204] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1063.918319][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 1063.964543][ T204] xpad 5-1:179.65: probe with driver xpad failed with error -90 [ 1064.007767][ T204] usb 5-1: USB disconnect, device number 40 [ 1064.660719][T18113] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1066.435174][ T5703] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1066.506293][T18156] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1066.586365][ T5703] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1066.591227][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.591256][ T5703] usb 3-1: Product: syz [ 1066.591272][ T5703] usb 3-1: Manufacturer: syz [ 1066.591290][ T5703] usb 3-1: SerialNumber: syz [ 1066.809811][T18161] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1067.113458][ T5703] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1067.113548][ T5703] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1069.222505][ T5703] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1069.222567][ T5703] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1069.439116][ T5703] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1069.702020][ T5703] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1069.757979][ T5703] usb 3-1: USB disconnect, device number 42 [ 1069.815052][T10891] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1069.842543][T18202] gadgetfs: bound to dummy_udc driver [ 1069.976931][T10891] usb 5-1: Using ep0 maxpacket: 16 [ 1069.977799][T10891] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1070.002562][T10891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.002596][T10891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1070.002635][T10891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.070627][T10891] usb 5-1: config 0 descriptor?? [ 1070.750906][T10891] HID 045e:07da: Invalid code 65791 type 1 [ 1070.869228][T10891] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0019/input/input25 [ 1071.082559][T10891] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1071.710276][ T5703] usb 5-1: USB disconnect, device number 41 [ 1071.946850][T18237] fido_id[18237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1072.762957][T18263] binfmt_misc: register: failed to install interpreter file ./file0 [ 1073.585063][ T5703] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1073.735037][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 1073.736054][ T5703] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1073.737837][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.737874][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1073.737925][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.800807][ T5703] usb 3-1: config 0 descriptor?? [ 1073.854345][T18296] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967044.33554432.0), cmd(4) [ 1074.303607][ T5703] HID 045e:07da: Invalid code 65791 type 1 [ 1074.342652][ T5703] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input26 [ 1074.403656][ T5703] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1076.377789][ T5703] usb 3-1: USB disconnect, device number 43 [ 1078.369369][T18369] bond1: option packets_per_slave: invalid value (1819701353) [ 1078.369403][T18369] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1078.428039][T18369] bond1 (unregistering): Released all slaves [ 1091.435092][ T5703] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1091.588245][ T5703] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 1091.590343][ T5703] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1091.594344][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.594371][ T5703] usb 3-1: Product: syz [ 1091.594389][ T5703] usb 3-1: Manufacturer: syz [ 1091.594405][ T5703] usb 3-1: SerialNumber: syz [ 1092.025040][T10891] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1092.204139][T10891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1092.204200][T10891] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1092.239261][T10891] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 1092.239291][T10891] usb 5-1: config 64 has no interface number 0 [ 1092.239339][T10891] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1092.239369][T10891] usb 5-1: config 64 interface 44 has no altsetting 0 [ 1092.319772][ T5703] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input27 [ 1092.345265][T10891] usb 5-1: string descriptor 0 read error: -22 [ 1092.345423][T10891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.506662][T10891] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 1092.622081][ T4933] bcm5974 3-1:1.0: could not read from device [ 1092.692759][ T5703] usb 3-1: USB disconnect, device number 44 [ 1092.883937][ T5314] usb 5-1: USB disconnect, device number 42 [ 1094.225566][ T5703] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1094.725023][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 1094.727010][ T5703] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1094.727816][ T5703] usb 3-1: config 0 has no interfaces? [ 1094.730917][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.730943][ T5703] usb 3-1: Product: syz [ 1094.730959][ T5703] usb 3-1: Manufacturer: syz [ 1094.730975][ T5703] usb 3-1: SerialNumber: syz [ 1094.830884][ T5703] usb 3-1: config 0 descriptor?? [ 1095.081994][ T5703] usb 3-1: USB disconnect, device number 45 [ 1110.754205][ T5591] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1110.784313][ T38] kauditd_printk_skb: 24 callbacks suppressed [ 1110.784339][ T38] audit: type=1800 audit(2000000901.339:281): pid=18896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4882" name="UDC" dev="configfs" ino=59097 res=0 errno=0 [ 1110.792917][T18896] Config c/1 of g1 needs at least one function. [ 1110.794167][T18896] udc dummy_udc.0: failed to start g1: -22 [ 1110.794240][T18896] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1110.800787][T18896] UDC core: g1: couldn't find an available UDC or it's busy [ 1112.875535][ T204] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1113.037729][ T204] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1113.039429][ T204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.039472][ T204] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.039511][ T204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.114116][ T204] usb 5-1: config 0 descriptor?? [ 1113.560778][ T204] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 1113.560818][ T204] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 1113.560847][ T204] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 1113.564350][ T204] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 1113.564387][ T204] playstation 0003:054C:0DF2.001B: unknown main item tag 0x0 [ 1113.941640][ T204] playstation 0003:054C:0DF2.001B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 1114.024082][ T204] playstation 0003:054C:0DF2.001B: Failed to retrieve feature with reportID 9: -32 [ 1114.024188][ T204] playstation 0003:054C:0DF2.001B: Failed to retrieve DualSense pairing info: -32 [ 1114.024246][ T204] playstation 0003:054C:0DF2.001B: Failed to get MAC address from DualSense [ 1114.024262][ T204] playstation 0003:054C:0DF2.001B: Failed to create dualsense. [ 1114.238917][ T204] playstation 0003:054C:0DF2.001B: probe with driver playstation failed with error -32 [ 1116.202404][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.260400][ T5703] usb 5-1: USB disconnect, device number 43 [ 1128.269522][T19157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4988'. [ 1133.155452][ T5704] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1134.025045][ T5704] usb 3-1: Using ep0 maxpacket: 16 [ 1134.026651][ T5704] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1134.028389][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.028413][ T5704] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1134.028454][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.090607][ T5704] usb 3-1: config 0 descriptor?? [ 1134.224804][T19198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5005'. [ 1135.912697][ T5717] usb 3-1: USB disconnect, device number 46 [ 1141.365430][ T5704] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1141.527392][ T5704] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1141.551933][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.551960][ T5704] usb 3-1: Product: syz [ 1141.551974][ T5704] usb 3-1: Manufacturer: syz [ 1141.551990][ T5704] usb 3-1: SerialNumber: syz [ 1141.597390][ T5704] usb 3-1: config 0 descriptor?? [ 1141.838089][ T5704] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1142.217691][T19314] batadv_slave_1: entered promiscuous mode [ 1143.419226][ T5704] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1143.448984][ T5704] usb 3-1: USB disconnect, device number 47 [ 1146.802868][T19374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1156.635034][ T5704] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1156.798772][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 1156.799940][ T5704] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1156.805411][ T5704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1156.805446][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1156.805474][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1156.805566][ T5704] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.805745][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.122703][ T5704] usb 5-1: GET_CAPABILITIES returned 0 [ 1157.122764][ T5704] usbtmc 5-1:16.0: can't read capabilities [ 1157.882055][ T5704] usb 5-1: USB disconnect, device number 44 [ 1158.085048][ T5717] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1158.236233][ T5717] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1158.237775][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.237801][ T5717] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1158.284215][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.284245][ T5717] usb 3-1: Product: syz [ 1158.284260][ T5717] usb 3-1: Manufacturer: syz [ 1158.284276][ T5717] usb 3-1: SerialNumber: syz [ 1159.246886][ T5717] usb 3-1: 0:2 : does not exist [ 1159.274511][ T5717] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1160.852843][ T5717] usb 3-1: USB disconnect, device number 48 [ 1166.078680][ T8286] udevd[8286]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1172.485093][ T5314] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1172.640836][ T5314] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1172.643655][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.643689][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.643730][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.700265][ T5314] usb 5-1: config 0 descriptor?? [ 1172.919257][T19671] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5190'. [ 1173.484608][ T5314] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1173.638652][ T5314] cp2112 0003:10C4:EA90.001C: error requesting version [ 1173.679034][ T5314] cp2112 0003:10C4:EA90.001C: probe with driver cp2112 failed with error -32 [ 1175.360941][T10891] usb 5-1: USB disconnect, device number 45 [ 1177.684557][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.705018][ T204] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1179.856595][ T204] usb 3-1: Using ep0 maxpacket: 16 [ 1179.857430][ T204] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1179.860526][ T204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.860580][ T204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.860609][ T204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 1179.860638][ T204] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1179.860663][ T204] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.863931][ T204] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1179.863957][ T204] usb 3-1: Manufacturer: syz [ 1179.964742][ T204] usb 3-1: config 0 descriptor?? [ 1180.449336][ T204] rc_core: IR keymap rc-hauppauge not found [ 1180.449357][ T204] Registered IR keymap rc-empty [ 1180.451886][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.476536][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.498955][ T204] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1180.556592][ T204] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 1180.590402][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.593533][ T5314] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1180.614025][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.630313][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.647867][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.665343][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.689068][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.689284][ T5314] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1180.712428][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.725366][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.745387][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.765388][ T204] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1180.813846][ T204] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1180.813873][ T204] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1180.908574][ T204] usb 3-1: USB disconnect, device number 49 [ 1185.817975][T19859] binder: 19857:19859 ioctl c0306201 0 returned -14 [ 1193.169900][T19943] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1204.285371][T20102] Bluetooth: ISO socket layer initialized [ 1204.597569][ T5717] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1204.746048][ T5717] usb 5-1: Using ep0 maxpacket: 32 [ 1204.747020][ T5717] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1204.748889][ T5717] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1204.748915][ T5717] usb 5-1: config 0 has too many interfaces: 92, using maximum allowed: 32 [ 1204.748939][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.748960][ T5717] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 92 [ 1204.748999][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.793339][ T5717] usb 5-1: config 0 descriptor?? [ 1204.875076][ T5877] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1205.025968][ T5877] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1205.030727][ T5877] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.030755][ T5877] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1205.030794][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.762657][ T999] usb 3-1: USB disconnect, device number 50 [ 1205.828587][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.829265][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.349817][ T999] usb 5-1: USB disconnect, device number 46 [ 1206.769043][T20172] tmpfs: Bad value for 'mpol' [ 1215.566713][T20286] Bluetooth: MGMT ver 1.23 [ 1217.363007][ T5717] IPVS: starting estimator thread 0... [ 1217.475126][T20307] IPVS: using max 9 ests per chain, 21600 per kthread [ 1221.233830][T20369] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1221.475162][T20375] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1222.868656][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5467'. [ 1223.424558][ T38] audit: type=1800 audit(2000001013.739:282): pid=20405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.5470" name="c_srate" dev="configfs" ino=65418 res=0 errno=0 [ 1229.473167][T20463] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1230.172827][T20471] dummy0: entered promiscuous mode [ 1230.204367][T20471] dummy0: entered allmulticast mode [ 1230.362228][T20478] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1232.054998][ T5877] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1232.204924][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 1232.205901][ T5877] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1232.215533][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.215564][ T5877] usb 5-1: Product: syz [ 1232.215581][ T5877] usb 5-1: Manufacturer: syz [ 1232.215599][ T5877] usb 5-1: SerialNumber: syz [ 1232.569630][ T5877] usb 5-1: config 0 descriptor?? [ 1233.025324][ T5877] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1233.329024][T20504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.347445][T20504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.354365][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1233.378216][ T5877] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1233.378289][ T5877] usb 5-1: media controller created [ 1233.727469][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1234.585776][ T5877] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1234.585818][ T5877] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1234.702034][ T5877] usb 5-1: USB disconnect, device number 47 [ 1235.233259][ T5877] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1239.282072][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.900655][T20644] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1241.200308][T20644] random: crng reseeded on system resumption [ 1248.505279][ T5877] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1248.737841][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 1248.740697][ T5877] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1248.781426][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.188816][ T5877] usb 1-1: config 0 descriptor?? [ 1249.736403][ T5877] as10x_usb: device has been detected [ 1249.737077][ T5877] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1249.821633][ T5877] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1250.261610][ T5877] as10x_usb: error during firmware upload part1 [ 1250.262247][ T5877] Registered device nBox DVB-T Dongle [ 1250.278993][ T5877] usb 1-1: USB disconnect, device number 31 [ 1250.542352][T20725] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5584] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[20725] [ 1251.373440][ T5877] Unregistered device nBox DVB-T Dongle [ 1251.411885][ T5877] as10x_usb: device has been disconnected [ 1251.681698][T20739] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5601'. [ 1251.946636][ T5877] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1252.106287][ T5877] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00 [ 1252.107821][ T5877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.107846][ T5877] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1252.107886][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.779190][ T5314] usb 1-1: USB disconnect, device number 32 [ 1252.955971][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5609'. [ 1253.509435][ T999] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1253.619329][T20773] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5613'. [ 1259.797255][ T5877] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1259.944926][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 1259.947852][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1259.947914][ T5877] usb 1-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 1259.990310][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1259.990346][ T5877] usb 1-1: Product: syz [ 1259.990365][ T5877] usb 1-1: Manufacturer: syz [ 1259.990382][ T5877] usb 1-1: SerialNumber: syz [ 1260.655072][ T5704] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1260.817520][ T5704] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1260.820079][ T5704] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 1260.820108][ T5704] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1260.820130][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.820151][ T5704] usb 3-1: config 0 has no interface number 0 [ 1260.820207][ T5704] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1260.820232][ T5704] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 1260.820259][ T5704] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 1260.820286][ T5704] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1260.820330][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.025011][ T5877] pcwd_usb: The device isn't a Human Interface Device [ 1261.093096][ T5704] usb 3-1: config 0 descriptor?? [ 1261.103836][ T5877] usb 1-1: USB disconnect, device number 33 [ 1261.243978][ T5704] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1261.343576][ T5704] usb 3-1: USB disconnect, device number 52 [ 1261.440458][T14772] usb 3-1: Failed to submit usb control message: -19 [ 1261.440509][T14772] usb 3-1: unable to send the bmi data to the device: -19 [ 1261.440530][T14772] usb 3-1: unable to get target info from device [ 1261.440565][T14772] usb 3-1: could not get target info (-19) [ 1261.500255][T14772] usb 3-1: could not probe fw (-19) [ 1266.875803][ T5704] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1267.024938][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 1267.025940][ T5704] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1267.027613][ T5704] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1267.027644][ T5704] usb 3-1: config 0 has no interface number 0 [ 1267.027691][ T5704] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1267.027720][ T5704] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1267.027745][ T5704] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1267.031288][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.031314][ T5704] usb 3-1: Product: syz [ 1267.031330][ T5704] usb 3-1: Manufacturer: syz [ 1267.031347][ T5704] usb 3-1: SerialNumber: syz [ 1267.122691][ T5704] usb 3-1: config 0 descriptor?? [ 1267.350364][ T5704] appletouch 3-1:0.85: Failed to read mode from device. [ 1267.350630][ T5704] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1267.396466][ T5704] usb 3-1: USB disconnect, device number 53 [ 1267.419842][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5690'. [ 1267.468958][T20971] veth1_macvtap: left promiscuous mode [ 1267.724980][ T31] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1267.882460][ T31] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1267.892910][ T31] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1267.892939][ T31] usb 1-1: config 0 has no interface number 0 [ 1267.893005][ T31] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1267.893034][ T31] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1267.893062][ T31] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1267.930839][ T31] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1267.930868][ T31] usb 1-1: Product: syz [ 1267.930884][ T31] usb 1-1: SerialNumber: syz [ 1267.968636][ T5704] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1267.990580][ T31] usb 1-1: config 0 descriptor?? [ 1268.019667][ T31] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1268.038093][ T31] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input30 [ 1268.141138][ T5704] usb 5-1: not running at top speed; connect to a high speed hub [ 1268.141182][ T5704] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1268.143855][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.143883][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1268.144004][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.408474][ T5704] uvcvideo 5-1:1.0: Found UVC 0.00 device (046d:0825) [ 1268.409070][ T5704] uvcvideo 5-1:1.0: No valid video chain found. [ 1268.633001][ T204] usb 5-1: USB disconnect, device number 48 [ 1269.265410][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1269.267367][ T5717] usb 1-1: USB disconnect, device number 34 [ 1269.269849][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1269.447745][ T5717] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1269.554923][ T31] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1269.729829][ T31] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1269.731422][ T31] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1269.731459][ T31] usb 3-1: config 0 has no interface number 0 [ 1269.731511][ T31] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4 [ 1269.731544][ T31] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1269.782583][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.782620][ T31] usb 3-1: Product: syz [ 1269.782639][ T31] usb 3-1: Manufacturer: syz [ 1269.782657][ T31] usb 3-1: SerialNumber: syz [ 1269.824948][ T5877] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1269.844759][ T31] usb 3-1: config 0 descriptor?? [ 1269.862704][ T31] redrat3 3-1:0.83: Couldn't find all endpoints [ 1269.980496][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 1269.983043][ T5877] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1270.001853][ T5877] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1270.001885][ T5877] usb 5-1: config 0 has no interface number 0 [ 1270.024590][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.024620][ T5877] usb 5-1: Product: syz [ 1270.024637][ T5877] usb 5-1: Manufacturer: syz [ 1270.024654][ T5877] usb 5-1: SerialNumber: syz [ 1270.183318][ T5877] usb 5-1: config 0 descriptor?? [ 1270.203223][ T5717] usb 3-1: USB disconnect, device number 54 [ 1270.451711][ T5877] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1270.451836][ T5877] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1270.452817][ T5877] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 1270.452840][ T5877] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 1270.493034][ T5877] usb 5-1: USB disconnect, device number 49 [ 1271.165758][ T31] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1271.185247][ T5703] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1271.317860][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1271.319519][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1271.319551][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1271.319590][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.335917][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1271.337696][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.337772][ T5703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.400038][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.400067][ T5703] usb 3-1: Product: syz [ 1271.400083][ T5703] usb 3-1: Manufacturer: syz [ 1271.400099][ T5703] usb 3-1: SerialNumber: syz [ 1271.437415][ T31] usb 1-1: config 0 descriptor?? [ 1271.484579][ T5703] cdc_mbim 3-1:1.0: skipping garbage [ 1271.667532][ T31] ath6kl: Failed to submit usb control message: -71 [ 1271.667801][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 1271.667818][ T31] ath6kl: Unable to send get target info: -71 [ 1271.727904][ T5703] cdc_mbim 3-1:1.0: bind() failure [ 1271.764479][ T5703] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1271.764530][ T5703] cdc_ncm 3-1:1.1: bind() failure [ 1271.797463][ T5703] usb 3-1: USB disconnect, device number 55 [ 1271.824013][ T31] ath6kl: Failed to init ath6kl core: -71 [ 1271.824626][ T31] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1272.710012][ T31] usb 1-1: USB disconnect, device number 35 [ 1273.525399][T21084] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1273.604966][ T5717] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1273.765422][ T5717] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1273.767724][ T5717] usb 3-1: not running at top speed; connect to a high speed hub [ 1273.767769][ T5717] usb 3-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 1273.769559][ T5717] usb 3-1: config 1 has an invalid interface number: 122 but max is 0 [ 1273.769589][ T5717] usb 3-1: config 1 has no interface number 0 [ 1273.769637][ T5717] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1273.769668][ T5717] usb 3-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1273.769697][ T5717] usb 3-1: config 1 interface 122 has no altsetting 0 [ 1273.780386][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.780462][ T5717] usb 3-1: Product: syz [ 1273.780505][ T5717] usb 3-1: Manufacturer: syz [ 1273.780546][ T5717] usb 3-1: SerialNumber: syz [ 1273.905717][T21084] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1274.110221][T21087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1274.396495][ T5717] ti_usb_3410_5052 3-1:1.122: TI USB 5052 2 port adapter converter detected [ 1274.477772][ T5717] usb 3-1: USB disconnect, device number 56 [ 1274.517528][T21118] NILFS (loop4): device size too small [ 1274.617672][T21116] jffs2: notice: (21116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1274.735216][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1274.895838][ T31] usb 1-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 1274.897501][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.897527][ T31] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1274.904073][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.904105][ T31] usb 1-1: Product: syz [ 1274.904120][ T31] usb 1-1: SerialNumber: syz [ 1275.220184][ T5703] usb 1-1: USB disconnect, device number 36 [ 1276.244930][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1276.395700][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1276.397326][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.397351][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1276.398689][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1276.398712][ T31] usb 1-1: SerialNumber: syz [ 1276.624947][ T5703] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1276.688876][ T31] usb 1-1: cannot find UAC_HEADER [ 1276.785854][ T5703] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1276.787399][ T5703] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 1276.787431][ T5703] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 1276.791389][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.791414][ T5703] usb 5-1: Product: syz [ 1276.791430][ T5703] usb 5-1: Manufacturer: syz [ 1276.791445][ T5703] usb 5-1: SerialNumber: syz [ 1276.851454][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1276.877705][ T31] usb 1-1: USB disconnect, device number 37 [ 1277.171523][T11237] udevd[11237]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1277.172097][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1277.172156][ T5703] usb 5-1: MIDIStreaming interface descriptor not found [ 1277.474985][ T38] audit: type=1326 audit(2000001068.029:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.475047][ T38] audit: type=1326 audit(2000001068.029:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.549036][ T38] audit: type=1326 audit(2000001068.109:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.549094][ T38] audit: type=1326 audit(2000001068.109:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.549142][ T38] audit: type=1326 audit(2000001068.109:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.549191][ T38] audit: type=1326 audit(2000001068.109:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.554353][ T38] audit: type=1326 audit(2000001068.109:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.554414][ T38] audit: type=1326 audit(2000001068.109:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.564697][ T38] audit: type=1326 audit(2000001068.119:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21187 comm="syz.2.5795" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d8e9de0d9 code=0x7ffc0000 [ 1277.899883][ T5703] usb 5-1: USB disconnect, device number 50 [ 1278.193309][ T7645] udevd[7645]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1279.440913][T21207] netlink: 'syz.0.5804': attribute type 11 has an invalid length. [ 1279.440937][T21207] netlink: 'syz.0.5804': attribute type 4 has an invalid length. [ 1280.257915][T21229] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1282.718781][T21284] random: crng reseeded on system resumption [ 1283.455028][ T5590] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1283.463747][T21305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5847'. [ 1283.604914][ T5590] usb 3-1: Using ep0 maxpacket: 16 [ 1283.605772][ T5590] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1283.610348][ T5590] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 1283.610390][ T5590] usb 3-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 1283.610412][ T5590] usb 3-1: config 0 has no interface number 0 [ 1283.610444][ T5590] usb 3-1: too many endpoints for config 0 interface 228 altsetting 34: 64, using maximum allowed: 30 [ 1283.610485][ T5590] usb 3-1: config 0 interface 228 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 1283.610519][ T5590] usb 3-1: config 0 interface 228 has no altsetting 0 [ 1283.689351][ T5590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.689383][ T5590] usb 3-1: Product: syz [ 1283.689399][ T5590] usb 3-1: Manufacturer: syz [ 1283.689415][ T5590] usb 3-1: SerialNumber: syz [ 1283.722744][ T5590] usb 3-1: config 0 descriptor?? [ 1283.989480][ T5590] hub 3-1:0.228: bad descriptor, ignoring hub [ 1283.989521][ T5590] hub 3-1:0.228: probe with driver hub failed with error -5 [ 1284.012161][ T5590] imon 3-1:0.228: unable to register, err -19 [ 1284.057326][ T5590] usb 3-1: USB disconnect, device number 57 [ 1285.254966][ T5314] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1286.108577][ T5314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1286.109388][ T5314] usb 3-1: not running at top speed; connect to a high speed hub [ 1286.109433][ T5314] usb 3-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 1286.111933][ T5314] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 4 [ 1286.117661][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.117689][ T5314] usb 3-1: Product: syz [ 1286.117707][ T5314] usb 3-1: Manufacturer: syz [ 1286.117724][ T5314] usb 3-1: SerialNumber: syz [ 1286.172418][ T5314] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1286.472929][ T5314] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1286.651084][ T5314] usb 3-1: unit 1 not found! [ 1287.112153][ T5314] usb 3-1: USB disconnect, device number 58 [ 1287.793467][ T8286] udevd[8286]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1289.543698][T21482] ip6gre1: entered promiscuous mode [ 1289.549808][T21482] ip6gre1: entered allmulticast mode [ 1291.873955][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1291.873985][T21573] netlink: 47 bytes leftover after parsing attributes in process `syz.2.5978'. [ 1292.914108][T21611] netlink: 'syz.0.5996': attribute type 13 has an invalid length. [ 1293.169956][ T204] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1293.316201][ T204] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1293.327062][ T204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.327095][ T204] usb 5-1: Product: syz [ 1293.327113][ T204] usb 5-1: Manufacturer: syz [ 1293.327132][ T204] usb 5-1: SerialNumber: syz [ 1293.868343][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1293.868409][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1293.870458][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1293.870518][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1293.940544][ T204] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1293.981521][ T204] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1294.148766][ T204] usb 5-1: USB disconnect, device number 51 [ 1294.716989][T21657] binder: 21656:21657 ioctl c0046209 200000000000000 returned -22 [ 1296.191277][T21709] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1298.399512][T21785] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1300.025067][T21838] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1300.517354][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.859526][T21867] netlink: 592 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1302.069456][T21887] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1302.881399][T21920] netlink: 'syz.0.6145': attribute type 4 has an invalid length. [ 1304.595005][ T5717] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1304.747870][ T5717] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1304.751691][ T5717] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.751753][ T5717] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1304.751801][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.305387][ C0] usb 3-1: received EP1 urb->status = -2 [ 1305.305460][ T5717] usb 3-1: unable to init card! (ret=-110) [ 1305.306056][ T5717] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 1305.507927][ T5704] usb 3-1: USB disconnect, device number 59 [ 1307.636679][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1307.638315][T22081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6220'. [ 1308.049406][ T204] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1308.049443][ T204] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1308.262077][ T204] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1308.715664][T22105] fido_id[22105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1309.185001][ T5717] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1309.343481][ T5717] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1309.349850][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.434719][ T5717] usb 3-1: config 0 descriptor?? [ 1309.481433][ T5717] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1309.544935][ T5704] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1309.669576][ T5717] gspca_spca508: reg_read err -32 [ 1309.695696][ T5704] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1309.700166][ T5704] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1309.700194][ T5704] usb 5-1: Product: syz [ 1309.700210][ T5704] usb 5-1: Manufacturer: syz [ 1309.700226][ T5704] usb 5-1: SerialNumber: syz [ 1309.743305][ T5704] usb 5-1: config 0 descriptor?? [ 1309.760832][ T5704] ch341 5-1:0.0: ch341-uart converter detected [ 1309.880163][ T5717] gspca_spca508: reg_read err -71 [ 1309.882834][ T5717] gspca_spca508: reg_read err -71 [ 1309.886249][ T5717] gspca_spca508: reg_read err -71 [ 1309.895179][ T5717] gspca_spca508: reg write: error -71 [ 1309.895330][ T5717] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1309.940795][ T5717] usb 3-1: USB disconnect, device number 60 [ 1309.988364][ T5704] usb 5-1: failed to receive control message: -121 [ 1309.988428][ T5704] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1310.225757][ T204] usb 5-1: USB disconnect, device number 52 [ 1310.245526][ T204] ch341 5-1:0.0: device disconnected [ 1311.941378][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6277'. [ 1312.334919][ T204] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1312.342529][T22219] loop5: detected capacity change from 0 to 7 [ 1312.488271][ T204] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1312.491460][ T204] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1312.491487][ T204] usb 3-1: Product: syz [ 1312.491503][ T204] usb 3-1: SerialNumber: syz [ 1312.544240][ T204] usb 3-1: config 0 descriptor?? [ 1312.596910][T22225] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1312.828823][T22219] Dev loop5: unable to read RDB block 7 [ 1312.828888][T22219] loop5: unable to read partition table [ 1312.829115][T22219] loop5: partition table beyond EOD, truncated [ 1312.829162][T22219] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1313.561002][ T5704] usb 3-1: USB disconnect, device number 61 [ 1313.669476][T22254] program syz.4.6300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.698309][T22247] Line length is too long: Should be less than 4094 [ 1313.778425][T22257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6303'. [ 1313.779528][T22257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6303'. [ 1313.813321][T22257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6303'. [ 1315.284465][T22306] option changes via remount are deprecated (pid=22303 comm=syz.4.6326) [ 1315.284489][T22306] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 1316.825711][T22359] input: syz1 as /devices/virtual/input/input31 [ 1318.956532][T22430] syz_tun: entered allmulticast mode [ 1319.913880][T22452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6396'. [ 1320.630391][T22410] Dynamic Preempt: lazy [ 1321.243158][T22492] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 1321.243158][T22492] program syz.2.6415 not setting count and/or reply_len properly [ 1322.564909][T22535] RDS: rds_bind could not find a transport for 0:0:fc00::, load rds_tcp or rds_rdma? [ 1323.095111][T22548] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1324.737712][T22543] nvme nvme0: rdma connection establishment failed (-104) [ 1326.052282][T22635] C: renamed from veth1_to_team (while UP) [ 1326.211513][T22635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1327.605136][ T5590] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1327.756556][ T5590] usb 3-1: Using ep0 maxpacket: 32 [ 1327.757404][ T5590] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1327.759033][ T5590] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1327.759061][ T5590] usb 3-1: config 0 has no interface number 0 [ 1327.759122][ T5590] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1327.759151][ T5590] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1327.759175][ T5590] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1327.759201][ T5590] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1327.764554][ T5590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.764582][ T5590] usb 3-1: Product: syz [ 1327.764599][ T5590] usb 3-1: Manufacturer: syz [ 1327.764615][ T5590] usb 3-1: SerialNumber: syz [ 1327.876865][ T5590] usb 3-1: config 0 descriptor?? [ 1327.878268][T22671] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1328.325652][ T5590] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1328.325974][ T5590] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 1328.557906][ T5590] usb 3-1: USB disconnect, device number 62 [ 1328.656586][ T5314] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1328.806566][ T5314] usb 1-1: Using ep0 maxpacket: 8 [ 1328.808975][ T5314] usb 1-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1328.810550][ T5314] usb 1-1: config index 0 descriptor too short (expected 32768, got 75) [ 1328.810577][ T5314] usb 1-1: config 0 has an invalid interface number: 253 but max is -1 [ 1328.810600][ T5314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.810621][ T5314] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1328.810644][ T5314] usb 1-1: config 0 has no interface number 0 [ 1328.810677][ T5314] usb 1-1: config 0 interface 253 has no altsetting 0 [ 1328.838614][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.838686][ T5314] usb 1-1: Product: syz [ 1328.838727][ T5314] usb 1-1: Manufacturer: syz [ 1328.838761][ T5314] usb 1-1: SerialNumber: syz [ 1328.916031][ T5314] usb 1-1: config 0 descriptor?? [ 1329.141786][ T5314] rndis_host 1-1:0.253: invalid descriptor buffer length [ 1329.141811][ T5314] rndis_host 1-1:0.253: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1329.144468][ T5314] cdc_acm 1-1:0.253: invalid descriptor buffer length [ 1329.259107][ T5314] usb 1-1: USB disconnect, device number 38 [ 1331.214981][ T5314] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1331.445008][ T5314] usb 1-1: Using ep0 maxpacket: 8 [ 1331.445981][ T5314] usb 1-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1331.447534][ T5314] usb 1-1: config index 0 descriptor too short (expected 32768, got 75) [ 1331.447560][ T5314] usb 1-1: config 0 has an invalid interface number: 253 but max is -1 [ 1331.447583][ T5314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.447602][ T5314] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1331.447623][ T5314] usb 1-1: config 0 has no interface number 0 [ 1331.447655][ T5314] usb 1-1: config 0 interface 253 has no altsetting 0 [ 1331.451240][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.451266][ T5314] usb 1-1: Product: syz [ 1331.451290][ T5314] usb 1-1: Manufacturer: syz [ 1331.451305][ T5314] usb 1-1: SerialNumber: syz [ 1331.551950][ T5314] usb 1-1: config 0 descriptor?? [ 1331.780619][ T5314] rndis_host 1-1:0.253: invalid descriptor buffer length [ 1331.780644][ T5314] rndis_host 1-1:0.253: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1331.788942][ T5314] cdc_acm 1-1:0.253: invalid descriptor buffer length [ 1331.839601][ T5314] usb 1-1: USB disconnect, device number 39 [ 1332.005056][ T5703] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1332.155755][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 1332.156597][ T5703] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1332.158265][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.158320][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1332.158352][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1332.158376][ T5703] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1332.158401][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.161050][ T5703] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1332.161078][ T5703] usb 3-1: Manufacturer: syz [ 1332.256253][ T5703] usb 3-1: config 0 descriptor?? [ 1332.636220][ T5703] rc_core: IR keymap rc-hauppauge not found [ 1332.636243][ T5703] Registered IR keymap rc-empty [ 1332.636419][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.663961][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.680065][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1332.702685][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 1332.746897][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.765169][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.785296][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.804969][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.825246][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.844993][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.864977][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.885083][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.905004][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.925316][ T5703] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1332.965281][ T5703] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1332.965311][ T5703] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1333.026303][ T5703] usb 3-1: USB disconnect, device number 63 [ 1335.854909][ T204] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1336.005974][ T204] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1336.011143][ T204] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.011204][ T204] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1336.011232][ T204] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1336.011260][ T204] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.011308][ T204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.745712][ T204] gud 5-1:1.0: Failed to add properties (error=-5) [ 1336.745757][ T204] gud 5-1:1.0: probe with driver gud failed with error -5 [ 1336.986638][ T5704] usb 5-1: USB disconnect, device number 53 [ 1337.395208][ T204] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1337.550838][ T204] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1337.582692][ T204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.582724][ T204] usb 3-1: Product: syz [ 1337.582741][ T204] usb 3-1: Manufacturer: syz [ 1337.582758][ T204] usb 3-1: SerialNumber: syz [ 1337.685128][ T204] usb 3-1: config 0 descriptor?? [ 1337.913303][ T204] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1338.945579][ T204] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1339.006881][ T204] usb 3-1: USB disconnect, device number 64 [ 1339.305769][T23025] netlink: 'syz.0.6661': attribute type 7 has an invalid length. [ 1339.509433][T23025] netlink: 'syz.0.6661': attribute type 7 has an invalid length. [ 1339.511084][T13684] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.525976][T13684] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.526126][T13684] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.526202][T13684] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1342.897445][T23150] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1346.243050][ T38] audit: type=1326 audit(2000001137.801:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.243129][ T38] audit: type=1326 audit(2000001137.801:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.243181][ T38] audit: type=1326 audit(2000001137.801:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.264680][ T38] audit: type=1326 audit(2000001137.811:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.265416][ T38] audit: type=1326 audit(2000001137.821:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.272020][ T38] audit: type=1326 audit(2000001137.831:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.325020][ T38] audit: type=1326 audit(2000001137.881:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.325080][ T38] audit: type=1326 audit(2000001137.881:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.384212][ T38] audit: type=1326 audit(2000001137.891:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1346.384383][ T38] audit: type=1326 audit(2000001137.891:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23252 comm="syz.4.6769" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f238698e0d9 code=0x7ffc0000 [ 1347.228531][T23283] netlink: Unknown NAT attribute (type=42, max=9) [ 1347.228572][T23283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1348.674910][ T5704] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1348.824939][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 1348.826894][ T5704] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=5b.fa [ 1348.828577][ T5704] usb 5-1: config 8 has an invalid interface number: 190 but max is 0 [ 1348.828604][ T5704] usb 5-1: config 8 has no interface number 0 [ 1348.828638][ T5704] usb 5-1: config 8 interface 190 has no altsetting 0 [ 1348.838749][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.838777][ T5704] usb 5-1: Product: syz [ 1348.838795][ T5704] usb 5-1: Manufacturer: syz [ 1348.838810][ T5704] usb 5-1: SerialNumber: syz [ 1349.130487][ T5704] hub 5-1:8.190: bad descriptor, ignoring hub [ 1349.130531][ T5704] hub 5-1:8.190: probe with driver hub failed with error -5 [ 1349.153847][ T5704] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 1349.169465][ T5704] usb 5-1: selecting invalid altsetting 0 [ 1349.206939][ T5704] usb 5-1: USB disconnect, device number 54 [ 1349.244945][T14768] wlan1: Trigger new scan to find an IBSS to join [ 1349.563200][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6820'. [ 1349.746535][ T2383] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 1349.753813][ T2383] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 1352.464921][ T5703] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1352.638605][ T5703] usb 3-1: not running at top speed; connect to a high speed hub [ 1352.638650][ T5703] usb 3-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 1352.643239][ T5703] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1352.673004][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.673035][ T5703] usb 3-1: Product: ␊ [ 1352.673050][ T5703] usb 3-1: SerialNumber: ⱒ [ 1353.495013][ T5703] usbhid 3-1:1.0: can't add hid device: -71 [ 1353.495147][ T5703] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1353.524936][ T5703] usb 3-1: USB disconnect, device number 65 [ 1354.044119][T23481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6872'. [ 1354.156924][T23481] erspan0: entered promiscuous mode [ 1354.157265][T23481] macvtap1: entered promiscuous mode [ 1354.157472][T23481] macvtap1: entered allmulticast mode [ 1354.157489][T23481] erspan0: entered allmulticast mode [ 1354.195686][T14772] wlan1: Trigger new scan to find an IBSS to join [ 1354.555815][T23486] erspan0: left allmulticast mode [ 1354.556052][T23486] erspan0: left promiscuous mode [ 1354.622252][T23486] macvtap1: left promiscuous mode [ 1354.622283][T23486] macvtap1: left allmulticast mode [ 1355.175887][T14765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.056565][ T5877] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1356.210016][ T5877] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1356.211117][ T5877] usb 1-1: not running at top speed; connect to a high speed hub [ 1356.211154][ T5877] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1356.213629][ T5877] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1356.213656][ T5877] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1356.213679][ T5877] usb 1-1: config 14 has no interface number 0 [ 1356.213697][ T5877] usb 1-1: config 14 has no interface number 1 [ 1356.213771][ T5877] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1356.213796][ T5877] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 1356.213825][ T5877] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1356.213852][ T5877] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 1356.213882][ T5877] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 1356.213909][ T5877] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1356.213933][ T5877] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.213962][ T5877] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1356.213981][ T5877] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1356.332836][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.332908][ T5877] usb 1-1: Product: syz [ 1356.332948][ T5877] usb 1-1: Manufacturer: syz [ 1356.332983][ T5877] usb 1-1: SerialNumber: syz [ 1356.846757][ T5877] legousbtower 1-1:14.57: interrupt endpoints not found [ 1357.248074][ T5877] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1357.251910][ T5877] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1357.917795][T23585] usb 1-1: LEGO USB Tower reset control request failed [ 1357.920882][ T5703] usb 1-1: USB disconnect, device number 40 [ 1357.977043][ T5703] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 1360.320236][ T5591] block nbd0: Receive control failed (result -32) [ 1360.951139][T11237] block nbd0: shutting down sockets [ 1361.961693][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.084670][T23835] all: renamed from batadv_slave_0 [ 1365.704943][ T5703] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1365.860391][ T5703] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1365.861955][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.862004][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.910025][ T5703] usb 3-1: config 0 descriptor?? [ 1366.164574][ T5703] usbhid 3-1:0.0: can't add hid device: -71 [ 1366.164713][ T5703] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1366.211426][ T5703] usb 3-1: USB disconnect, device number 66 [ 1366.685190][ T5703] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1366.845819][ T5703] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1366.847618][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.847667][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.887807][ T5703] usb 3-1: config 0 descriptor?? [ 1367.061681][T23891] bond1: entered allmulticast mode [ 1367.419459][T23895] bond1: (slave macvlan2): Opening slave failed [ 1367.705713][ T5703] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1367.737770][ T5703] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 1368.498448][ T5703] usb 3-1: USB disconnect, device number 67 [ 1368.498547][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1369.737589][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 1369.737609][ T38] audit: type=1326 audit(2000001161.301:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d8e9d7e57 code=0x7ffc0000 [ 1369.739807][ T38] audit: type=1326 audit(2000001161.301:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d8e97f459 code=0x7ffc0000 [ 1369.741758][ T38] audit: type=1326 audit(2000001161.301:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d8e9d7e57 code=0x7ffc0000 [ 1369.743343][ T38] audit: type=1326 audit(2000001161.301:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d8e97f459 code=0x7ffc0000 [ 1369.743830][ T38] audit: type=1326 audit(2000001161.301:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d8e9d7e57 code=0x7ffc0000 [ 1369.744127][ T38] audit: type=1326 audit(2000001161.301:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d8e97f459 code=0x7ffc0000 [ 1369.747912][ T38] audit: type=1326 audit(2000001161.311:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d8e9d7e57 code=0x7ffc0000 [ 1369.748059][ T38] audit: type=1326 audit(2000001161.311:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d8e97f459 code=0x7ffc0000 [ 1369.748169][ T38] audit: type=1326 audit(2000001161.311:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d8e9d7e57 code=0x7ffc0000 [ 1369.748293][ T38] audit: type=1326 audit(2000001161.311:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23956 comm="syz.2.7094" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d8e97f459 code=0x7ffc0000 [ 1376.035137][ T5314] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1376.185015][ T5314] usb 3-1: Using ep0 maxpacket: 32 [ 1376.186121][ T5314] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1376.187703][ T5314] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1376.187732][ T5314] usb 3-1: config 0 has no interface number 0 [ 1376.187791][ T5314] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1376.187818][ T5314] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1376.187851][ T5314] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1376.187884][ T5314] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1376.187912][ T5314] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1376.187941][ T5314] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1376.187967][ T5314] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1376.187996][ T5314] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1376.188027][ T5314] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1376.188055][ T5314] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.191256][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.191286][ T5314] usb 3-1: Product: syz [ 1376.191302][ T5314] usb 3-1: Manufacturer: syz [ 1376.191318][ T5314] usb 3-1: SerialNumber: syz [ 1376.404695][ T5314] usb 3-1: config 0 descriptor?? [ 1376.416355][T24157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1376.417108][T24157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1376.449742][ T5314] usb 3-1: will this work? Response EP is not usually 3 [ 1376.449771][ T5314] usb 3-1: will this work? Image data EP is not usually 2 [ 1376.474028][ T5314] scsi host1: microtekX6 [ 1376.759273][ T5590] usb 3-1: USB disconnect, device number 68 [ 1376.774911][ T5868] usb 3-1: error -19 submitting URB [ 1381.134874][ T5703] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1381.324932][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 1381.325924][ T5703] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1381.327400][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.327452][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1381.327479][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1381.331256][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1381.331282][ T5703] usb 1-1: Product: syz [ 1381.331299][ T5703] usb 1-1: Manufacturer: syz [ 1381.331314][ T5703] usb 1-1: SerialNumber: syz [ 1381.376904][ T5703] usb 1-1: config 0 descriptor?? [ 1381.915971][ T5703] rc_core: IR keymap rc-imon-rsc not found [ 1381.915995][ T5703] Registered IR keymap rc-empty [ 1382.017547][ T5703] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1382.056461][ T5703] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 1382.317826][ T5703] usb 1-1: USB disconnect, device number 41 [ 1383.924875][ T5703] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1384.079748][ T5703] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1384.111515][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.111546][ T5703] usb 1-1: Product: syz [ 1384.111563][ T5703] usb 1-1: Manufacturer: syz [ 1384.111579][ T5703] usb 1-1: SerialNumber: syz [ 1384.180728][ T5703] usb 1-1: config 0 descriptor?? [ 1384.412317][ T5703] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1385.912770][ T5703] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1385.929257][ T5703] usb 1-1: USB disconnect, device number 42 [ 1386.960258][T24444] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5584] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[24444] [ 1387.577245][ T8091] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1390.217630][T24518] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5584] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[24518] [ 1390.964320][T24523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7331'. [ 1392.802818][T24592] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1399.441880][T24771] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 1401.618168][T24843] binder_alloc: 24841: pid 24841 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1404.287543][ T204] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1404.465854][ T204] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1404.467401][ T204] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.467459][ T204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.482881][ T204] usb 1-1: config 0 descriptor?? [ 1404.536599][ T204] pwc: Askey VC010 type 2 USB webcam detected. [ 1404.908329][ T204] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1404.909139][ T204] pwc: recv_control_msg error -32 req 02 val 2700 [ 1404.914511][ T204] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1404.936636][ T204] pwc: recv_control_msg error -32 req 04 val 1000 [ 1404.937386][ T204] pwc: recv_control_msg error -32 req 04 val 1300 [ 1404.938104][ T204] pwc: recv_control_msg error -32 req 04 val 1400 [ 1404.938795][ T204] pwc: recv_control_msg error -32 req 02 val 2000 [ 1404.939566][ T204] pwc: recv_control_msg error -32 req 02 val 2100 [ 1404.940256][ T204] pwc: recv_control_msg error -32 req 04 val 1500 [ 1404.941026][ T204] pwc: recv_control_msg error -32 req 02 val 2500 [ 1405.143694][ T204] pwc: recv_control_msg error -71 req 02 val 2600 [ 1405.144258][ T204] pwc: recv_control_msg error -71 req 02 val 2900 [ 1405.146171][ T204] pwc: recv_control_msg error -71 req 02 val 2800 [ 1405.164956][ T204] pwc: recv_control_msg error -71 req 04 val 1100 [ 1405.176802][ T204] pwc: recv_control_msg error -71 req 04 val 1200 [ 1405.323436][ T204] pwc: Registered as video103. [ 1405.329828][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1405.380599][ T204] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 1405.430830][ T204] usb 1-1: USB disconnect, device number 43 [ 1405.474913][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1405.475756][ T31] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1405.477237][ T31] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1405.477264][ T31] usb 3-1: config 0 has no interface number 0 [ 1405.477313][ T31] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1405.521476][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.521500][ T31] usb 3-1: Product: syz [ 1405.521513][ T31] usb 3-1: Manufacturer: syz [ 1405.521525][ T31] usb 3-1: SerialNumber: syz [ 1405.645166][ T31] usb 3-1: config 0 descriptor?? [ 1406.145262][T24944] syzkaller0: entered promiscuous mode [ 1406.145290][T24944] syzkaller0: entered allmulticast mode [ 1407.106318][ T31] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 1407.106385][ T31] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1407.106403][ T31] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1407.106503][ T31] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1407.171820][ T31] usb 3-1: USB disconnect, device number 69 [ 1411.325093][ T5314] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1411.475403][ T5314] usb 1-1: Using ep0 maxpacket: 8 [ 1411.476261][ T5314] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1411.484023][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.484051][ T5314] usb 1-1: Product: syz [ 1411.484067][ T5314] usb 1-1: Manufacturer: syz [ 1411.484083][ T5314] usb 1-1: SerialNumber: syz [ 1411.547226][ T5314] usb 1-1: config 0 descriptor?? [ 1411.607446][ T5314] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1413.227448][ T5314] gspca_sonixj: reg_w1 err -71 [ 1413.305097][ T5314] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1413.356222][ T5314] usb 1-1: USB disconnect, device number 44 [ 1413.766629][ T2383] pvrusb2: request_firmware fatal error with code=-110 [ 1413.766670][ T2383] pvrusb2: Failure uploading firmware1 [ 1413.766683][ T2383] pvrusb2: Device initialization was not successful. [ 1413.766692][ T2383] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1413.766703][ T2383] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1413.771131][ T5704] pvrusb2: Device being rendered inoperable [ 1414.935893][T25077] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input36 [ 1415.466143][T25077] input: failed to attach handler evdev to device input36, error: -4 [ 1415.906399][T25136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1416.028973][T25141] gretap2: entered promiscuous mode [ 1416.057557][T25141] bond2: (slave gretap2): making interface the new active one [ 1416.145318][T25141] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1419.575656][T14772] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1419.915079][T10891] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 1420.070057][T10891] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1420.071481][T10891] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1420.071520][T10891] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1420.071542][T10891] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.071561][T10891] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1420.071585][T10891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.157782][T10891] usb 5-1: config 0 descriptor?? [ 1420.160070][T25198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1420.573671][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573709][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573736][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573762][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573787][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573814][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573841][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573867][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573893][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.573920][T10891] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 1420.716594][T10891] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.05 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 1420.907924][T10891] usb 5-1: USB disconnect, device number 55 [ 1423.491496][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.775259][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1425.956764][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1425.957606][ T31] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1425.963501][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.963529][ T31] usb 5-1: Product: syz [ 1425.963545][ T31] usb 5-1: Manufacturer: syz [ 1425.963560][ T31] usb 5-1: SerialNumber: syz [ 1426.039057][ T31] usb 5-1: config 0 descriptor?? [ 1426.066171][ T31] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1426.954978][T10891] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1427.094995][T10891] usb 3-1: device descriptor read/64, error -71 [ 1427.455029][T10891] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1427.534859][ T31] gspca_sonixj: i2c_w8 err -71 [ 1427.586516][T10891] usb 3-1: device descriptor read/64, error -71 [ 1427.614967][ T31] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1427.634286][ T31] usb 5-1: USB disconnect, device number 56 [ 1427.695517][T10891] usb usb3-port1: attempt power cycle [ 1428.184924][T10891] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1428.208625][T10891] usb 3-1: device descriptor read/8, error -71 [ 1429.506730][T10891] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1429.525597][T10891] usb 3-1: device descriptor read/8, error -71 [ 1429.809024][T10891] usb usb3-port1: unable to enumerate USB device [ 1432.516784][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1432.675318][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1432.676329][ T31] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1432.677143][ T31] usb 5-1: config 0 has no interfaces? [ 1432.710692][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.710723][ T31] usb 5-1: Product: syz [ 1432.710740][ T31] usb 5-1: Manufacturer: syz [ 1432.710758][ T31] usb 5-1: SerialNumber: syz [ 1432.745683][ T31] usb 5-1: config 0 descriptor?? [ 1432.967430][ T31] usb 5-1: USB disconnect, device number 57 [ 1440.824028][T25586] jffs2: notice: (25586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1443.235209][ T5703] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1443.458832][ T5703] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1443.493362][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.494139][ T5703] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.518922][ T5703] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1443.595810][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.595909][ T5703] usb 1-1: Product: syz [ 1443.595991][ T5703] usb 1-1: Manufacturer: syz [ 1443.596072][ T5703] usb 1-1: SerialNumber: syz [ 1447.000784][ T5703] usb 1-1: USB disconnect, device number 45 [ 1447.452427][T25615] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1447.825001][ T5877] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1447.978028][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 1447.978900][ T5877] usb 1-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1447.980459][ T5877] usb 1-1: config index 0 descriptor too short (expected 32768, got 75) [ 1447.980486][ T5877] usb 1-1: config 0 has an invalid interface number: 253 but max is -1 [ 1447.980508][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.980529][ T5877] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1447.980550][ T5877] usb 1-1: config 0 has no interface number 0 [ 1448.004022][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.004095][ T5877] usb 1-1: Product: syz [ 1448.004136][ T5877] usb 1-1: Manufacturer: syz [ 1448.004178][ T5877] usb 1-1: SerialNumber: syz [ 1448.093934][ T5877] usb 1-1: config 0 descriptor?? [ 1449.043384][ T5877] usb 1-1: USB disconnect, device number 46 [ 1451.573074][T14773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1456.088121][T25776] /dev/nullb0: Can't open blockdev [ 1456.261495][T25775] gfs2: not a GFS2 filesystem [ 1456.821826][ T31] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1457.095273][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1457.102841][ T31] usb 3-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1457.171543][ T31] usb 3-1: config index 0 descriptor too short (expected 32768, got 75) [ 1457.171634][ T31] usb 3-1: config 0 has an invalid interface number: 253 but max is -1 [ 1457.171685][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.171734][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1457.171796][ T31] usb 3-1: config 0 has no interface number 0 [ 1457.172256][ T31] usb 3-1: config 0 interface 253 has no altsetting 0 [ 1458.062608][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.062640][ T31] usb 3-1: Product: syz [ 1458.062656][ T31] usb 3-1: Manufacturer: syz [ 1458.062673][ T31] usb 3-1: SerialNumber: syz [ 1458.095990][ T31] usb 3-1: config 0 descriptor?? [ 1458.414384][ T31] rndis_host 3-1:0.253: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1458.426731][ T31] cdc_acm 3-1:0.253: Zero length descriptor references [ 1458.426780][ T31] cdc_acm 3-1:0.253: probe with driver cdc_acm failed with error -22 [ 1458.456853][ T31] usb 3-1: USB disconnect, device number 74 [ 1458.480941][ T8286] udevd[8286]: setting mode of /dev/bus/usb/003/074 to 020664 failed: No such file or directory [ 1458.481125][ T8286] udevd[8286]: setting owner of /dev/bus/usb/003/074 to uid=0, gid=0 failed: No such file or directory [ 1460.012611][T25833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7896'. [ 1460.045406][T25833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7896'. [ 1460.385820][T10891] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1460.887900][T10891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1460.889790][T10891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.889849][T10891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.604809][T10891] usb 3-1: config 0 descriptor?? [ 1461.783164][T10891] pwc: Askey VC010 type 2 USB webcam detected. [ 1461.843432][T10891] pwc: send_video_command error -71 [ 1461.843451][T10891] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1461.843577][T10891] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1461.880679][T10891] usb 3-1: USB disconnect, device number 75 [ 1461.997913][T25843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1461.997945][T25843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1462.344959][ T5314] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1462.399237][T25843] vhci_hcd vhci_hcd.0: Device attached [ 1462.595072][T24313] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1462.696697][T25844] vhci_hcd: connection reset by peer [ 1462.750382][T24313] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1462.753823][T24313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.753882][T24313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.811201][T24313] usb 3-1: config 0 descriptor?? [ 1462.832224][T14759] vhci_hcd vhci_hcd.0: stop threads [ 1462.841392][T24313] pwc: Askey VC010 type 2 USB webcam detected. [ 1462.877339][T14759] vhci_hcd vhci_hcd.0: release socket [ 1463.059842][T14759] vhci_hcd vhci_hcd.0: disconnect device [ 1463.237493][T24313] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1463.243389][T24313] pwc: recv_control_msg error -32 req 02 val 2700 [ 1463.244290][T24313] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1463.248058][T24313] pwc: recv_control_msg error -32 req 04 val 1000 [ 1463.252751][T24313] pwc: recv_control_msg error -32 req 04 val 1300 [ 1463.286190][T24313] pwc: recv_control_msg error -32 req 04 val 1400 [ 1463.301677][T24313] pwc: recv_control_msg error -32 req 02 val 2000 [ 1463.313045][T24313] pwc: recv_control_msg error -32 req 02 val 2100 [ 1463.323023][T24313] pwc: recv_control_msg error -32 req 04 val 1500 [ 1463.332270][T24313] pwc: recv_control_msg error -32 req 02 val 2500 [ 1463.346304][T24313] pwc: recv_control_msg error -32 req 02 val 2400 [ 1463.352310][T24313] pwc: recv_control_msg error -32 req 02 val 2600 [ 1463.353910][T24313] pwc: recv_control_msg error -32 req 02 val 2900 [ 1463.569274][T24313] pwc: recv_control_msg error -71 req 04 val 1100 [ 1463.571872][T24313] pwc: recv_control_msg error -71 req 04 val 1200 [ 1463.592776][T24313] pwc: Registered as video103. [ 1463.640545][T24313] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 1463.833091][T24313] usb 3-1: USB disconnect, device number 76 [ 1464.164961][ T5704] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1464.314904][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 1464.315983][ T5704] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1464.317786][ T5704] usb 5-1: config index 0 descriptor too short (expected 32768, got 75) [ 1464.317812][ T5704] usb 5-1: config 0 has an invalid interface number: 253 but max is -1 [ 1464.317835][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.317887][ T5704] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1464.317909][ T5704] usb 5-1: config 0 has no interface number 0 [ 1464.317942][ T5704] usb 5-1: config 0 interface 253 has no altsetting 0 [ 1464.322984][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.323013][ T5704] usb 5-1: Product: syz [ 1464.323030][ T5704] usb 5-1: Manufacturer: syz [ 1464.323045][ T5704] usb 5-1: SerialNumber: syz [ 1464.435813][ T5704] usb 5-1: config 0 descriptor?? [ 1464.890385][ T5704] rndis_host 5-1:0.253: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1464.909811][ T5704] cdc_acm 5-1:0.253: Zero length descriptor references [ 1464.909857][ T5704] cdc_acm 5-1:0.253: probe with driver cdc_acm failed with error -22 [ 1464.946130][ T5704] usb 5-1: USB disconnect, device number 58 [ 1467.935108][ T5314] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1470.787230][T10891] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1470.965937][T10891] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1470.967459][T10891] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1470.967488][T10891] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1470.967509][T10891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1470.967561][T10891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1470.967590][T10891] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1471.046708][T10891] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1471.046738][T10891] usb 3-1: Product: syz [ 1471.046753][T10891] usb 3-1: Manufacturer: syz [ 1472.067514][T10891] cdc_wdm 3-1:1.0: skipping garbage [ 1472.067535][T10891] cdc_wdm 3-1:1.0: skipping garbage [ 1472.116073][T10891] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1472.116099][T10891] cdc_wdm 3-1:1.0: Unknown control protocol [ 1474.008896][ T31] usb 3-1: USB disconnect, device number 77 [ 1475.875044][T10807] Bluetooth: hci2: command 0x2016 tx timeout [ 1483.104980][ T5717] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1483.255421][ T5717] usb 5-1: Using ep0 maxpacket: 8 [ 1483.256807][ T5717] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=8e.41 [ 1483.261338][ T5717] usb 5-1: config index 0 descriptor too short (expected 32768, got 75) [ 1483.261368][ T5717] usb 5-1: config 0 has an invalid interface number: 253 but max is -1 [ 1483.261391][ T5717] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.261411][ T5717] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1483.261432][ T5717] usb 5-1: config 0 has no interface number 0 [ 1483.261465][ T5717] usb 5-1: config 0 interface 253 has no altsetting 0 [ 1483.331649][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.331677][ T5717] usb 5-1: Product: syz [ 1483.331693][ T5717] usb 5-1: Manufacturer: syz [ 1483.331709][ T5717] usb 5-1: SerialNumber: syz [ 1483.368977][ T5717] usb 5-1: config 0 descriptor?? [ 1483.595900][ T5717] rndis_host 5-1:0.253: invalid descriptor buffer length [ 1483.595924][ T5717] rndis_host 5-1:0.253: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1483.601980][ T5717] cdc_acm 5-1:0.253: invalid descriptor buffer length [ 1483.640224][ T5717] usb 5-1: USB disconnect, device number 59 [ 1484.195392][T14762] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1484.565243][T26228] vhci_hcd vhci_hcd.0: remove, state 4 [ 1484.640919][T26228] usb usb34: USB disconnect, device number 1 [ 1484.840495][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.176766][ T204] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1485.512163][T26269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8066'. [ 1485.603830][ T204] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1485.620279][ T204] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1485.620310][ T204] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1485.620353][ T204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.672634][T26273] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1486.072750][ T5703] usb 3-1: USB disconnect, device number 78 [ 1486.225603][T26265] nvme nvme0: rdma connection establishment failed (-512) [ 1488.585588][T12288] vhci_hcd vhci_hcd.0: stop threads [ 1488.585611][T12288] vhci_hcd vhci_hcd.0: release socket [ 1488.585649][T12288] vhci_hcd vhci_hcd.0: disconnect device [ 1488.661331][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.661354][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.661391][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1488.697244][T26228] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 1488.780834][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.780856][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.780893][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1488.780937][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.780950][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.780981][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1488.781023][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.781037][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.781067][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1488.781108][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.781121][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.781150][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1488.781192][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.781212][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.781242][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1488.781283][ T1105] vhci_hcd vhci_hcd.0: stop threads [ 1488.781297][ T1105] vhci_hcd vhci_hcd.0: release socket [ 1488.781326][ T1105] vhci_hcd vhci_hcd.0: disconnect device [ 1491.482889][T26228] vhci_hcd vhci_hcd.0: remove, state 4 [ 1491.482958][T26228] usb usb33: USB disconnect, device number 1 [ 1492.360100][T26228] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 1492.384555][T14765] vhci_hcd vhci_hcd.0: stop threads [ 1492.384576][T14765] vhci_hcd vhci_hcd.0: release socket [ 1492.384609][T14765] vhci_hcd vhci_hcd.0: disconnect device [ 1492.384654][T14765] vhci_hcd vhci_hcd.0: stop threads [ 1492.384668][T14765] vhci_hcd vhci_hcd.0: release socket [ 1492.543318][T14765] ================================================================== [ 1492.543336][T14765] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.543389][T14765] Read of size 8 at addr ffff888029220aa8 by task kworker/u8:25/14765 [ 1492.543409][T14765] [ 1492.543433][T14765] CPU: 0 UID: 0 PID: 14765 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1492.543465][T14765] Tainted: [L]=SOFTLOCKUP [ 1492.543473][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1492.543488][T14765] Workqueue: usbip_event event_handler [ 1492.543531][T14765] Call Trace: [ 1492.543540][T14765] [ 1492.543550][T14765] dump_stack_lvl+0xe8/0x150 [ 1492.543584][T14765] print_address_description+0x55/0x1e0 [ 1492.543617][T14765] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.543647][T14765] print_report+0x58/0x70 [ 1492.543675][T14765] kasan_report+0x117/0x150 [ 1492.543702][T14765] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.543738][T14765] vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.543773][T14765] ? rt_spin_unlock+0x163/0x200 [ 1492.543802][T14765] vhci_shutdown_connection+0x299/0x630 [ 1492.543838][T14765] event_handler+0x2b0/0x4a0 [ 1492.543867][T14765] ? process_scheduled_works+0xa20/0x14e0 [ 1492.543900][T14765] process_scheduled_works+0xa8e/0x14e0 [ 1492.543941][T14765] ? __pfx_process_scheduled_works+0x10/0x10 [ 1492.543969][T14765] ? assign_work+0x3cf/0x5d0 [ 1492.543997][T14765] worker_thread+0xa47/0xfb0 [ 1492.544038][T14765] kthread+0x388/0x470 [ 1492.544070][T14765] ? __pfx_worker_thread+0x10/0x10 [ 1492.544094][T14765] ? __pfx_kthread+0x10/0x10 [ 1492.544125][T14765] ret_from_fork+0x514/0xb70 [ 1492.544159][T14765] ? __pfx_ret_from_fork+0x10/0x10 [ 1492.544192][T14765] ? __switch_to+0xc89/0x1420 [ 1492.544220][T14765] ? __pfx_kthread+0x10/0x10 [ 1492.544252][T14765] ret_from_fork_asm+0x1a/0x30 [ 1492.544294][T14765] [ 1492.544302][T14765] [ 1492.544308][T14765] Allocated by task 1: [ 1492.544317][T14765] kasan_save_track+0x3e/0x80 [ 1492.544349][T14765] __kasan_kmalloc+0x93/0xb0 [ 1492.544368][T14765] __kmalloc_noprof+0x41a/0x780 [ 1492.544386][T14765] __usb_create_hcd+0x67/0x900 [ 1492.544411][T14765] vhci_hcd_probe+0x104/0x3f0 [ 1492.544436][T14765] platform_probe+0xf9/0x190 [ 1492.544459][T14765] really_probe+0x254/0xae0 [ 1492.544487][T14765] __driver_probe_device+0x1e8/0x360 [ 1492.544519][T14765] driver_probe_device+0x4f/0x240 [ 1492.544548][T14765] __device_attach_driver+0x270/0x410 [ 1492.544576][T14765] bus_for_each_drv+0x25b/0x2f0 [ 1492.544593][T14765] __device_attach+0x2c7/0x450 [ 1492.544617][T14765] device_initial_probe+0xa1/0xd0 [ 1492.544642][T14765] bus_probe_device+0x12d/0x220 [ 1492.544660][T14765] device_add+0x7d7/0xb80 [ 1492.544681][T14765] platform_device_add+0x4bd/0x860 [ 1492.544705][T14765] platform_device_register_full+0x62d/0x710 [ 1492.544726][T14765] vhci_hcd_init+0x227/0x370 [ 1492.544754][T14765] do_one_initcall+0x250/0x870 [ 1492.544783][T14765] do_initcall_level+0x10a/0x1a0 [ 1492.544806][T14765] do_initcalls+0x59/0xa0 [ 1492.544827][T14765] kernel_init_freeable+0x29d/0x3e0 [ 1492.544850][T14765] kernel_init+0x1d/0x1d0 [ 1492.544869][T14765] ret_from_fork+0x514/0xb70 [ 1492.544905][T14765] ret_from_fork_asm+0x1a/0x30 [ 1492.544937][T14765] [ 1492.544942][T14765] Freed by task 26228: [ 1492.544952][T14765] kasan_save_track+0x3e/0x80 [ 1492.544983][T14765] kasan_save_free_info+0x40/0x50 [ 1492.545009][T14765] __kasan_slab_free+0x5c/0x80 [ 1492.545026][T14765] kfree+0x1c5/0x6c0 [ 1492.545055][T14765] vhci_hcd_remove+0xed/0x110 [ 1492.545081][T14765] device_release_driver_internal+0x48b/0x880 [ 1492.545107][T14765] unbind_store+0x1a4/0x1d0 [ 1492.545129][T14765] kernfs_fop_write_iter+0x3a5/0x540 [ 1492.545156][T14765] vfs_write+0x61e/0xbb0 [ 1492.545177][T14765] ksys_write+0x156/0x270 [ 1492.545199][T14765] do_syscall_64+0x174/0x580 [ 1492.545227][T14765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.545248][T14765] [ 1492.545254][T14765] Last potentially related work creation: [ 1492.545262][T14765] kasan_save_stack+0x3e/0x60 [ 1492.545292][T14765] kasan_record_aux_stack+0xbd/0xd0 [ 1492.545320][T14765] insert_work+0x3d/0x330 [ 1492.545339][T14765] __queue_work+0xd1d/0x10f0 [ 1492.545362][T14765] queue_work_on+0x106/0x1d0 [ 1492.545385][T14765] unlink1+0x33d/0x3e0 [ 1492.545407][T14765] usb_hcd_unlink_urb+0xda/0x1d0 [ 1492.545430][T14765] usb_kill_urb+0x10b/0x2f0 [ 1492.545457][T14765] hub_quiesce+0x20f/0x320 [ 1492.545475][T14765] hub_suspend+0x904/0xad0 [ 1492.545492][T14765] usb_suspend_both+0x285/0x1040 [ 1492.545515][T14765] usb_runtime_suspend+0x58/0x110 [ 1492.545539][T14765] __rpm_callback+0x2d6/0x930 [ 1492.545569][T14765] rpm_suspend+0x8a0/0x17a0 [ 1492.545591][T14765] __pm_runtime_suspend+0x12c/0x1a0 [ 1492.545615][T14765] usb_runtime_idle+0x76/0x90 [ 1492.545638][T14765] rpm_idle+0x379/0x900 [ 1492.545661][T14765] pm_runtime_work+0x11e/0x1b0 [ 1492.545687][T14765] process_scheduled_works+0xa8e/0x14e0 [ 1492.545709][T14765] worker_thread+0xa47/0xfb0 [ 1492.545730][T14765] kthread+0x388/0x470 [ 1492.545758][T14765] ret_from_fork+0x514/0xb70 [ 1492.545786][T14765] ret_from_fork_asm+0x1a/0x30 [ 1492.545815][T14765] [ 1492.545820][T14765] Second to last potentially related work creation: [ 1492.545828][T14765] kasan_save_stack+0x3e/0x60 [ 1492.545857][T14765] kasan_record_aux_stack+0xbd/0xd0 [ 1492.545881][T14765] insert_work+0x3d/0x330 [ 1492.545905][T14765] __queue_work+0xd1d/0x10f0 [ 1492.545927][T14765] queue_work_on+0x106/0x1d0 [ 1492.545949][T14765] usb_hcd_submit_urb+0xa2d/0x1b40 [ 1492.545971][T14765] usb_start_wait_urb+0x13f/0x5b0 [ 1492.546000][T14765] usb_control_msg+0x234/0x3e0 [ 1492.546029][T14765] hub_ext_port_status+0x114/0x810 [ 1492.546054][T14765] hub_event+0x76e/0x4cf0 [ 1492.546071][T14765] process_scheduled_works+0xa8e/0x14e0 [ 1492.546091][T14765] worker_thread+0xa47/0xfb0 [ 1492.546113][T14765] kthread+0x388/0x470 [ 1492.546140][T14765] ret_from_fork+0x514/0xb70 [ 1492.546166][T14765] ret_from_fork_asm+0x1a/0x30 [ 1492.546195][T14765] [ 1492.546200][T14765] The buggy address belongs to the object at ffff888029220000 [ 1492.546200][T14765] which belongs to the cache kmalloc-8k of size 8192 [ 1492.546220][T14765] The buggy address is located 2728 bytes inside of [ 1492.546220][T14765] freed 8192-byte region [ffff888029220000, ffff888029222000) [ 1492.546241][T14765] [ 1492.546247][T14765] The buggy address belongs to the physical page: [ 1492.546271][T14765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29220 [ 1492.546290][T14765] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1492.546306][T14765] flags: 0x80000000000040(head|node=0|zone=1) [ 1492.546322][T14765] page_type: f5(slab) [ 1492.546341][T14765] raw: 0080000000000040 ffff88813ffb2280 dead000000000122 0000000000000000 [ 1492.546359][T14765] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1492.546378][T14765] head: 0080000000000040 ffff88813ffb2280 dead000000000122 0000000000000000 [ 1492.546395][T14765] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1492.546413][T14765] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1492.546430][T14765] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1492.546440][T14765] page dumped because: kasan: bad access detected [ 1492.546454][T14765] page_owner tracks the page as allocated [ 1492.546461][T14765] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10429286454, free_ts 0 [ 1492.546496][T14765] post_alloc_hook+0x1f9/0x250 [ 1492.546525][T14765] get_page_from_freelist+0x262a/0x26a0 [ 1492.546547][T14765] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1492.546569][T14765] allocate_slab+0x79/0x5e0 [ 1492.546593][T14765] refill_objects+0x2d8/0x350 [ 1492.546621][T14765] __pcs_replace_empty_main+0x330/0x690 [ 1492.546646][T14765] __kmalloc_noprof+0x544/0x780 [ 1492.546664][T14765] wiphy_new_nm+0x625/0x1a10 [ 1492.546685][T14765] virt_wifi_init_module+0x55/0x390 [ 1492.546704][T14765] do_one_initcall+0x250/0x870 [ 1492.546733][T14765] do_initcall_level+0x10a/0x1a0 [ 1492.546756][T14765] do_initcalls+0x59/0xa0 [ 1492.546776][T14765] kernel_init_freeable+0x29d/0x3e0 [ 1492.546799][T14765] kernel_init+0x1d/0x1d0 [ 1492.546818][T14765] ret_from_fork+0x514/0xb70 [ 1492.546847][T14765] ret_from_fork_asm+0x1a/0x30 [ 1492.546878][T14765] page_owner free stack trace missing [ 1492.546886][T14765] [ 1492.546899][T14765] Memory state around the buggy address: [ 1492.546910][T14765] ffff888029220980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.546926][T14765] ffff888029220a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.546941][T14765] >ffff888029220a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.546953][T14765] ^ [ 1492.546964][T14765] ffff888029220b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.546978][T14765] ffff888029220b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1492.546990][T14765] ================================================================== [ 1492.571125][T14765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1492.571220][T14765] CPU: 0 UID: 0 PID: 14765 Comm: kworker/u8:25 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 1492.571338][T14765] Tainted: [L]=SOFTLOCKUP [ 1492.571369][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1492.571415][T14765] Workqueue: usbip_event event_handler [ 1492.571518][T14765] Call Trace: [ 1492.571542][T14765] [ 1492.571567][T14765] vpanic+0x56c/0xa60 [ 1492.571682][T14765] ? __pfx_vpanic+0x10/0x10 [ 1492.571778][T14765] ? __pfx___schedule+0x10/0x10 [ 1492.571872][T14765] panic+0xc5/0xd0 [ 1492.572192][T14765] ? __pfx_panic+0x10/0x10 [ 1492.572394][T14765] ? preempt_schedule_thunk+0x16/0x40 [ 1492.572429][T14765] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.572471][T14765] check_panic_on_warn+0x89/0xb0 [ 1492.572504][T14765] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.572534][T14765] end_report+0x73/0x170 [ 1492.572559][T14765] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.572589][T14765] kasan_report+0x128/0x150 [ 1492.572612][T14765] ? vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.572646][T14765] vhci_cleanup_unlink_list+0xa0/0x450 [ 1492.572679][T14765] ? rt_spin_unlock+0x163/0x200 [ 1492.572705][T14765] vhci_shutdown_connection+0x299/0x630 [ 1492.572738][T14765] event_handler+0x2b0/0x4a0 [ 1492.572765][T14765] ? process_scheduled_works+0xa20/0x14e0 [ 1492.572789][T14765] process_scheduled_works+0xa8e/0x14e0 [ 1492.572830][T14765] ? __pfx_process_scheduled_works+0x10/0x10 [ 1492.572858][T14765] ? assign_work+0x3cf/0x5d0 [ 1492.572884][T14765] worker_thread+0xa47/0xfb0 [ 1492.572925][T14765] kthread+0x388/0x470 [ 1492.572956][T14765] ? __pfx_worker_thread+0x10/0x10 [ 1492.572979][T14765] ? __pfx_kthread+0x10/0x10 [ 1492.573011][T14765] ret_from_fork+0x514/0xb70 [ 1492.573046][T14765] ? __pfx_ret_from_fork+0x10/0x10 [ 1492.573077][T14765] ? __switch_to+0xc89/0x1420 [ 1492.573105][T14765] ? __pfx_kthread+0x10/0x10 [ 1492.573135][T14765] ret_from_fork_asm+0x1a/0x30 [ 1492.573176][T14765] [ 1492.573689][T14765] Kernel Offset: disabled