last executing test programs: 6.477910535s ago: executing program 2 (id=846): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800b2d800000000"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) 6.289153121s ago: executing program 2 (id=847): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) socket$packet(0x11, 0x3, 0x300) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xff, 0x80801) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) read$eventfd(r1, &(0x7f0000000140), 0x8) 5.619949281s ago: executing program 0 (id=851): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r3 = getpgid(0xffffffffffffffff) sched_setscheduler(r3, 0x0, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_set$pid(0x2, 0x0, 0x6000) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$pptp(0x18, 0x1, 0x2) 5.339804152s ago: executing program 2 (id=852): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) writev(r4, &(0x7f0000001800)=[{&(0x7f0000000580)='trylock ', 0x8}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c000780080002000100000008000400000100000800030004000000080001001500000008332101f89e4f0481000200030000006a00010073797a30000000000900010073797a3100000000"], 0x94}}, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 4.089721529s ago: executing program 2 (id=854): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f00000000c0)=[0x2000002], &(0x7f0000000280)=[r3, r3], &(0x7f0000000040)=[0x2]}) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execve(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000014"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4c6a0eb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95f4, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x14, 0x2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) syz_io_uring_setup(0x7e24, &(0x7f00000003c0)={0x0, 0x59c7, 0x80, 0x1000, 0x5cc}, &(0x7f0000000480)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 3.949054722s ago: executing program 3 (id=855): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x3, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) keyctl$search(0xa, 0x0, &(0x7f00000018c0)='logon\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x400000, 0x0, 0xffffffffffffffff, 0x7ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 3.809716109s ago: executing program 0 (id=856): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$int_out(r2, 0x0, &(0x7f0000000040)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000001fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf251000000005000f004f00000008000100", @ANYRES32=0x0, @ANYBLOB="e6319f5052481bd4e198dccf3da9085b26838bf2e50609f7c6f87b5b9eabe95cde0caf482b90301a3c9ee8fe546114ee51340363461771c620c3067ecba8b10bfbfd2e46d1a7b56e24d7ca7872ea9a8039c6fc72f37e"], 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x5000) sendfile(r4, r4, 0x0, 0x200900) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344}, 0x8147, 0x200) syz_extract_tcp_res(&(0x7f00000005c0)={0x41424344}, 0xff, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000600)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x18, 0x5c, 0x64, 0x0, 0x55, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x4e21, 0x4e22, r6, r7, 0x0, 0x0, 0x7, 0x10, 0xfffd, 0x0, 0x4, {[@exp_smc={0xfe, 0x6}]}}, {"a9584fad2efd778020b2854d8d74836df7d1639e4774f6b1e1e0378178f718150ac60cdaeb1f5848841bb4ce"}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1c08004821004c00650000030690780a0101020a010102070b35ffffffff02000000004e224e23", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="b1c20005907800090303000112ff9a30062b66ab5f75734e0d07e2adcd000000"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.559785498s ago: executing program 3 (id=857): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3.559378669s ago: executing program 3 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', 0x0, 0x121889c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x3e8, 0x4000000) 2.579773324s ago: executing program 1 (id=859): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000), 0x200000000000014e) 2.575397325s ago: executing program 1 (id=860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x1) (async) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000040026bd70000000000100000000", @ANYRES32=0x0, @ANYBLOB="e95400000000000008001c006ca514e3aa6d314ea0b0c9a2fa8f4607a5ac4da425fc031334040019b376e56f68c8f66c180e8c1ffde49f683f5b7b13046b6a0e8bfa2913efe8548f57131b72ae4ef0c7fe68e151411955892c90e7ce99f33893e2c8afb0e4", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x40800) 2.498171196s ago: executing program 1 (id=861): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0003001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006e00)=ANY=[@ANYBLOB="0c00000011000000060000000c72f2c731396561ff7f00"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = gettid() writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x2, 0x2, 0x1) r6 = syz_io_uring_setup(0x7331, &(0x7f0000000480)={0x0, 0xaeb3, 0x10, 0x3, 0x2d9}, &(0x7f00000001c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f0000000500)={r5}, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback, 0x1}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b87", @ANYBLOB="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", @ANYRESDEC=r1], 0x50) ioprio_set$pid(0x3, r4, 0x4003) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf25060000000800040000800000240001800800060010000000060001000000000008000300ffffffff050002000700000008000400080000003000068014000400fe80000000000000000000000000002208000700", @ANYRES32=0x0, @ANYBLOB="050002005100000008000700", @ANYRES32=0x0, @ANYBLOB="0800020002000000050005007f0000000800040005000000"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x2010) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x0, 0x46, 0x2}) 1.747233622s ago: executing program 2 (id=862): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) writev(r4, &(0x7f0000001800)=[{&(0x7f0000000580)='trylock ', 0x8}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b00002400078008000300000000000800030007000000080001000000000008000300050000002c000780080002000100000008000400000100000800030004000000080001001500000008332101f89e4f0481000200030000006a00010073797a30000000000900010073797a3100000000"], 0x94}}, 0x0) socket(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1.667794777s ago: executing program 0 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000400)={[{@nr_inodes={'nr_inodes', 0x3d, [0x47]}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400) 1.667300556s ago: executing program 3 (id=864): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) open(0x0, 0x4c802, 0xad) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x202040, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000280)=ANY=[@ANYRES16=r0]) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c091) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r6, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x0, 0x40) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r7, 0x0, 0x0, 0x10001, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) 1.608952671s ago: executing program 0 (id=865): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff00000000390000000800030093e671df23fd4c7d8ac76a965d343d9dcebbe045970996c036408acf879e6b6b54d307740ae36cd122660cf774c0251e24ed843afb039f51989b29eadbb0a4024b1e869b65d9a5f4a07b91249f04bac55c8a433f11ec3920a8d334040597a1d8b5998faf6216c9660660500a71d305a4e726726f8e48be009352298c91cf38a9690957b1189ffb83477db0", @ANYRES32=r6, @ANYBLOB="10005a800c0001800400020004000100"], 0x2c}}, 0x0) write$qrtrtun(r1, &(0x7f0000000400)="0b8ca3756ea769f253", 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000003b40)=0x4000000) close(0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x12) 1.26405147s ago: executing program 1 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 997.931423ms ago: executing program 1 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@subj_user}, {@fowner_gt}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}], 0x2f}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) syz_io_uring_setup(0x643d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10700, 0x0, 0x40}, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x202080, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write(0xffffffffffffffff, &(0x7f0000000740)="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", 0x1e3) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r5 = openat$cgroup_devices(r3, &(0x7f0000000500)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x6b) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x7ff, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000080)={0x1, 0x0, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) 980.764757ms ago: executing program 0 (id=868): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='0t', 0x2, 0x4, 0x0, 0x0, r0}]) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c800}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020}, 0x2020) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x159200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x2, [@enum64={0xa, 0x7, 0x0, 0x13, 0x1, 0x1, [{0xa, 0x8001, 0xffffffff}, {0x1, 0x81, 0x9}, {0xb, 0xb0, 0x4}, {0x4, 0x7fffffff, 0x5}, {0x1, 0x6, 0x10000}, {0xe, 0x400ffff, 0x4}, {0x4, 0x2, 0xe7e0}]}, @float={0x7, 0x0, 0x0, 0x10, 0x4}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}, @float={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x8, 0xe4, 0x2}]}]}}, &(0x7f0000003c80)=""/4102, 0xda, 0x1006, 0x0, 0x1ff, 0x10000}, 0x28) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20010018}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 847.868062ms ago: executing program 3 (id=869): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7ffe}, 0x48) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x0, 0x0, @generic=0xff}) 558.584714ms ago: executing program 2 (id=870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001940)=ANY=[@ANYRES32=r4, @ANYBLOB="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", @ANYRESOCT=r3, @ANYRES32=r9, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xff, 0x3}, 0x88) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000340)="07000000010000", 0x7) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) 459.69939ms ago: executing program 3 (id=871): r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x100) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) open$dir(&(0x7f0000000000)='./file0\x00', 0x280002, 0xb0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x801, 0x4, 0x7}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) r12 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r12, 0x5393, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x81, 0x77d, 0x2, 0x14, 0xc0000000000}, 0x0, &(0x7f0000000180)={0x8, 0x10000, 0x3, 0x9, 0xfffffffffffffff7, 0x3, 0x37339521, 0x1}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r3, 0x0, 0x0, 0x1000000}}}, 0x78) lseek(r0, 0x1, 0x1) 328.31861ms ago: executing program 0 (id=872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', 0x0, 0x121889c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x3e8, 0x4000000) 0s ago: executing program 1 (id=873): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000180)={0x1, 0x80, 0x8040000, 0x4, 0xd, "0060930000efa4890200"}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x7, 0x8, 0xfffffffffffffffd, 0x2000000, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xff, 0x9, 0xfffffffffffffffc, 0xf, 0x80000006, 0x800000000}, 0x0, 0x0) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@rose, @netrom, @rose, @remote, @netrom, @bcast, @default, @default]}, &(0x7f0000000080)=0x48, 0x800) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f00000001c0)) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0xa00, 0x0, 0x101, 0xfc}}) 0s ago: executing program 3 (id=875): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x60) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x30041, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000100)={0x6, 0x1000, 0x6, 0x10}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x345}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x7, 0x527, {{0x10, 0x4, 0x3, 0x38, 0x40, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x7}, @timestamp_addr={0x44, 0x24, 0x9, 0x1, 0x4, [{@multicast1, 0x164}, {@multicast2, 0x9}, {@multicast1, 0x6}, {@multicast1}]}]}}}}}) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r9, r8, 0x0, 0x8) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000440)) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=@newchain={0x4c, 0x64, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {0x7, 0x4}, {0xffe1, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x24, r11, 0x1, 0x72bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 78.693748][ T61] hid-generic 0003:FFFF:0000.0002: unknown main item tag 0x0 [ 78.697342][ T61] hid-generic 0003:FFFF:0000.0002: unknown main item tag 0x0 [ 78.701283][ T61] hid-generic 0003:FFFF:0000.0002: unknown main item tag 0x0 [ 78.704795][ T61] hid-generic 0003:FFFF:0000.0002: unknown main item tag 0x0 [ 78.714404][ T61] hid-generic 0003:FFFF:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 78.757758][ T839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 78.761589][ T839] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 78.764803][ T839] usb 8-1: can't read configurations, error -71 [ 78.775933][ T6557] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 78.803428][ T6564] fido_id[6564]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.021527][ T6580] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.024981][ T6579] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 79.141750][ T6584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.147959][ T6584] netlink: 188 bytes leftover after parsing attributes in process `syz.0.110'. [ 79.342173][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 79.345127][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 79.496685][ T6596] ======================================================= [ 79.496685][ T6596] WARNING: The mand mount option has been deprecated and [ 79.496685][ T6596] and is ignored by this kernel. Remove the mand [ 79.496685][ T6596] option from the mount to silence this warning. [ 79.496685][ T6596] ======================================================= [ 79.508011][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.510439][ T5946] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 79.519263][ T6597] overlayfs: overlapping lowerdir path [ 79.529001][ T6602] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 79.531162][ T6602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.542772][ T6602] vhci_hcd vhci_hcd.0: Device attached [ 79.792983][ T1333] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 79.889744][ T6611] mmap: syz.1.115 (6611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.080031][ T6603] vhci_hcd: connection reset by peer [ 80.083280][ T46] vhci_hcd vhci_hcd.2: stop threads [ 80.085794][ T46] vhci_hcd vhci_hcd.2: release socket [ 80.092348][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 80.836586][ T6650] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 80.901563][ T6652] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 80.977967][ T6652] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 81.044551][ T6650] gretap1: entered promiscuous mode [ 81.052232][ T6650] bond1: (slave gretap1): making interface the new active one [ 81.056541][ T6650] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 81.504057][ T6671] netlink: 'syz.3.125': attribute type 15 has an invalid length. [ 81.506722][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 83.030494][ T6687] netlink: 14 bytes leftover after parsing attributes in process `syz.0.127'. [ 83.166668][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'. [ 84.115723][ T6714] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 84.225851][ T6719] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 84.228788][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.233116][ T6719] vhci_hcd vhci_hcd.0: Device attached [ 84.411382][ T6722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.528275][ T839] usb 40-1: SetAddress Request (2) to port 0 [ 84.530377][ T839] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 84.765826][ T6720] vhci_hcd: connection reset by peer [ 84.769516][ T6440] vhci_hcd vhci_hcd.1: stop threads [ 84.771662][ T6440] vhci_hcd vhci_hcd.1: release socket [ 84.774630][ T6440] vhci_hcd vhci_hcd.1: disconnect device [ 84.928275][ T1333] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 85.978260][ T6712] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 85.978307][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.437456][ T29] cfg80211: failed to load regulatory.db [ 86.464710][ T6712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.477831][ T6712] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 86.485837][ T6712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 86.488400][ T6712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.491976][ T6712] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 86.495992][ T6712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 86.498181][ T6712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.503395][ T6712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 86.506648][ T6712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 86.509881][ T6712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.515365][ T6712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 86.543219][ T6712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.902803][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 86.902815][ T40] audit: type=1326 audit(1766527337.860:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.1.145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 87.577372][ T40] audit: type=1326 audit(1766527338.530:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.1.145" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6ffd579 code=0x7fc00000 [ 87.704882][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 87.739463][ T893] hid_parser_main: 8 callbacks suppressed [ 87.739480][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x7 [ 87.745122][ T893] hid-generic 0000:0000:0000.0003: ignoring exceeding usage max [ 87.756467][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.760838][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.763994][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.767117][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.770720][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.771746][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 87.773878][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.781412][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.786980][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.790646][ T893] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.796283][ T893] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 87.857718][ T6781] fido_id[6781]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.058482][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.302186][ T6806] afs: Unknown parameter 'dyn€Œ' [ 88.367180][ T6812] tipc: Started in network mode [ 88.369186][ T6812] tipc: Node identity 5247809a0402, cluster identity 4711 [ 88.369664][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 88.371813][ T6812] tipc: Enabled bearer , priority 0 [ 88.386545][ T6812] syzkaller0: entered promiscuous mode [ 88.388869][ T6812] syzkaller0: entered allmulticast mode [ 88.506351][ T6812] tipc: Resetting bearer [ 88.538270][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.548186][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.550888][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.640231][ T6822] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 88.642425][ T6822] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 88.647824][ T6822] vhci_hcd vhci_hcd.0: Device attached [ 88.998502][ T9] usb 38-1: SetAddress Request (2) to port 0 [ 89.000566][ T9] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 89.127586][ T6833] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 89.129753][ T6833] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.135222][ T6833] vhci_hcd vhci_hcd.0: Device attached [ 89.306576][ T6811] tipc: Resetting bearer [ 89.310783][ T6823] vhci_hcd: connection reset by peer [ 89.315794][ T4213] vhci_hcd vhci_hcd.0: stop threads [ 89.317534][ T4213] vhci_hcd vhci_hcd.0: release socket [ 89.319559][ T4213] vhci_hcd vhci_hcd.0: disconnect device [ 89.320325][ T6811] tipc: Disabling bearer [ 89.408604][ T61] usb 42-1: SetAddress Request (10) to port 0 [ 89.410967][ T61] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 89.590289][ T839] usb 40-1: device descriptor read/8, error -110 [ 89.641200][ T6835] vhci_hcd: connection reset by peer [ 89.644804][ T12] vhci_hcd vhci_hcd.2: stop threads [ 89.647188][ T12] vhci_hcd vhci_hcd.2: release socket [ 89.650354][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 89.687705][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 89.693869][ T6848] team0: Port device batadv1 added [ 89.792184][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 89.814931][ T6850] wireguard0: entered promiscuous mode [ 89.820978][ T6850] wireguard0: entered allmulticast mode [ 89.988875][ T839] usb usb40-port1: attempt power cycle [ 90.015724][ T6854] afs: Unknown parameter 'dyn€Œ' [ 90.138189][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.141845][ T5939] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 90.258620][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.618236][ T5298] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.620885][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.623679][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.647086][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.174'. [ 90.933186][ T839] usb usb40-port1: unable to enumerate USB device [ 91.126729][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.130934][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.485082][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 91.896147][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.952834][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.129115][ T6432] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.132877][ T6432] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.136612][ T6432] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.159210][ T6432] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.284062][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.284653][ T6888] CUSE: info not properly terminated [ 92.698191][ T893] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 92.868174][ T893] usb 7-1: Using ep0 maxpacket: 8 [ 92.871224][ T893] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.876137][ T893] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.882286][ T893] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.888380][ T893] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.892598][ T893] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.895561][ T893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.098225][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.098383][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.102215][ T5298] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.111773][ T893] usb 7-1: GET_CAPABILITIES returned 0 [ 93.113723][ T893] usbtmc 7-1:16.0: can't read capabilities [ 93.316885][ T6125] usb 7-1: USB disconnect, device number 3 [ 93.778176][ T6125] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 93.939403][ T6125] usb 6-1: Using ep0 maxpacket: 32 [ 94.134959][ T893] IPVS: starting estimator thread 0... [ 94.137005][ T6921] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 94.229241][ T6922] IPVS: using max 27 ests per chain, 64800 per kthread [ 94.298520][ T5298] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.458694][ T61] usb 42-1: device descriptor read/8, error -110 [ 94.863691][ T61] usb usb42-port1: attempt power cycle [ 94.947794][ T9] usb 38-1: device descriptor read/8, error -110 [ 95.118635][ T6125] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.123162][ T6125] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 95.125643][ T6125] usb 6-1: can't read configurations, error -71 [ 95.258259][ T34] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.275418][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.351348][ T9] usb usb38-port1: attempt power cycle [ 95.388393][ T34] usb 5-1: device descriptor read/64, error -71 [ 95.420778][ T6933] warning: `syz.2.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.439083][ T61] usb usb42-port1: unable to enumerate USB device [ 95.638200][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 95.788359][ T34] usb 5-1: device descriptor read/64, error -71 [ 95.903318][ T34] usb usb5-port1: attempt power cycle [ 95.924728][ T9] usb usb38-port1: unable to enumerate USB device [ 95.964861][ T6947] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 95.967814][ T6947] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.973488][ T6947] vhci_hcd vhci_hcd.0: Device attached [ 96.001321][ T6948] vhci_hcd: connection closed [ 96.001601][ T6432] vhci_hcd vhci_hcd.1: stop threads [ 96.006210][ T6432] vhci_hcd vhci_hcd.1: release socket [ 96.008692][ T6432] vhci_hcd vhci_hcd.1: disconnect device [ 96.238191][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.260387][ T34] usb 5-1: device descriptor read/8, error -71 [ 96.498214][ T34] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.519204][ T34] usb 5-1: device descriptor read/8, error -71 [ 96.560084][ T6958] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 96.562243][ T6958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 96.565310][ T6958] vhci_hcd vhci_hcd.0: Device attached [ 96.628527][ T34] usb usb5-port1: unable to enumerate USB device [ 96.828195][ T34] usb 42-1: SetAddress Request (14) to port 0 [ 96.830314][ T34] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 96.896934][ T6966] 9p: Bad value for 'rfdno' [ 97.092869][ T6959] vhci_hcd: connection reset by peer [ 97.095615][ T6432] vhci_hcd vhci_hcd.2: stop threads [ 97.097985][ T6432] vhci_hcd vhci_hcd.2: release socket [ 97.103328][ T6432] vhci_hcd vhci_hcd.2: disconnect device [ 97.136721][ T6973] netlink: 48 bytes leftover after parsing attributes in process `syz.3.195'. [ 98.408593][ T61] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 98.558144][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 98.562658][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 98.568019][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 98.573042][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.577008][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.582877][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.588455][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.978821][ T7015] ufs: You didn't specify the type of your ufs filesystem [ 98.978821][ T7015] [ 98.978821][ T7015] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 98.978821][ T7015] [ 98.978821][ T7015] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 98.988915][ T7015] ufs: ufstype=old is supported read-only [ 99.623714][ T7023] kvm: Disabled LAPIC found during irq injection [ 100.041550][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 100.052371][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 100.061581][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 100.625676][ T7034] infiniband syz0: set active [ 100.627825][ T7034] infiniband syz0: added vxcan1 [ 100.689485][ T7034] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 100.691347][ T7034] infiniband syz0: Couldn't open port 1 [ 100.710910][ T7034] RDS/IB: syz0: added [ 100.712785][ T7034] smc: adding ib device syz0 with port count 1 [ 100.715422][ T7034] smc: ib device syz0 port 1 has no pnetid [ 100.719878][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 100.826815][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 100.907136][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 100.930851][ T1333] vxcan1 speed is unknown, defaulting to 1000 [ 100.933658][ T1333] vxcan1 speed is unknown, defaulting to 1000 [ 101.012023][ T7034] vxcan1 speed is unknown, defaulting to 1000 [ 101.308863][ T61] usb 8-1: usb_control_msg returned -71 [ 101.311069][ T61] usbtmc 8-1:16.0: can't read capabilities [ 101.327636][ T61] usb 8-1: USB disconnect, device number 8 [ 101.804482][ T7065] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 101.806801][ T7065] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 101.809832][ T7065] vhci_hcd vhci_hcd.0: Device attached [ 101.908759][ T34] usb 42-1: device descriptor read/8, error -110 [ 102.298760][ T34] usb usb42-port1: attempt power cycle [ 102.388241][ T1333] usb 44-1: SetAddress Request (2) to port 0 [ 102.391087][ T1333] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 102.424525][ T7066] vhci_hcd: connection reset by peer [ 102.427108][ T4213] vhci_hcd vhci_hcd.3: stop threads [ 102.429873][ T4213] vhci_hcd vhci_hcd.3: release socket [ 102.433779][ T4213] vhci_hcd vhci_hcd.3: disconnect device [ 102.720447][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 102.889530][ T34] usb usb42-port1: unable to enumerate USB device [ 102.997498][ T7082] could not allocate digest TFM handle sha3-512-generic [ 103.828415][ T7104] syz0: rxe_newlink: already configured on vxcan1 [ 105.258756][ T7137] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 105.260996][ T7137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 105.265360][ T7137] vhci_hcd vhci_hcd.0: Device attached [ 105.524153][ T6042] kernel write not supported for file /snd/midiC2D0 (pid: 6042 comm: kworker/3:4) [ 105.548208][ T53] usb 42-1: SetAddress Request (18) to port 0 [ 105.554122][ T53] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 105.629844][ T7150] afs: Unknown parameter 'dyn€Œ' [ 105.668695][ T7140] vhci_hcd: connection reset by peer [ 105.670776][ T6439] vhci_hcd vhci_hcd.2: stop threads [ 105.673065][ T6439] vhci_hcd vhci_hcd.2: release socket [ 105.685584][ T6439] vhci_hcd vhci_hcd.2: disconnect device [ 106.501141][ T7166] tmpfs: Unknown parameter '00000000000000000000003' [ 107.043842][ T7185] afs: Unknown parameter 'dyn€Œ' [ 107.498366][ T1333] usb 44-1: device descriptor read/8, error -110 [ 107.658257][ T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 107.845192][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 107.879108][ T7199] netlink: 'syz.3.244': attribute type 32 has an invalid length. [ 107.881643][ T7199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 107.885081][ T7199] netlink: 'syz.3.244': attribute type 32 has an invalid length. [ 107.899021][ T1333] usb usb44-port1: attempt power cycle [ 108.098537][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 108.584526][ T1333] usb usb44-port1: unable to enumerate USB device [ 108.697943][ T7227] afs: Unknown parameter 'dyn€Œ' [ 108.710239][ T54] usb 7-1: unable to get BOS descriptor or descriptor too short [ 108.714976][ T54] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 108.717529][ T54] usb 7-1: can't read configurations, error -71 [ 109.074238][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.251'. [ 109.083754][ T4213] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.087065][ T4213] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.108356][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.249499][ T7238] FAULT_INJECTION: forcing a failure. [ 109.249499][ T7238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.253874][ T7238] CPU: 1 UID: 0 PID: 7238 Comm: syz.2.253 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.253891][ T7238] Tainted: [L]=SOFTLOCKUP [ 109.253895][ T7238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.253902][ T7238] Call Trace: [ 109.253906][ T7238] [ 109.253911][ T7238] dump_stack_lvl+0x16c/0x1f0 [ 109.253932][ T7238] should_fail_ex+0x512/0x640 [ 109.253947][ T7238] _copy_from_user+0x2e/0xd0 [ 109.253960][ T7238] get_compat_msghdr+0xa7/0x170 [ 109.253975][ T7238] ? __pfx_get_compat_msghdr+0x10/0x10 [ 109.253993][ T7238] ___sys_sendmsg+0x1ae/0x1d0 [ 109.254009][ T7238] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.254029][ T7238] ? find_held_lock+0x2b/0x80 [ 109.254052][ T7238] __sys_sendmsg+0x16d/0x220 [ 109.254066][ T7238] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.254085][ T7238] ? do_user_addr_fault+0x843/0x1370 [ 109.254100][ T7238] __do_fast_syscall_32+0xe8/0x680 [ 109.254120][ T7238] do_fast_syscall_32+0x32/0x80 [ 109.254130][ T7238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.254143][ T7238] RIP: 0023:0xf7f96579 [ 109.254153][ T7238] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.254163][ T7238] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 109.254173][ T7238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 109.254180][ T7238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.254186][ T7238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.254192][ T7238] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 109.254198][ T7238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.254211][ T7238] [ 109.412120][ T7240] syzkaller0: entered promiscuous mode [ 109.413884][ T7240] syzkaller0: entered allmulticast mode [ 109.453070][ T7242] netlink: 100 bytes leftover after parsing attributes in process `syz.0.255'. [ 109.620923][ T7244] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 109.704571][ T7248] netlink: 'syz.1.257': attribute type 30 has an invalid length. [ 109.760299][ T7249] netlink: 'syz.1.257': attribute type 30 has an invalid length. [ 109.829876][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.132233][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 110.142403][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.540158][ T7244] syz_tun: entered promiscuous mode [ 110.554329][ T7244] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.608006][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.618262][ T53] usb 42-1: device descriptor read/8, error -110 [ 110.739212][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.981609][ T7265] vxcan1 speed is unknown, defaulting to 1000 [ 111.023131][ T53] usb usb42-port1: attempt power cycle [ 111.061977][ T7264] netlink: 120 bytes leftover after parsing attributes in process `syz.0.261'. [ 111.082820][ T7268] FAULT_INJECTION: forcing a failure. [ 111.082820][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 111.088408][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.3.263 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.088435][ T7268] Tainted: [L]=SOFTLOCKUP [ 111.088441][ T7268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.088452][ T7268] Call Trace: [ 111.088458][ T7268] [ 111.088465][ T7268] dump_stack_lvl+0x16c/0x1f0 [ 111.088496][ T7268] should_fail_ex+0x512/0x640 [ 111.088516][ T7268] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 111.088542][ T7268] should_failslab+0xc2/0x120 [ 111.088570][ T7268] kmem_cache_alloc_node_noprof+0x86/0x800 [ 111.088592][ T7268] ? __alloc_skb+0x156/0x410 [ 111.088617][ T7268] ? __alloc_skb+0x156/0x410 [ 111.088635][ T7268] __alloc_skb+0x156/0x410 [ 111.088653][ T7268] ? __alloc_skb+0x35d/0x410 [ 111.088671][ T7268] ? __pfx___alloc_skb+0x10/0x10 [ 111.088691][ T7268] ? unwind_get_return_address+0x59/0xa0 [ 111.088719][ T7266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.260'. [ 111.088715][ T7268] ? __pfx___might_resched+0x10/0x10 [ 111.088744][ T7268] netlink_alloc_large_skb+0x69/0x140 [ 111.088772][ T7268] netlink_sendmsg+0x698/0xdd0 [ 111.088802][ T7268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.088831][ T7268] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 111.088864][ T7268] ____sys_sendmsg+0xa5d/0xc30 [ 111.088893][ T7268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.088920][ T7268] ? get_compat_msghdr+0x11a/0x170 [ 111.088959][ T7268] ___sys_sendmsg+0x134/0x1d0 [ 111.088984][ T7268] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.089017][ T7268] ? find_held_lock+0x2b/0x80 [ 111.089056][ T7268] __sys_sendmsg+0x16d/0x220 [ 111.089080][ T7268] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.089112][ T7268] ? do_user_addr_fault+0x843/0x1370 [ 111.089137][ T7268] __do_fast_syscall_32+0xe8/0x680 [ 111.089168][ T7268] do_fast_syscall_32+0x32/0x80 [ 111.089183][ T7268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.089205][ T7268] RIP: 0023:0xf7fb6579 [ 111.089219][ T7268] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.089236][ T7268] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 111.089253][ T7268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 111.089264][ T7268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.089274][ T7268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.089283][ T7268] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.089293][ T7268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.089316][ T7268] [ 111.788943][ T53] usb usb42-port1: unable to enumerate USB device [ 112.404740][ T5348] udevd[5348]: worker [5948] terminated by signal 33 (Unknown signal 33) [ 112.407533][ T5348] udevd[5348]: worker [5948] failed while handling '/devices/platform/dummy_udc.0/gadget.0' [ 112.618223][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.748857][ T7306] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 112.751058][ T7306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 112.760731][ T7306] vhci_hcd vhci_hcd.0: Device attached [ 112.769783][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 112.776166][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.791539][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.797306][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 112.799289][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 112.809675][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 112.814969][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.830308][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.834763][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.028233][ T6024] usb 40-1: SetAddress Request (6) to port 0 [ 113.030312][ T6024] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 113.081227][ T9] usb 5-1: usb_control_msg returned -71 [ 113.084865][ T9] usbtmc 5-1:16.0: can't read capabilities [ 113.101095][ T9] usb 5-1: USB disconnect, device number 12 [ 113.321570][ T7307] vhci_hcd: connection reset by peer [ 113.324062][ T6440] vhci_hcd vhci_hcd.1: stop threads [ 113.325859][ T6440] vhci_hcd vhci_hcd.1: release socket [ 113.332459][ T6440] vhci_hcd vhci_hcd.1: disconnect device [ 113.421218][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.892377][ T7325] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 113.894865][ T7325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.897618][ T7325] vhci_hcd vhci_hcd.0: Device attached [ 114.138198][ T34] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 114.278450][ T7333] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.448280][ T6042] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.493703][ T7327] vhci_hcd: connection reset by peer [ 114.513201][ T6440] vhci_hcd vhci_hcd.3: stop threads [ 114.515157][ T6440] vhci_hcd vhci_hcd.3: release socket [ 114.517726][ T6440] vhci_hcd vhci_hcd.3: disconnect device [ 114.619830][ T6042] usb 5-1: Using ep0 maxpacket: 8 [ 114.622975][ T6042] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.626873][ T6042] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.632100][ T6042] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 114.636280][ T6042] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.639399][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.648723][ T6042] usbtmc 5-1:16.0: bulk endpoints not found [ 115.391538][ T7346] overlay: ./file1 is not a directory [ 115.420810][ T7346] netlink: 'syz.1.280': attribute type 10 has an invalid length. [ 115.424450][ T7346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.280'. [ 115.440703][ T7346] team0: Port device geneve0 added [ 115.561112][ T6042] usb 5-1: USB disconnect, device number 13 [ 115.688572][ T7355] afs: Unknown parameter 'dyn€Œ' [ 116.900830][ T7379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.906692][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.910552][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.914195][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.917987][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.921277][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.924105][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.926719][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.929528][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.932163][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.940004][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 116.958864][ T7379] overlay: filesystem on ./bus not supported as upperdir [ 117.718516][ T6113] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.888875][ T6113] usb 5-1: Using ep0 maxpacket: 32 [ 118.059715][ T6024] usb 40-1: device descriptor read/8, error -110 [ 118.137721][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.299'. [ 118.221938][ T7418] afs: Unknown parameter 'dyn€Œ' [ 118.403660][ T6113] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.405807][ T7434] netlink: 92 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.408139][ T6113] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 118.429785][ T6113] usb 5-1: can't read configurations, error -71 [ 118.431187][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.441814][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 118.445142][ T7435] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 118.448391][ T7435] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.452424][ T7435] vhci_hcd vhci_hcd.0: Device attached [ 118.483046][ T7435] tmpfs: Unknown parameter 'q\ota' [ 118.588269][ T6024] usb 40-1: SetAddress Request (7) to port 0 [ 118.591048][ T6024] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 118.738131][ T6125] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.888260][ T6125] usb 6-1: Using ep0 maxpacket: 8 [ 118.897568][ T7446] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 118.911235][ T6125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.914949][ T6125] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.917906][ T6125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.922396][ T6125] usb 6-1: config 0 descriptor?? [ 119.259093][ T34] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 119.304748][ T5298] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 119.326640][ T6125] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.603132][ T7471] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 119.663531][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 119.677419][ T7471] bond1: entered promiscuous mode [ 119.679622][ T7471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.682653][ T7473] bond1: entered allmulticast mode [ 120.454811][ T7483] afs: Unknown parameter 'dyn€Œ' [ 121.487656][ T1333] usb 6-1: USB disconnect, device number 4 [ 121.500853][ T7436] vhci_hcd: connection reset by peer [ 121.510725][ T1197] vhci_hcd vhci_hcd.1: stop threads [ 121.512901][ T1197] vhci_hcd vhci_hcd.1: release socket [ 121.858214][ T6125] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.121480][ T7493] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 122.143261][ T1197] vhci_hcd vhci_hcd.1: disconnect device [ 122.209529][ T6125] usb 5-1: Using ep0 maxpacket: 32 [ 122.218216][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.260338][ T7500] bridge0: port 3(team0) entered blocking state [ 122.263112][ T7500] bridge0: port 3(team0) entered disabled state [ 122.265631][ T7500] team0: entered allmulticast mode [ 122.267548][ T7500] team_slave_0: entered allmulticast mode [ 122.270802][ T7500] team_slave_1: entered allmulticast mode [ 122.272822][ T7500] batadv1: entered allmulticast mode [ 122.305053][ T7500] team0: entered promiscuous mode [ 122.306970][ T7500] team_slave_0: entered promiscuous mode [ 122.318793][ T7500] team_slave_1: entered promiscuous mode [ 122.321043][ T7500] batadv1: entered promiscuous mode [ 122.323667][ T7500] bridge0: port 3(team0) entered blocking state [ 122.326103][ T7500] bridge0: port 3(team0) entered forwarding state [ 122.498723][ T6432] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 122.502653][ T6432] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 122.889620][ T7533] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 122.913685][ T7533] bond1: entered promiscuous mode [ 122.915608][ T7533] bond1: entered allmulticast mode [ 122.921774][ T6125] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.925320][ T6125] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 122.928319][ T6125] usb 5-1: can't read configurations, error -71 [ 122.943990][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.959800][ T7535] erspan1: entered allmulticast mode [ 122.965875][ T7535] bond1: (slave erspan1): making interface the new active one [ 122.968706][ T7535] erspan1: entered promiscuous mode [ 122.971551][ T7535] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 123.658231][ T6024] usb 40-1: device descriptor read/8, error -110 [ 123.768302][ T6024] usb usb40-port1: attempt power cycle [ 124.164300][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.328'. [ 124.601124][ T6024] usb usb40-port1: unable to enumerate USB device [ 125.056223][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 125.058609][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 125.096671][ T7561] ceph: No mds server is up or the cluster is laggy [ 125.180176][ T7561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.353247][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'. [ 125.664050][ T7563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.828365][ T6042] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 125.998187][ T6042] usb 7-1: Using ep0 maxpacket: 32 [ 126.371173][ T6042] usb 7-1: unable to get BOS descriptor or descriptor too short [ 126.375836][ T6042] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 126.379222][ T6042] usb 7-1: can't read configurations, error -71 [ 126.657886][ T7609] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 126.660483][ T7609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.663866][ T7609] vhci_hcd vhci_hcd.0: Device attached [ 126.929616][ T34] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 127.163065][ T7621] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 127.165262][ T7621] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.174145][ T7612] vhci_hcd: connection reset by peer [ 127.176221][ T46] vhci_hcd vhci_hcd.0: stop threads [ 127.177996][ T46] vhci_hcd vhci_hcd.0: release socket [ 127.180511][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 127.182565][ T7621] vhci_hcd vhci_hcd.0: Device attached [ 127.488231][ T1333] usb 42-1: SetAddress Request (22) to port 0 [ 127.498443][ T1333] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 127.782547][ T7622] vhci_hcd: connection reset by peer [ 127.786254][ T46] vhci_hcd vhci_hcd.2: stop threads [ 127.790307][ T46] vhci_hcd vhci_hcd.2: release socket [ 127.793504][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 127.802653][ T7626] syzkaller1: entered promiscuous mode [ 127.804974][ T7626] syzkaller1: entered allmulticast mode [ 127.866100][ T7628] vlan2: entered promiscuous mode [ 127.867890][ T7628] bridge0: entered promiscuous mode [ 127.870123][ T7628] vlan2: entered allmulticast mode [ 127.872160][ T7628] bridge0: entered allmulticast mode [ 127.920205][ T7630] Set syz1 is full, maxelem 14 reached [ 129.168337][ T6042] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 129.346239][ T7657] sg_read: process 264 (syz.0.350) changed security contexts after opening file descriptor, this is not allowed. [ 129.439409][ T6042] usb 6-1: Using ep0 maxpacket: 32 [ 130.597804][ T7684] overlayfs: missing 'lowerdir' [ 130.601052][ T7684] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.615606][ T7683] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 130.617833][ T7683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 130.621946][ T7683] vhci_hcd vhci_hcd.0: Device attached [ 131.618114][ T7685] vhci_hcd: connection closed [ 131.672516][ T6440] vhci_hcd vhci_hcd.0: stop threads [ 131.675959][ T6440] vhci_hcd vhci_hcd.0: release socket [ 131.677875][ T6440] vhci_hcd vhci_hcd.0: disconnect device [ 131.751032][ T6042] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.764331][ T6042] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 131.766983][ T6042] usb 6-1: can't read configurations, error -71 [ 132.051807][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 132.447883][ T7718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 132.450740][ T7718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.457723][ T7718] vhci_hcd vhci_hcd.0: Device attached [ 132.548592][ T1333] usb 42-1: device descriptor read/8, error -110 [ 132.858219][ T54] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 132.900534][ T6113] usb 38-1: SetAddress Request (6) to port 0 [ 132.903290][ T6113] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 132.938469][ T6042] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 132.948724][ T1333] usb usb42-port1: attempt power cycle [ 133.008219][ T54] usb 8-1: Using ep0 maxpacket: 8 [ 133.011616][ T54] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 133.014293][ T54] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.017863][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.021385][ T54] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.024707][ T54] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.030699][ T54] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.033609][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.040511][ T7719] vhci_hcd: connection reset by peer [ 133.046825][ T1197] vhci_hcd vhci_hcd.0: stop threads [ 133.048697][ T1197] vhci_hcd vhci_hcd.0: release socket [ 133.053126][ T1197] vhci_hcd vhci_hcd.0: disconnect device [ 133.103982][ T6042] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.124700][ T6042] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.129069][ T6042] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.132721][ T6042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.168248][ T7722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.189599][ T6042] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.251299][ T54] usb 8-1: usb_control_msg returned -32 [ 133.255439][ T54] usbtmc 8-1:16.0: can't read capabilities [ 133.509534][ T1333] usb usb42-port1: unable to enumerate USB device [ 133.605809][ T7727] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 133.619417][ T7726] binder: 7725:7726 ioctl 400c620e 80000100 returned -22 [ 133.626784][ T6024] usb 8-1: USB disconnect, device number 9 [ 133.934258][ T6042] usb 6-1: USB disconnect, device number 7 [ 134.114080][ T1333] IPVS: starting estimator thread 0... [ 134.218172][ T7732] IPVS: using max 45 ests per chain, 108000 per kthread [ 134.828990][ T7754] netlink: 'syz.1.364': attribute type 4 has an invalid length. [ 134.838137][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 135.008251][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 135.259794][ T7756] openvswitch: netlink: Invalid VLAN frame [ 135.466883][ T53] usb 8-1: unable to get BOS descriptor or descriptor too short [ 135.472570][ T53] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 135.476882][ T53] usb 8-1: can't read configurations, error -71 [ 135.635350][ T7777] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 135.637592][ T7777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 135.640734][ T7777] vhci_hcd vhci_hcd.0: Device attached [ 135.779627][ T7780] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 135.908635][ T6042] usb 40-1: SetAddress Request (10) to port 0 [ 135.913146][ T6042] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 136.502676][ T7778] vhci_hcd: connection reset by peer [ 136.508326][ T6432] vhci_hcd vhci_hcd.1: stop threads [ 136.512874][ T6432] vhci_hcd vhci_hcd.1: release socket [ 136.518518][ T6432] vhci_hcd vhci_hcd.1: disconnect device [ 136.907325][ T7794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.590305][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.593116][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.749136][ T7807] syz0: rxe_newlink: already configured on vxcan1 [ 137.823365][ T7808] 9pnet_virtio: no channels available for device syz [ 137.978517][ T6113] usb 38-1: device descriptor read/8, error -110 [ 138.368845][ T6113] usb usb38-port1: attempt power cycle [ 138.928864][ T6113] usb usb38-port1: unable to enumerate USB device [ 139.068137][ T6113] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 139.218166][ T6113] usb 6-1: Using ep0 maxpacket: 32 [ 139.666285][ T6113] usb 6-1: unable to get BOS descriptor or descriptor too short [ 139.674073][ T6113] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 139.677503][ T6113] usb 6-1: can't read configurations, error -71 [ 140.191618][ T7838] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 140.194412][ T7838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.198189][ T7838] vhci_hcd vhci_hcd.0: Device attached [ 140.314939][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.384'. [ 140.317123][ T7838] process 'syz.2.383' launched '/dev/fd/14' with NULL argv: empty string added [ 140.445818][ T7852] FAULT_INJECTION: forcing a failure. [ 140.445818][ T7852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.452219][ T7852] CPU: 3 UID: 0 PID: 7852 Comm: syz.3.387 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.452245][ T7852] Tainted: [L]=SOFTLOCKUP [ 140.452251][ T7852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.452261][ T7852] Call Trace: [ 140.452267][ T7852] [ 140.452273][ T7852] dump_stack_lvl+0x16c/0x1f0 [ 140.452302][ T7852] should_fail_ex+0x512/0x640 [ 140.452322][ T7852] _copy_from_iter+0x2a4/0x16c0 [ 140.452340][ T7852] ? __build_skb_around+0x278/0x390 [ 140.452357][ T7852] ? __pfx__copy_from_iter+0x10/0x10 [ 140.452372][ T7852] ? __alloc_skb+0x35d/0x410 [ 140.452387][ T7852] ? __pfx___alloc_skb+0x10/0x10 [ 140.452404][ T7852] ? aa_af_perm+0x240/0x240 [ 140.452428][ T7852] pfkey_sendmsg+0x1d1/0x850 [ 140.452455][ T7852] ____sys_sendmsg+0xa5d/0xc30 [ 140.452481][ T7852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.452504][ T7852] ? get_compat_msghdr+0x11a/0x170 [ 140.452533][ T7852] ___sys_sendmsg+0x134/0x1d0 [ 140.452554][ T7852] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.452583][ T7852] ? find_held_lock+0x2b/0x80 [ 140.452617][ T7852] __sys_sendmsg+0x16d/0x220 [ 140.452637][ T7852] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.452665][ T7852] ? do_user_addr_fault+0x843/0x1370 [ 140.452695][ T7852] __do_fast_syscall_32+0xe8/0x680 [ 140.452722][ T7852] do_fast_syscall_32+0x32/0x80 [ 140.452736][ T7852] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.452755][ T7852] RIP: 0023:0xf7fb6579 [ 140.452768][ T7852] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 140.452783][ T7852] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 140.452798][ T7852] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 140.452808][ T7852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.452817][ T7852] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.452826][ T7852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 140.452834][ T7852] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.452853][ T7852] [ 140.488241][ T53] usb 42-1: SetAddress Request (26) to port 0 [ 140.539465][ T53] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 140.618331][ T5946] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 140.621273][ T5298] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.676630][ T7839] vhci_hcd: connection reset by peer [ 140.678766][ T1197] vhci_hcd vhci_hcd.2: stop threads [ 140.680723][ T1197] vhci_hcd vhci_hcd.2: release socket [ 140.684155][ T1197] vhci_hcd vhci_hcd.2: disconnect device [ 140.778180][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.805426][ T7863] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 140.808335][ T7863] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 140.813184][ T7863] vhci_hcd vhci_hcd.0: Device attached [ 140.938305][ T6042] usb 40-1: device descriptor read/8, error -110 [ 141.146249][ T7847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.148635][ T7847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.150805][ T7847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.217683][ T7864] vhci_hcd: connection closed [ 141.217881][ T6440] vhci_hcd vhci_hcd.1: stop threads [ 141.222110][ T6440] vhci_hcd vhci_hcd.1: release socket [ 141.225164][ T6440] vhci_hcd vhci_hcd.1: disconnect device [ 141.338978][ T6042] usb usb40-port1: attempt power cycle [ 141.418201][ T6125] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 141.428434][ T893] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 141.503133][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 141.506824][ T7877] veth1_macvtap: left promiscuous mode [ 141.556070][ T7875] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 141.558902][ T7875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 141.562975][ T7875] vhci_hcd vhci_hcd.0: Device attached [ 141.590877][ T893] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 141.594217][ T893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.597273][ T893] usb 5-1: Product: syz [ 141.599040][ T893] usb 5-1: Manufacturer: syz [ 141.600898][ T893] usb 5-1: SerialNumber: syz [ 141.604629][ T893] usb 5-1: config 0 descriptor?? [ 141.821155][ T893] usb 5-1: USB disconnect, device number 18 [ 142.158278][ T6033] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 142.338417][ T6033] usb 8-1: Using ep0 maxpacket: 32 [ 142.458377][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 142.486270][ T7878] vhci_hcd: connection closed [ 142.486556][ T13] vhci_hcd vhci_hcd.2: stop threads [ 142.498179][ T13] vhci_hcd vhci_hcd.2: release socket [ 142.500120][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 142.548817][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 142.563302][ T6033] usb 8-1: unable to get BOS descriptor or descriptor too short [ 142.566645][ T6033] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 142.572919][ T6033] usb 8-1: can't read configurations, error -71 [ 142.581832][ T7904] tipc: Can't bind to reserved service type 2 [ 142.693710][ T6042] usb usb40-port1: unable to enumerate USB device [ 143.063641][ T40] audit: type=1326 audit(1766527394.020:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.081604][ T40] audit: type=1326 audit(1766527394.020:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.088602][ T40] audit: type=1326 audit(1766527394.020:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.096358][ T40] audit: type=1326 audit(1766527394.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.103104][ T40] audit: type=1326 audit(1766527394.020:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.109834][ T40] audit: type=1326 audit(1766527394.020:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.116473][ T40] audit: type=1326 audit(1766527394.020:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.123515][ T40] audit: type=1326 audit(1766527394.020:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.130395][ T40] audit: type=1326 audit(1766527394.020:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.136968][ T40] audit: type=1326 audit(1766527394.020:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 143.188800][ T5298] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.190973][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.210574][ T7942] netlink: 7 bytes leftover after parsing attributes in process `syz.1.407'. [ 144.213610][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 144.265507][ T7941] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 144.648456][ T6042] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 144.798484][ T6042] usb 5-1: Using ep0 maxpacket: 32 [ 145.020740][ T6042] usb 5-1: unable to get BOS descriptor or descriptor too short [ 145.027597][ T6042] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 145.031703][ T6042] usb 5-1: can't read configurations, error -71 [ 145.578771][ T53] usb 42-1: device descriptor read/8, error -110 [ 145.968813][ T53] usb usb42-port1: attempt power cycle [ 145.979649][ T1333] vxcan1 speed is unknown, defaulting to 1000 [ 146.015346][ T1333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.037206][ T7984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 146.039455][ T7984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 146.042280][ T7984] vhci_hcd vhci_hcd.0: Device attached [ 146.236504][ T7991] ALSA: mixer_oss: invalid OSS volume '' [ 146.260438][ T7985] vhci_hcd: connection closed [ 146.260670][ T46] vhci_hcd vhci_hcd.1: stop threads [ 146.264798][ T46] vhci_hcd vhci_hcd.1: release socket [ 146.265651][ T7991] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 146.266620][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 146.268596][ T7991] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 146.286397][ T7991] vhci_hcd vhci_hcd.0: Device attached [ 146.318438][ T839] usb 40-1: enqueue for inactive port 0 [ 146.388252][ T1333] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.459995][ T6033] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 146.518264][ T6033] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 146.540101][ T53] usb usb42-port1: unable to enumerate USB device [ 146.656553][ T7997] FAULT_INJECTION: forcing a failure. [ 146.656553][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 146.661068][ T7997] CPU: 3 UID: 0 PID: 7997 Comm: syz.2.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.661085][ T7997] Tainted: [L]=SOFTLOCKUP [ 146.661089][ T7997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.661096][ T7997] Call Trace: [ 146.661099][ T7997] [ 146.661103][ T7997] dump_stack_lvl+0x16c/0x1f0 [ 146.661124][ T7997] should_fail_ex+0x512/0x640 [ 146.661136][ T7997] ? kmem_cache_alloc_noprof+0x62/0x770 [ 146.661151][ T7997] should_failslab+0xc2/0x120 [ 146.661167][ T7997] kmem_cache_alloc_noprof+0x83/0x770 [ 146.661180][ T7997] ? skb_clone+0x190/0x3f0 [ 146.661198][ T7997] ? skb_clone+0x190/0x3f0 [ 146.661210][ T7997] skb_clone+0x190/0x3f0 [ 146.661224][ T7997] pfkey_broadcast_one+0xb9/0x380 [ 146.661240][ T7997] pfkey_broadcast+0x293/0x460 [ 146.661257][ T7997] pfkey_sendmsg+0x74d/0x850 [ 146.661274][ T7997] ____sys_sendmsg+0xa5d/0xc30 [ 146.661297][ T7997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.661313][ T7997] ? get_compat_msghdr+0x11a/0x170 [ 146.661333][ T7997] ___sys_sendmsg+0x134/0x1d0 [ 146.661347][ T7997] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.661367][ T7997] ? find_held_lock+0x2b/0x80 [ 146.661390][ T7997] __sys_sendmsg+0x16d/0x220 [ 146.661404][ T7997] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.661423][ T7997] ? do_user_addr_fault+0x843/0x1370 [ 146.661439][ T7997] __do_fast_syscall_32+0xe8/0x680 [ 146.661458][ T7997] do_fast_syscall_32+0x32/0x80 [ 146.661468][ T7997] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.661482][ T7997] RIP: 0023:0xf7f96579 [ 146.661491][ T7997] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 146.661502][ T7997] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 146.661512][ T7997] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 146.661519][ T7997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.661525][ T7997] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.661531][ T7997] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 146.661537][ T7997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.661550][ T7997] [ 146.750676][ T7992] vhci_hcd: connection reset by peer [ 146.753759][ T4213] vhci_hcd vhci_hcd.3: stop threads [ 146.759010][ T4213] vhci_hcd vhci_hcd.3: release socket [ 146.762041][ T4213] vhci_hcd vhci_hcd.3: disconnect device [ 146.818876][ T839] usb usb40-port1: attempt power cycle [ 146.894761][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.901567][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.107985][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.111567][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.112451][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.135345][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.138825][ T6024] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 147.164942][ T8008] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:-2147480542 is already present [ 147.389032][ T839] usb usb40-port1: unable to enumerate USB device [ 147.457227][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.460238][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.514828][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.523279][ T8039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.567502][ T4213] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.570331][ T8041] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 147.573314][ T8041] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 147.576833][ T8041] vhci_hcd vhci_hcd.0: Device attached [ 147.580980][ T4213] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.583949][ T4213] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.587314][ T4213] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.848824][ T6042] usb 42-1: SetAddress Request (30) to port 0 [ 147.851039][ T6042] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 147.987845][ T8042] vhci_hcd: connection reset by peer [ 148.002686][ T4213] vhci_hcd vhci_hcd.2: stop threads [ 148.004982][ T4213] vhci_hcd vhci_hcd.2: release socket [ 148.018587][ T4213] vhci_hcd vhci_hcd.2: disconnect device [ 148.925786][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 149.249143][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 149.804599][ T8105] syz0: rxe_newlink: already configured on vxcan1 [ 149.871726][ T8106] 9pnet_virtio: no channels available for device syz [ 150.212546][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 150.493445][ T8116] kAFS: unable to lookup cell '' [ 151.648161][ T6033] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 151.717284][ T8120] 9pnet_virtio: no channels available for device syz [ 152.193485][ T8131] binder: 8130:8131 ioctl 41009432 80000500 returned -22 [ 152.326977][ T8136] xt_l2tp: unknown flags: 51 [ 152.939128][ T6042] usb 42-1: device descriptor read/8, error -110 [ 153.548832][ T6042] usb usb42-port1: attempt power cycle [ 153.748194][ T6033] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 153.834203][ T8161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 153.836745][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.841820][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 153.898367][ T6033] usb 8-1: Using ep0 maxpacket: 32 [ 154.090347][ T6113] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 154.103438][ T8162] vhci_hcd: connection reset by peer [ 154.105593][ T6440] vhci_hcd vhci_hcd.0: stop threads [ 154.107344][ T6440] vhci_hcd vhci_hcd.0: release socket [ 154.111938][ T6440] vhci_hcd vhci_hcd.0: disconnect device [ 154.119358][ T6042] usb usb42-port1: unable to enumerate USB device [ 154.232358][ T6033] usb 8-1: unable to get BOS descriptor or descriptor too short [ 154.239783][ T6033] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 154.248268][ T6033] usb 8-1: can't read configurations, error -71 [ 154.613821][ T8168] vxcan1 speed is unknown, defaulting to 1000 [ 156.611033][ T8187] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 157.041960][ T8194] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 157.044865][ T8194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 157.048255][ T8194] vhci_hcd vhci_hcd.0: Device attached [ 157.084459][ T8199] vhci_hcd: connection closed [ 157.084975][ T6440] vhci_hcd vhci_hcd.0: stop threads [ 157.089490][ T6440] vhci_hcd vhci_hcd.0: release socket [ 157.091836][ T6440] vhci_hcd vhci_hcd.0: disconnect device [ 157.490985][ T8212] vxcan1 speed is unknown, defaulting to 1000 [ 157.540309][ T6033] hid_parser_main: 12 callbacks suppressed [ 157.540326][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.567143][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.569553][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.571990][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.574393][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.576816][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.579422][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.581786][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.584155][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.586539][ T6033] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 157.589935][ T6033] hid-generic 00A0:0006:0003.0004: hidraw1: HID v0.05 Device [syz1] on syz0 [ 157.678401][ T6042] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 157.740871][ T8215] 9pnet_virtio: no channels available for device syz [ 157.868025][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 157.878175][ T6042] usb 6-1: Using ep0 maxpacket: 8 [ 157.882387][ T6042] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 157.886428][ T6042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.900101][ T6042] pvrusb2: Hardware description: Terratec Grabster AV400 [ 157.902584][ T6042] pvrusb2: ********** [ 157.904336][ T6042] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 157.908764][ T6042] pvrusb2: Important functionality might not be entirely working. [ 157.912080][ T6042] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 157.915798][ T6042] pvrusb2: ********** [ 157.951033][ T8220] fido_id[8220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.101383][ T2484] pvrusb2: Invalid write control endpoint [ 158.245071][ T61] hid-generic 0000:0003:0001.0005: hidraw1: HID v0.03 Device [syz0] on syz1 [ 158.276153][ T8227] could not open pipe file descriptor [ 158.280455][ T8227] could not open pipe file descriptor [ 158.286043][ T2484] pvrusb2: Invalid write control endpoint [ 158.312868][ T2484] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 158.330725][ T2484] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 158.339502][ T8238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.342166][ T8238] IPv6: NLM_F_CREATE should be set when creating new route [ 158.346296][ T2484] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 158.361001][ T2484] pvrusb2: Device being rendered inoperable [ 158.389525][ T2484] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 158.405129][ T2484] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 158.446050][ T2484] pvrusb2: Attached sub-driver cx25840 [ 158.460393][ T2484] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 158.480600][ T2484] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 158.570239][ T8226] batman_adv: batadv0: Adding interface: ipvlan2 [ 158.572990][ T8226] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.598479][ T8226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.608355][ T8226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.623191][ T8226] batman_adv: batadv0: Interface activated: ipvlan2 [ 158.816961][ T8247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'. [ 159.065441][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.480'. [ 159.178609][ T6113] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 159.210540][ T8257] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 159.918556][ T1333] usb 6-1: USB disconnect, device number 11 [ 160.589343][ T8266] ima: Can not allocate md4 (reason: -2) [ 160.592429][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 160.592438][ T40] audit: type=1800 audit(1766527411.550:82): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.483" name="/" dev="fuse" ino=1 res=0 errno=0 [ 160.828805][ T8272] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 160.833203][ T8272] Error validating options; rc = [-22] [ 161.168155][ T6024] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 161.313536][ T40] audit: type=1804 audit(1766527412.270:83): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.486" name="file0" dev="ramfs" ino=17552 res=1 errno=0 [ 161.328178][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 161.333194][ T6024] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.339427][ T6024] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.345421][ T6024] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.353665][ T6024] usb 6-1: config 1 interface 0 has no altsetting 0 [ 161.360641][ T6024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 161.366310][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.371559][ T6024] usb 6-1: Product: syz [ 161.374303][ T6024] usb 6-1: Manufacturer: syz [ 161.377734][ T6024] usb 6-1: SerialNumber: syz [ 161.417853][ T8285] nftables ruleset with unbound set [ 161.601299][ T6024] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 162.271739][ T8300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.490'. [ 162.283329][ T8300] bridge0: port 4(netdevsim0) entered blocking state [ 162.285990][ T8300] bridge0: port 4(netdevsim0) entered disabled state [ 162.339019][ T8300] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 162.350744][ T8300] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.355820][ T8300] bridge0: port 4(netdevsim0) entered blocking state [ 162.358125][ T8300] bridge0: port 4(netdevsim0) entered forwarding state [ 162.749278][ T8304] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 162.751676][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 162.754643][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 163.058343][ T6024] usb 44-1: SetAddress Request (6) to port 0 [ 163.063441][ T6024] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 163.212215][ T8305] vhci_hcd: connection reset by peer [ 163.265945][ T8360] vhci_hcd vhci_hcd.3: stop threads [ 163.268006][ T8360] vhci_hcd vhci_hcd.3: release socket [ 163.272654][ T8360] vhci_hcd vhci_hcd.3: disconnect device [ 163.356191][ T8327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 163.358374][ T8327] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.361076][ T8327] vhci_hcd vhci_hcd.0: Device attached [ 163.368571][ T8364] vhci_hcd: connection closed [ 163.368752][ T8362] vhci_hcd vhci_hcd.0: stop threads [ 163.372475][ T8362] vhci_hcd vhci_hcd.0: release socket [ 163.374625][ T8362] vhci_hcd vhci_hcd.0: disconnect device [ 163.547063][ T839] usb 6-1: USB disconnect, device number 12 [ 163.552033][ T839] usblp0: removed [ 163.880497][ T8375] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 163.883360][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 163.886914][ T8375] vhci_hcd vhci_hcd.0: Device attached [ 163.957032][ T8376] vhci_hcd: connection closed [ 163.957227][ T8360] vhci_hcd vhci_hcd.2: stop threads [ 163.961163][ T8360] vhci_hcd vhci_hcd.2: release socket [ 163.963074][ T8360] vhci_hcd vhci_hcd.2: disconnect device [ 164.418923][ T6113] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 164.448321][ T8400] binder: 8399:8400 ioctl 40284504 80000140 returned -22 [ 164.588207][ T6113] usb 8-1: Using ep0 maxpacket: 32 [ 164.919545][ T8406] syz0: rxe_newlink: already configured on vxcan1 [ 165.111883][ T8410] 9pnet_virtio: no channels available for device syz [ 166.296522][ T40] audit: type=1326 audit(1766527417.250:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 166.305784][ T40] audit: type=1326 audit(1766527417.250:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.313226][ T40] audit: type=1326 audit(1766527417.250:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.320200][ T40] audit: type=1326 audit(1766527417.250:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.327368][ T40] audit: type=1326 audit(1766527417.250:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.334938][ T40] audit: type=1326 audit(1766527417.250:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.342095][ T40] audit: type=1326 audit(1766527417.250:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 166.350845][ T40] audit: type=1326 audit(1766527417.250:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.359544][ T40] audit: type=1326 audit(1766527417.250:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.367693][ T40] audit: type=1326 audit(1766527417.250:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.0.508" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 166.759236][ T6113] usb 8-1: unable to get BOS descriptor or descriptor too short [ 166.762443][ T6113] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 166.765292][ T6113] usb 8-1: can't read configurations, error -71 [ 166.924307][ T8439] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.931168][ T8439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.933896][ T8444] xt_TPROXY: Can be used only with -p tcp or -p udp [ 166.945221][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.955576][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.131736][ T8457] netlink: 'syz.1.515': attribute type 27 has an invalid length. [ 167.137131][ T8457] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 167.140693][ T8457] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 167.144005][ T8457] gretap1: left promiscuous mode [ 167.418209][ T6113] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 167.418406][ T839] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 167.599567][ T6113] usb 8-1: unable to get BOS descriptor or descriptor too short [ 167.604386][ T6113] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 167.607621][ T6113] usb 8-1: can't read configurations, error -61 [ 167.611029][ T6113] usb usb8-port1: attempt power cycle [ 167.808670][ T839] usb 7-1: Using ep0 maxpacket: 32 [ 167.877586][ T8474] trusted_key: encrypted_key: master key parameter is missing [ 167.886711][ T8474] comedi comedi2: comedi_config --init_data is deprecated [ 168.061125][ T839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 168.064979][ T839] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 168.067487][ T839] usb 7-1: can't read configurations, error -71 [ 168.148277][ T6024] usb 44-1: device descriptor read/8, error -110 [ 168.160018][ T8479] vxcan1 speed is unknown, defaulting to 1000 [ 168.178192][ T6113] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 168.197690][ T8480] trusted_key: syz.1.520 sent an empty control message without MSG_MORE. [ 168.638880][ T6024] usb usb44-port1: attempt power cycle [ 168.750255][ T6113] usb 8-1: unable to get BOS descriptor or descriptor too short [ 168.753944][ T6113] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 168.756513][ T6113] usb 8-1: can't read configurations, error -61 [ 168.908355][ T6113] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 168.940776][ T6113] usb 8-1: unable to get BOS descriptor or descriptor too short [ 168.944641][ T6113] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 168.947400][ T6113] usb 8-1: can't read configurations, error -61 [ 168.950027][ T6113] usb usb8-port1: unable to enumerate USB device [ 169.048216][ T8489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 169.051078][ T8489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.062902][ T8489] vhci_hcd vhci_hcd.0: Device attached [ 169.199025][ T6024] usb usb44-port1: unable to enumerate USB device [ 169.308175][ T9] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 169.561872][ T8490] vhci_hcd: connection reset by peer [ 169.564528][ T8331] vhci_hcd vhci_hcd.2: stop threads [ 169.566750][ T8331] vhci_hcd vhci_hcd.2: release socket [ 169.569364][ T8331] vhci_hcd vhci_hcd.2: disconnect device [ 170.277711][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.525'. [ 170.525879][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 170.656281][ T8508] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 170.658968][ T8508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 170.663205][ T8508] vhci_hcd vhci_hcd.0: Device attached [ 171.478419][ T6033] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 171.559727][ T8509] vhci_hcd: connection closed [ 171.566570][ T8335] vhci_hcd vhci_hcd.3: stop threads [ 171.571288][ T8335] vhci_hcd vhci_hcd.3: release socket [ 171.573822][ T8335] vhci_hcd vhci_hcd.3: disconnect device [ 171.648300][ T6033] usb 7-1: Using ep0 maxpacket: 32 [ 171.730839][ T6033] usb 7-1: unable to get BOS descriptor or descriptor too short [ 171.738693][ T6033] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 171.742247][ T6033] usb 7-1: can't read configurations, error -71 [ 172.113740][ T8543] netlink: 107460 bytes leftover after parsing attributes in process `syz.0.534'. [ 172.157800][ T8331] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.161292][ T8331] Bluetooth: hci4: Frame reassembly failed (-84) [ 172.697067][ T8559] bridge_slave_0: left allmulticast mode [ 172.708997][ T8559] bridge_slave_0: left promiscuous mode [ 172.713096][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.741659][ T8559] bridge_slave_1: left allmulticast mode [ 172.743633][ T8559] bridge_slave_1: left promiscuous mode [ 172.745931][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.926561][ T8559] bond0: (slave bond_slave_0): Releasing backup interface [ 173.318667][ T8559] bond0: (slave bond_slave_1): Releasing backup interface [ 174.218184][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 174.221149][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 174.515552][ T8578] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 174.592904][ T8579] 9pnet_virtio: no channels available for device syz [ 175.135903][ T8559] team0: Port device team_slave_0 removed [ 175.139926][ T8559] team0: Port device team_slave_1 removed [ 175.142129][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.145039][ T8559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.147819][ T8559] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.188322][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 175.912497][ T8593] netlink: 'syz.1.545': attribute type 2 has an invalid length. [ 176.007974][ T8597] overlayfs: missing 'lowerdir' [ 177.908178][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 178.330711][ T8620] netlink: 'syz.2.552': attribute type 4 has an invalid length. [ 178.369305][ T8626] binder: 8625:8626 ioctl 7a6 80000040 returned -22 [ 178.520833][ T8633] input: syz1 as /devices/virtual/input/input6 [ 178.985754][ T8636] syz0: rxe_newlink: already configured on vxcan1 [ 179.046265][ T8637] 9pnet_virtio: no channels available for device syz [ 180.472570][ T8648] autofs: Bad value for 'fd' [ 180.605854][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 180.610196][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.559'. [ 180.810620][ T8654] vxcan1 speed is unknown, defaulting to 1000 [ 180.843918][ T53] kernel read not supported for file 495/task/496/cmdline (pid: 53 comm: kworker/2:1) [ 180.852111][ T8662] 9p: Bad value for 'rfdno' [ 181.378601][ T8672] syz0: rxe_newlink: already configured on vxcan1 [ 181.449840][ T8673] 9pnet_virtio: no channels available for device syz [ 182.185874][ T8677] vxcan1 speed is unknown, defaulting to 1000 [ 183.678403][ T8687] syz0: rxe_newlink: already configured on vxcan1 [ 183.805274][ T8688] 9pnet_virtio: no channels available for device syz [ 184.875199][ T8691] 9pnet_virtio: no channels available for device syz [ 185.535357][ T8688] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 185.554205][ T8694] pim6reg: entered allmulticast mode [ 186.170278][ T8706] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 186.175740][ T8706] Error validating options; rc = [-22] [ 186.498203][ T61] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 186.558240][ T6113] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.658138][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 186.718563][ T6113] usb 5-1: Using ep0 maxpacket: 16 [ 186.722912][ T6113] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.727205][ T6113] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.732403][ T6113] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.737803][ T6113] usb 5-1: config 1 interface 0 has no altsetting 0 [ 186.743197][ T61] usb 7-1: unable to get BOS descriptor or descriptor too short [ 186.751266][ T61] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 186.753925][ T61] usb 7-1: can't read configurations, error -71 [ 186.758690][ T6113] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 186.762035][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.764937][ T6113] usb 5-1: Product: syz [ 186.766413][ T6113] usb 5-1: Manufacturer: syz [ 186.767967][ T6113] usb 5-1: SerialNumber: syz [ 187.426614][ T6113] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 188.179670][ T8742] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 188.756077][ T9] usb 5-1: USB disconnect, device number 21 [ 188.771852][ T9] usblp0: removed [ 188.848493][ T8755] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 188.878862][ T8757] autofs: Unknown parameter 'c@' [ 188.917758][ T8761] 9pnet_virtio: no channels available for device syz [ 190.685617][ T8778] vxcan1 speed is unknown, defaulting to 1000 [ 192.503712][ T8797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.688930][ T8804] netlink: 196 bytes leftover after parsing attributes in process `syz.0.594'. [ 193.469388][ T8810] futex_wake_op: syz.2.596 tries to shift op by -1; fix this program [ 193.499892][ T8811] futex_wake_op: syz.2.596 tries to shift op by -1; fix this program [ 193.696183][ T8828] capability: warning: `syz.1.601' uses 32-bit capabilities (legacy support in use) [ 193.974135][ T40] kauditd_printk_skb: 823 callbacks suppressed [ 193.974150][ T40] audit: type=1326 audit(1766527444.930:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 193.995804][ T40] audit: type=1326 audit(1766527444.950:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.007313][ T40] audit: type=1326 audit(1766527444.950:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.018155][ T40] audit: type=1326 audit(1766527444.950:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.033429][ T40] audit: type=1326 audit(1766527444.950:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.041981][ T40] audit: type=1326 audit(1766527444.950:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.058531][ T40] audit: type=1326 audit(1766527444.950:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.076279][ T40] audit: type=1326 audit(1766527444.950:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.097182][ T40] audit: type=1326 audit(1766527444.950:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.107879][ T40] audit: type=1326 audit(1766527444.950:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.3.603" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb6579 code=0x7ffc0000 [ 194.308288][ T61] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 194.458285][ T61] usb 6-1: Using ep0 maxpacket: 32 [ 194.829574][ T61] usb 6-1: unable to get BOS descriptor or descriptor too short [ 194.836161][ T61] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 194.846616][ T61] usb 6-1: can't read configurations, error -71 [ 195.748242][ T61] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 195.901217][ T61] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.906303][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 195.911405][ T61] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.916303][ T61] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.922669][ T61] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.926420][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.941371][ T61] usb 6-1: config 0 descriptor?? [ 195.954428][ T8887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 196.138227][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 196.138243][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 196.318407][ T8896] netlink: 64 bytes leftover after parsing attributes in process `syz.3.616'. [ 196.379799][ T61] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 196.405917][ T61] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 196.431049][ T8897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.616'. [ 196.491241][ T8897] vim2m vim2m.0: vidioc_s_fmt queue busy [ 196.591633][ T8900] IPVS: set_ctl: invalid protocol: 115 172.30.0.1:20003 [ 196.662523][ T839] usb 6-1: USB disconnect, device number 14 [ 197.357758][ T8913] bridge_slave_0: left allmulticast mode [ 197.360470][ T8913] bridge_slave_0: left promiscuous mode [ 197.363720][ T8913] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.377881][ T8913] bridge_slave_1: left allmulticast mode [ 197.438370][ T8913] bridge_slave_1: left promiscuous mode [ 197.440369][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.456813][ T8913] bond0: (slave bond_slave_0): Releasing backup interface [ 197.468860][ T8913] bond0: (slave bond_slave_1): Releasing backup interface [ 197.474480][ T8913] team0: Port device team_slave_0 removed [ 197.480216][ T8913] team0: Port device team_slave_1 removed [ 197.482889][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.486384][ T8913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.490539][ T8913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 197.497101][ T8914] team0: No ports can be present during mode change [ 197.718165][ T61] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 197.858407][ T61] usb 8-1: device descriptor read/64, error -71 [ 198.108503][ T61] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 198.248191][ T61] usb 8-1: device descriptor read/64, error -71 [ 198.322749][ T8936] x_tables: duplicate underflow at hook 3 [ 198.368489][ T61] usb usb8-port1: attempt power cycle [ 198.528764][ T6113] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 198.688154][ T6113] usb 5-1: Using ep0 maxpacket: 32 [ 198.728184][ T61] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 198.749398][ T61] usb 8-1: device descriptor read/8, error -71 [ 199.008258][ T61] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 199.023556][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.029441][ T61] usb 8-1: device descriptor read/8, error -71 [ 199.149045][ T61] usb usb8-port1: unable to enumerate USB device [ 200.230769][ T6113] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.234377][ T6113] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 200.237413][ T6113] usb 5-1: can't read configurations, error -71 [ 200.311303][ T8955] overlayfs: missing 'lowerdir' [ 200.616031][ T8973] netem: incorrect ge model size [ 200.618314][ T8973] netem: change failed [ 201.067535][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 201.086374][ T8982] netlink: 72 bytes leftover after parsing attributes in process `syz.1.633'. [ 202.281227][ T61] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 203.308295][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 204.672619][ T61] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.676223][ T61] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 204.683711][ T61] usb 5-1: can't read configurations, error -71 [ 205.557470][ T9039] vxcan1 speed is unknown, defaulting to 1000 [ 206.083248][ T9061] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 206.354582][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 206.395906][ T9067] macvlan2: entered allmulticast mode [ 206.397824][ T9067] veth1_vlan: entered allmulticast mode [ 206.403147][ T9067] veth1_vlan: left allmulticast mode [ 207.199779][ T9073] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 207.202033][ T9073] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 207.204772][ T9073] vhci_hcd vhci_hcd.0: Device attached [ 207.207992][ T9076] vhci_hcd: connection closed [ 207.208346][ T8336] vhci_hcd vhci_hcd.0: stop threads [ 207.211894][ T8336] vhci_hcd vhci_hcd.0: release socket [ 207.213715][ T8336] vhci_hcd vhci_hcd.0: disconnect device [ 207.426350][ T9079] vxcan1 speed is unknown, defaulting to 1000 [ 208.752187][ T9094] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 208.755139][ T9094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.758894][ T9094] vhci_hcd vhci_hcd.0: Device attached [ 208.802227][ T9109] random: crng reseeded on system resumption [ 209.048355][ T53] usb 38-1: SetAddress Request (10) to port 0 [ 209.050712][ T53] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 209.053967][ T9105] vhci_hcd: connection closed [ 209.054201][ T8332] vhci_hcd vhci_hcd.0: stop threads [ 209.057771][ T8332] vhci_hcd vhci_hcd.0: release socket [ 209.059938][ T8332] vhci_hcd vhci_hcd.0: disconnect device [ 209.068228][ T53] usb 38-1: enqueue for inactive port 0 [ 209.482396][ T53] usb usb38-port1: attempt power cycle [ 209.508176][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 209.659446][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.662388][ T29] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 209.665936][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.670240][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 209.674455][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 209.679631][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.682731][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.685317][ T29] usb 7-1: Product: syz [ 209.686756][ T29] usb 7-1: Manufacturer: syz [ 209.693315][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 209.695117][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 209.699865][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 209.702787][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 210.059436][ T53] usb usb38-port1: unable to enumerate USB device [ 210.631871][ T9139] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 210.634113][ T9139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.746886][ T9139] vhci_hcd vhci_hcd.0: Device attached [ 210.908591][ T53] usb 38-1: SetAddress Request (14) to port 0 [ 210.911187][ T53] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 211.367390][ T9140] vhci_hcd: connection reset by peer [ 211.377865][ T8333] vhci_hcd vhci_hcd.0: stop threads [ 211.388330][ T8333] vhci_hcd vhci_hcd.0: release socket [ 211.390753][ T8333] vhci_hcd vhci_hcd.0: disconnect device [ 212.184275][ T9153] random: crng reseeded on system resumption [ 212.292451][ T839] usb 7-1: USB disconnect, device number 14 [ 212.423795][ T9170] input: syz1 as /devices/virtual/input/input8 [ 212.644013][ T9181] hfs: can't find a HFS filesystem on dev loop3 [ 212.925963][ T9179] overlay: ./file1 is not a directory [ 213.056745][ T9179] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 213.066646][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.678'. [ 213.141375][ T9179] geneve0: entered promiscuous mode [ 213.155235][ T9179] geneve0: entered allmulticast mode [ 213.162140][ T9179] team0: Port device geneve0 added [ 213.435621][ T9195] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 213.438670][ T9195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.453598][ T9195] vhci_hcd vhci_hcd.0: Device attached [ 213.571826][ T9201] vhci_hcd: connection closed [ 213.572179][ T8337] vhci_hcd vhci_hcd.3: stop threads [ 213.576836][ T8337] vhci_hcd vhci_hcd.3: release socket [ 213.580185][ T8337] vhci_hcd vhci_hcd.3: disconnect device [ 213.628332][ T839] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 213.858380][ T9216] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 213.861127][ T9216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.864461][ T9216] vhci_hcd vhci_hcd.0: Device attached [ 213.970917][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 214.108319][ T6113] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 214.399311][ T9233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 214.401473][ T9233] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.429303][ T9233] vhci_hcd vhci_hcd.0: Device attached [ 214.443148][ T9217] vhci_hcd: connection reset by peer [ 214.445816][ T8333] vhci_hcd vhci_hcd.2: stop threads [ 214.447534][ T8333] vhci_hcd vhci_hcd.2: release socket [ 214.457513][ T8333] vhci_hcd vhci_hcd.2: disconnect device [ 214.487373][ T9239] vhci_hcd: connection closed [ 214.487693][ T8333] vhci_hcd vhci_hcd.0: stop threads [ 214.495404][ T8333] vhci_hcd vhci_hcd.0: release socket [ 214.497390][ T8333] vhci_hcd vhci_hcd.0: disconnect device [ 214.580330][ T9244] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 214.583420][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.698'. [ 214.587378][ T9244] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 214.591050][ T9244] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 214.594314][ T9244] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.610792][ T9244] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 214.614488][ T9244] netlink: 224 bytes leftover after parsing attributes in process `syz.3.698'. [ 215.032480][ T9252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.701'. [ 215.218216][ T29] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 215.378248][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 215.382341][ T29] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 215.385296][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.389783][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.393376][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.396797][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.401388][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.404653][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.628776][ T29] usb 6-1: usb_control_msg returned -32 [ 215.635450][ T29] usbtmc 6-1:16.0: can't read capabilities [ 215.984912][ T9269] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 216.003325][ T53] usb 38-1: device descriptor read/8, error -110 [ 216.011134][ T9250] binder: 9249:9250 ioctl 400c620e 80000100 returned -22 [ 216.020642][ T839] usb 6-1: USB disconnect, device number 15 [ 216.119550][ T9272] vxcan1 speed is unknown, defaulting to 1000 [ 216.429156][ T53] usb usb38-port1: attempt power cycle [ 216.636032][ T9285] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 216.638971][ T9285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.642536][ T9285] vhci_hcd vhci_hcd.0: Device attached [ 216.918300][ T61] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 217.061138][ T53] usb usb38-port1: unable to enumerate USB device [ 217.091803][ T9286] vhci_hcd: connection reset by peer [ 217.101968][ T8336] vhci_hcd vhci_hcd.3: stop threads [ 217.103939][ T8336] vhci_hcd vhci_hcd.3: release socket [ 217.105798][ T8336] vhci_hcd vhci_hcd.3: disconnect device [ 217.713401][ T9290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 217.716351][ T9290] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.720450][ T9290] vhci_hcd vhci_hcd.0: Device attached [ 217.844392][ T9306] input: syz0 as /devices/virtual/input/input9 [ 217.855861][ T9303] vhci_hcd: connection closed [ 217.859012][ T8335] vhci_hcd vhci_hcd.2: stop threads [ 217.864513][ T8335] vhci_hcd vhci_hcd.2: release socket [ 217.867194][ T8335] vhci_hcd vhci_hcd.2: disconnect device [ 218.449107][ T6116] udevd[6116]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 218.711558][ T9319] netlink: 'syz.3.719': attribute type 30 has an invalid length. [ 219.222347][ T9323] netlink: 'syz.3.719': attribute type 30 has an invalid length. [ 219.248468][ T6113] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 219.313504][ T9326] siw: device registration error -23 [ 219.344013][ T9326] wireguard0: entered promiscuous mode [ 219.346083][ T9326] wireguard0: entered allmulticast mode [ 219.465467][ T9330] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 219.483186][ T9332] Driver unsupported XDP return value 0 on prog (id 237) dev N/A, expect packet loss! [ 219.497948][ T9330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.535363][ T9330] bond2: (slave geneve2): making interface the new active one [ 219.539009][ T9330] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 219.662904][ T9338] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.666924][ T9339] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.672349][ T9338] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.686775][ T9339] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.690792][ T9338] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.054073][ T9364] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 220.110756][ T9366] 9pnet_virtio: no channels available for device syz [ 221.095353][ T9388] fuse: Bad value for 'fd' [ 221.328482][ T6113] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 221.548593][ T6113] usb 8-1: not running at top speed; connect to a high speed hub [ 221.568878][ T6113] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 221.579423][ T6113] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.583392][ T6113] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.586915][ T6113] usb 8-1: Product: syz [ 221.589595][ T6113] usb 8-1: Manufacturer: syz [ 221.591681][ T6113] usb 8-1: SerialNumber: syz [ 221.598213][ T9386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.048213][ T61] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 223.095936][ T9409] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 223.098151][ T9409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.101984][ T9409] vhci_hcd vhci_hcd.0: Device attached [ 223.491917][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.744'. [ 223.514398][ T9410] vhci_hcd: connection closed [ 223.514955][ T8334] vhci_hcd vhci_hcd.0: stop threads [ 223.521223][ T8334] vhci_hcd vhci_hcd.0: release socket [ 223.523846][ T8334] vhci_hcd vhci_hcd.0: disconnect device [ 223.579155][ T9416] 9pnet_virtio: no channels available for device syz [ 224.285543][ T9426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.748'. [ 224.357885][ T839] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 224.361245][ T839] usb 37-1: enqueue for inactive port 0 [ 224.448217][ T839] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 224.536328][ T6113] cdc_ncm 8-1:1.0: bind() failure [ 224.543424][ T6113] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 224.546450][ T6113] cdc_ncm 8-1:1.1: bind() failure [ 224.552296][ T6113] usb 8-1: USB disconnect, device number 24 [ 225.151064][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'. [ 225.154136][ T9440] netlink: 'syz.3.752': attribute type 30 has an invalid length. [ 225.156891][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 225.364168][ T9445] binder: 9444:9445 ioctl 400c620e 0 returned -14 [ 225.449842][ T6024] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 225.612035][ T6024] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 225.616083][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.628965][ T6024] usb 8-1: Product: syz [ 225.631025][ T6024] usb 8-1: Manufacturer: syz [ 225.633119][ T6024] usb 8-1: SerialNumber: syz [ 225.645197][ T6024] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 225.689667][ T839] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 226.252348][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.257322][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.278637][ T9454] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 226.280944][ T9454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.284632][ T9454] vhci_hcd vhci_hcd.0: Device attached [ 226.346519][ T9457] vhci_hcd: connection closed [ 226.346755][ T8342] vhci_hcd vhci_hcd.1: stop threads [ 226.350427][ T8342] vhci_hcd vhci_hcd.1: release socket [ 226.352216][ T8342] vhci_hcd vhci_hcd.1: disconnect device [ 226.782562][ T839] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 226.786264][ T839] ath9k_htc: Failed to initialize the device [ 226.828679][ T839] usb 8-1: ath9k_htc: USB layer deinitialized [ 227.446218][ T9468] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 227.548454][ T6125] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 227.715152][ T6125] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.730466][ T6125] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 227.732936][ T6125] usb 5-1: can't read configurations, error -71 [ 228.223902][ T53] usb 8-1: USB disconnect, device number 25 [ 229.842480][ T9490] input: syz0 as /devices/virtual/input/input10 [ 230.180031][ T9496] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 230.182280][ T9496] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 230.185516][ T9496] vhci_hcd vhci_hcd.0: Device attached [ 230.534721][ T839] usb 40-1: SetAddress Request (18) to port 0 [ 230.540714][ T9499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 230.540732][ T839] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 230.543660][ T9499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.551061][ T9499] vhci_hcd vhci_hcd.0: Device attached [ 230.709999][ T9497] vhci_hcd: connection closed [ 230.719419][ T8337] vhci_hcd vhci_hcd.1: stop threads [ 230.723855][ T8337] vhci_hcd vhci_hcd.1: release socket [ 230.726315][ T8337] vhci_hcd vhci_hcd.1: disconnect device [ 230.888183][ T54] usb 43-1: new low-speed USB device number 7 using vhci_hcd [ 230.897577][ T839] usb 40-1: enqueue for inactive port 0 [ 231.135170][ T9500] vhci_hcd: connection reset by peer [ 231.137297][ T8330] vhci_hcd vhci_hcd.3: stop threads [ 231.139199][ T8330] vhci_hcd vhci_hcd.3: release socket [ 231.141337][ T8330] vhci_hcd vhci_hcd.3: disconnect device [ 231.310597][ T839] usb usb40-port1: attempt power cycle [ 232.520104][ T839] usb usb40-port1: unable to enumerate USB device [ 232.843269][ T9516] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 233.358334][ T6024] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 234.101062][ T9516] 9pnet_virtio: no channels available for device syz [ 234.160725][ T6024] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 234.164428][ T6024] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 234.167726][ T6024] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.178103][ T6024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.182700][ T9529] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 234.187002][ T6024] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.791230][ T8334] Bluetooth: hci4: Frame reassembly failed (-84) [ 234.956202][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 234.956217][ T40] audit: type=1326 audit(1766527485.910:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.1.781" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x0 [ 235.706793][ T9553] bridge0: port 3(team0) entered disabled state [ 235.722100][ T9554] netlink: 'syz.3.779': attribute type 16 has an invalid length. [ 235.738783][ T9554] netlink: 'syz.3.779': attribute type 17 has an invalid length. [ 235.745759][ T9553] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.755294][ T9553] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.834744][ T9554] bridge0: port 3(team0) entered blocking state [ 235.837141][ T9554] bridge0: port 3(team0) entered forwarding state [ 235.856032][ T9554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.874653][ T8331] bridge0: port 3(team0) entered disabled state [ 235.968172][ T54] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 236.708221][ T5298] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 236.820918][ T29] usb 7-1: USB disconnect, device number 15 [ 236.955104][ T9574] fuse: Bad value for 'fd' [ 237.238313][ T61] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 237.458876][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 237.464499][ T61] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 237.481839][ T61] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.485904][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.496123][ T61] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.508363][ T61] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.520424][ T61] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.527041][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.178837][ T9594] FAULT_INJECTION: forcing a failure. [ 238.178837][ T9594] name failslab, interval 1, probability 0, space 0, times 0 [ 238.183143][ T9594] CPU: 1 UID: 0 PID: 9594 Comm: syz.1.792 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.183160][ T9594] Tainted: [L]=SOFTLOCKUP [ 238.183164][ T9594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.183171][ T9594] Call Trace: [ 238.183186][ T9594] [ 238.183192][ T9594] dump_stack_lvl+0x16c/0x1f0 [ 238.183229][ T9594] should_fail_ex+0x512/0x640 [ 238.183245][ T9594] ? __kmalloc_cache_noprof+0x5f/0x800 [ 238.183259][ T9594] should_failslab+0xc2/0x120 [ 238.183277][ T9594] __kmalloc_cache_noprof+0x80/0x800 [ 238.183289][ T9594] ? binder_get_thread+0x225/0x8c0 [ 238.183307][ T9594] ? binder_get_thread+0x225/0x8c0 [ 238.183321][ T9594] ? __pfx_binder_ioctl+0x10/0x10 [ 238.183336][ T9594] binder_get_thread+0x225/0x8c0 [ 238.183352][ T9594] ? __pfx_binder_ioctl+0x10/0x10 [ 238.183368][ T9594] binder_ioctl+0x274/0x7360 [ 238.183387][ T9594] ? find_held_lock+0x2b/0x80 [ 238.183402][ T9594] ? tomoyo_path_number_perm+0x295/0x580 [ 238.183417][ T9594] ? tomoyo_path_number_perm+0x18d/0x580 [ 238.183430][ T9594] ? lock_acquire+0x174/0x330 [ 238.183440][ T9594] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.183453][ T9594] ? __pfx_binder_ioctl+0x10/0x10 [ 238.183472][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 238.183494][ T9594] ? do_vfs_ioctl+0x128/0x14f0 [ 238.183508][ T9594] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 238.183525][ T9594] ? find_held_lock+0x2b/0x80 [ 238.183538][ T9594] ? hook_file_ioctl_common+0x144/0x410 [ 238.183555][ T9594] ? __fget_files+0x20e/0x3c0 [ 238.183570][ T9594] ? __fput_deferred+0x480/0x480 [ 238.183582][ T9594] ? __pfx_binder_ioctl+0x10/0x10 [ 238.183598][ T9594] compat_ptr_ioctl+0x6e/0xa0 [ 238.183610][ T9594] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 238.183623][ T9594] __ia32_compat_sys_ioctl+0x242/0x370 [ 238.183639][ T9594] __do_fast_syscall_32+0xe8/0x680 [ 238.183658][ T9594] do_fast_syscall_32+0x32/0x80 [ 238.183668][ T9594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.183682][ T9594] RIP: 0023:0xf6ffd579 [ 238.183691][ T9594] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.183702][ T9594] RSP: 002b:00000000f53ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 238.183712][ T9594] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c620e [ 238.183719][ T9594] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.183726][ T9594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.183732][ T9594] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 238.183738][ T9594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.183751][ T9594] [ 238.183780][ T9594] binder: 9593:9594 ioctl 400c620e 80000100 returned -12 [ 238.627831][ T61] usb 8-1: usb_control_msg returned -32 [ 238.630085][ T61] usbtmc 8-1:16.0: can't read capabilities [ 239.099117][ T6024] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 239.248285][ T6024] usb 6-1: Using ep0 maxpacket: 32 [ 239.503338][ T6024] usb 6-1: unable to get BOS descriptor or descriptor too short [ 239.514972][ T6024] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 239.522833][ T6024] usb 6-1: can't read configurations, error -71 [ 240.001586][ T9626] 9pnet_virtio: no channels available for device syz [ 240.005396][ T9626] fuse: Bad value for 'fd' [ 240.135286][ T6125] usb 8-1: USB disconnect, device number 26 [ 240.368148][ T6024] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 240.575649][ T9645] siw: device registration error -23 [ 240.585591][ T9647] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 240.587928][ T9647] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.590730][ T9647] vhci_hcd vhci_hcd.0: Device attached [ 240.628176][ T6024] usb 6-1: Using ep0 maxpacket: 8 [ 240.632001][ T6024] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 240.635524][ T6024] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 240.639772][ T6024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 240.643896][ T6024] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.648272][ T6024] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.653826][ T6024] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 240.657612][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.699952][ T9650] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 240.702623][ T9650] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.705985][ T9650] vhci_hcd vhci_hcd.0: Device attached [ 240.858262][ T61] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 240.867496][ T6024] usb 6-1: usb_control_msg returned -32 [ 240.870075][ T6024] usbtmc 6-1:16.0: can't read capabilities [ 240.978161][ T6125] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 241.212768][ T9648] vhci_hcd: connection reset by peer [ 241.214825][ T8335] vhci_hcd vhci_hcd.3: stop threads [ 241.216630][ T8335] vhci_hcd vhci_hcd.3: release socket [ 241.219091][ T8335] vhci_hcd vhci_hcd.3: disconnect device [ 241.220524][ T9653] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 241.224564][ T6113] usb 6-1: USB disconnect, device number 17 [ 241.296746][ T9651] vhci_hcd: connection reset by peer [ 241.299836][ T8322] vhci_hcd vhci_hcd.0: stop threads [ 241.301818][ T8322] vhci_hcd vhci_hcd.0: release socket [ 241.303718][ T8322] vhci_hcd vhci_hcd.0: disconnect device [ 241.574416][ T9660] evm: overlay not supported [ 241.964963][ T9672] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 242.036827][ T9672] input: syz1 as /devices/virtual/input/input11 [ 243.228172][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 243.280699][ T9702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 243.283282][ T9702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 243.308407][ T9702] vhci_hcd vhci_hcd.0: Device attached [ 243.329063][ T9714] vhci_hcd: connection closed [ 243.329254][ T8322] vhci_hcd vhci_hcd.1: stop threads [ 243.332699][ T8322] vhci_hcd vhci_hcd.1: release socket [ 243.334537][ T8322] vhci_hcd vhci_hcd.1: disconnect device [ 243.343056][ T9719] 9p: Bad value for 'port' [ 243.378215][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 243.381874][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 243.384832][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.389293][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.392800][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.396154][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.400548][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.403514][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.465314][ T9728] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 243.557099][ T9729] vxcan1 speed is unknown, defaulting to 1000 [ 243.609909][ T29] usb 7-1: usb_control_msg returned -32 [ 243.611874][ T29] usbtmc 7-1:16.0: can't read capabilities [ 243.755131][ T9730] vxcan1 speed is unknown, defaulting to 1000 [ 243.920665][ T40] audit: type=1804 audit(1766527494.880:952): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.826" name="/newroot/220/bus/file0" dev="overlay" ino=1199 res=1 errno=0 [ 244.625353][ T9749] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 244.629369][ T9749] batadv2: entered promiscuous mode [ 244.631746][ T9749] batadv2: entered allmulticast mode [ 244.634603][ T9749] team0: Port device batadv2 added [ 244.636676][ T8334] bridge0: port 3(team0) entered blocking state [ 244.639046][ T8334] bridge0: port 3(team0) entered forwarding state [ 245.128302][ T8334] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 245.132242][ T8334] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 246.201128][ T29] usb 7-1: USB disconnect, device number 16 [ 246.218297][ T6125] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 246.232850][ T61] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 246.938863][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 246.989716][ T9767] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 247.003313][ T9767] bond3: (slave lo): Enslaving as a backup interface with an up link [ 247.011128][ T9767] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 247.089081][ T9762] tmpfs: User quota inode hardlimit too large. [ 247.558873][ T8335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.588465][ T6113] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 247.918453][ T6113] usb 7-1: Using ep0 maxpacket: 32 [ 248.300318][ T6113] usb 7-1: unable to get BOS descriptor or descriptor too short [ 248.306278][ T6113] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 248.309113][ T6113] usb 7-1: can't read configurations, error -71 [ 248.548161][ T29] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 248.688984][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.708169][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 248.714101][ T29] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 248.717704][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.728222][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.732479][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.736776][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.758171][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.762149][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.972920][ T29] usb 8-1: usb_control_msg returned -32 [ 248.975453][ T29] usbtmc 8-1:16.0: can't read capabilities [ 249.517002][ T9827] binder: BINDER_SET_CONTEXT_MGR already set [ 249.519927][ T9827] binder: 9826:9827 ioctl 4018620d 80004a80 returned -16 [ 249.788403][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.908660][ T8334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.128194][ T6113] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 251.278139][ T6113] usb 6-1: Using ep0 maxpacket: 32 [ 251.424974][ T29] usb 8-1: USB disconnect, device number 27 [ 251.499344][ T6113] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.508681][ T6113] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 251.511977][ T6113] usb 6-1: can't read configurations, error -71 [ 251.857870][ T9872] binder: BINDER_SET_CONTEXT_MGR already set [ 251.860189][ T9872] binder: 9871:9872 ioctl 4018620d 80004a80 returned -16 [ 252.030085][ T9870] binder: 9867:9870 ioctl 0 80000040 returned -22 [ 252.037721][ T8322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.148388][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.708277][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.711153][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.926233][ T9885] netlink: 'syz.1.861': attribute type 11 has an invalid length. [ 253.751326][ T9890] program syz.3.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.758146][ T9890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.908291][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.865'. [ 253.956316][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.268421][ T9902] binder: BINDER_SET_CONTEXT_MGR already set [ 254.271192][ T9902] binder: 9901:9902 ioctl 4018620d 80004a80 returned -16 [ 254.356642][ T9905] overlayfs: failed to resolve 'subj_user=': -2 [ 254.384533][ T9906] tipc: Started in network mode [ 254.386297][ T9906] tipc: Node identity e0000001, cluster identity 4711 [ 254.388843][ T9906] tipc: Enabling of bearer rejected, failed to enable media [ 254.483717][ T40] audit: type=1326 audit(1766527505.440:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.497260][ T40] audit: type=1326 audit(1766527505.450:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.507338][ T40] audit: type=1326 audit(1766527505.450:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.515193][ T40] audit: type=1326 audit(1766527505.450:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.523187][ T40] audit: type=1326 audit(1766527505.450:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.533415][ T40] audit: type=1326 audit(1766527505.450:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.564853][ T40] audit: type=1326 audit(1766527505.520:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.583823][ T40] audit: type=1326 audit(1766527505.530:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.598316][ T40] audit: type=1326 audit(1766527505.550:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 254.609503][ T40] audit: type=1326 audit(1766527505.560:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.867" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 255.109154][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.338617][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.685843][ T9921] CUSE: info not properly terminated [ 256.244021][ T9934] [ 256.245138][ T9934] ====================================================== [ 256.248108][ T9934] WARNING: possible circular locking dependency detected [ 256.251032][ T9934] syzkaller #0 Tainted: G L [ 256.253809][ T9934] ------------------------------------------------------ [ 256.256739][ T9934] syz.3.875/9934 is trying to acquire lock: [ 256.259250][ T9934] ffff8880747d0488 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 256.263005][ T9934] [ 256.263005][ T9934] but task is already holding lock: [ 256.266153][ T9934] ffff88806d2f8c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 256.269615][ T9934] [ 256.269615][ T9934] which lock already depends on the new lock. [ 256.269615][ T9934] [ 256.273956][ T9934] [ 256.273956][ T9934] the existing dependency chain (in reverse order) is: [ 256.277795][ T9934] [ 256.277795][ T9934] -> #3 (&p->lock){+.+.}-{4:4}: [ 256.280771][ T9934] __mutex_lock+0x1aa/0x1ca0 [ 256.283032][ T9934] seq_read_iter+0xe1/0x12d0 [ 256.285249][ T9934] kernfs_fop_read_iter+0x46c/0x610 [ 256.287746][ T9934] copy_splice_read+0x618/0xc20 [ 256.290049][ T9934] do_splice_read+0x285/0x370 [ 256.292270][ T9934] splice_file_to_pipe+0x109/0x120 [ 256.294686][ T9934] do_sendfile+0x400/0xe50 [ 256.296800][ T9934] __ia32_sys_sendfile64+0x1d7/0x220 [ 256.299314][ T9934] __do_fast_syscall_32+0xe8/0x680 [ 256.301798][ T9934] do_fast_syscall_32+0x32/0x80 [ 256.304103][ T9934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.306988][ T9934] [ 256.306988][ T9934] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 256.310183][ T9934] __mutex_lock+0x1aa/0x1ca0 [ 256.312421][ T9934] anon_pipe_write+0x15d/0x1bd0 [ 256.314756][ T9934] __kernel_write_iter+0x720/0xb10 [ 256.317152][ T9934] __kernel_write+0xf5/0x140 [ 256.319362][ T9934] autofs_notify_daemon+0x4db/0xd60 [ 256.321871][ T9934] autofs_wait+0x10f3/0x1ac0 [ 256.324061][ T9934] autofs_mount_wait+0x132/0x3c0 [ 256.326294][ T9934] autofs_d_automount+0x4b2/0x960 [ 256.328639][ T9934] __traverse_mounts+0x1b9/0x830 [ 256.331015][ T9934] step_into_slowpath+0x772/0xf50 [ 256.333407][ T9934] path_lookupat+0x627/0xc40 [ 256.335643][ T9934] filename_lookup+0x224/0x5f0 [ 256.337904][ T9934] kern_path+0x35/0x50 [ 256.339881][ T9934] lookup_bdev+0xd8/0x280 [ 256.341990][ T9934] resume_store+0x1d6/0x490 [ 256.344172][ T9934] kobj_attr_store+0x58/0x80 [ 256.346425][ T9934] sysfs_kf_write+0xf2/0x150 [ 256.348604][ T9934] kernfs_fop_write_iter+0x3af/0x570 [ 256.351088][ T9934] vfs_write+0x7d3/0x11d0 [ 256.353178][ T9934] ksys_write+0x12a/0x250 [ 256.355218][ T9934] __do_fast_syscall_32+0xe8/0x680 [ 256.357674][ T9934] do_fast_syscall_32+0x32/0x80 [ 256.359821][ T9934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.362744][ T9934] [ 256.362744][ T9934] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 256.366023][ T9934] __mutex_lock+0x1aa/0x1ca0 [ 256.368418][ T9934] autofs_notify_daemon+0x4a6/0xd60 [ 256.370847][ T9934] autofs_wait+0x10f3/0x1ac0 [ 256.373032][ T9934] autofs_mount_wait+0x132/0x3c0 [ 256.375405][ T9934] autofs_d_automount+0x4b2/0x960 [ 256.377785][ T9934] __traverse_mounts+0x1b9/0x830 [ 256.380164][ T9934] step_into_slowpath+0x772/0xf50 [ 256.382565][ T9934] path_lookupat+0x627/0xc40 [ 256.384668][ T9934] filename_lookup+0x224/0x5f0 [ 256.386921][ T9934] kern_path+0x35/0x50 [ 256.388910][ T9934] lookup_bdev+0xd8/0x280 [ 256.391005][ T9934] resume_store+0x1d6/0x490 [ 256.393207][ T9934] kobj_attr_store+0x58/0x80 [ 256.395381][ T9934] sysfs_kf_write+0xf2/0x150 [ 256.397523][ T9934] kernfs_fop_write_iter+0x3af/0x570 [ 256.400004][ T9934] vfs_write+0x7d3/0x11d0 [ 256.402121][ T9934] ksys_write+0x12a/0x250 [ 256.404324][ T9934] __do_fast_syscall_32+0xe8/0x680 [ 256.406728][ T9934] do_fast_syscall_32+0x32/0x80 [ 256.409005][ T9934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.411897][ T9934] [ 256.411897][ T9934] -> #0 (&of->mutex){+.+.}-{4:4}: [ 256.414991][ T9934] __lock_acquire+0x1669/0x2890 [ 256.417493][ T9934] lock_acquire+0x179/0x330 [ 256.419586][ T9934] __mutex_lock+0x1aa/0x1ca0 [ 256.421861][ T9934] kernfs_seq_start+0x4f/0x2a0 [ 256.424199][ T9934] seq_read_iter+0x2c1/0x12d0 [ 256.426483][ T9934] kernfs_fop_read_iter+0x46c/0x610 [ 256.428996][ T9934] copy_splice_read+0x618/0xc20 [ 256.431322][ T9934] do_splice_read+0x285/0x370 [ 256.433574][ T9934] splice_file_to_pipe+0x109/0x120 [ 256.436071][ T9934] do_sendfile+0x400/0xe50 [ 256.438213][ T9934] __ia32_sys_sendfile64+0x1d7/0x220 [ 256.440761][ T9934] __do_fast_syscall_32+0xe8/0x680 [ 256.443220][ T9934] do_fast_syscall_32+0x32/0x80 [ 256.445537][ T9934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.448442][ T9934] [ 256.448442][ T9934] other info that might help us debug this: [ 256.448442][ T9934] [ 256.452796][ T9934] Chain exists of: [ 256.452796][ T9934] &of->mutex --> &pipe->mutex --> &p->lock [ 256.452796][ T9934] [ 256.457752][ T9934] Possible unsafe locking scenario: [ 256.457752][ T9934] [ 256.460899][ T9934] CPU0 CPU1 [ 256.463322][ T9934] ---- ---- [ 256.465641][ T9934] lock(&p->lock); [ 256.467296][ T9934] lock(&pipe->mutex); [ 256.470128][ T9934] lock(&p->lock); [ 256.472865][ T9934] lock(&of->mutex); [ 256.474640][ T9934] [ 256.474640][ T9934] *** DEADLOCK *** [ 256.474640][ T9934] [ 256.478059][ T9934] 2 locks held by syz.3.875/9934: [ 256.480219][ T9934] #0: ffff88802575ec68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 256.484048][ T9934] #1: ffff88806d2f8c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 256.487849][ T9934] [ 256.487849][ T9934] stack backtrace: [ 256.490466][ T9934] CPU: 0 UID: 0 PID: 9934 Comm: syz.3.875 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.490494][ T9934] Tainted: [L]=SOFTLOCKUP [ 256.490502][ T9934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 256.490514][ T9934] Call Trace: [ 256.490520][ T9934] [ 256.490529][ T9934] dump_stack_lvl+0x116/0x1f0 [ 256.490558][ T9934] print_circular_bug+0x275/0x340 [ 256.490593][ T9934] check_noncircular+0x146/0x160 [ 256.490621][ T9934] __lock_acquire+0x1669/0x2890 [ 256.490639][ T9934] ? __kvmalloc_node_noprof+0x3ac/0xa40 [ 256.490663][ T9934] ? kernfs_fop_read_iter+0x46c/0x610 [ 256.490691][ T9934] lock_acquire+0x179/0x330 [ 256.490707][ T9934] ? kernfs_seq_start+0x4f/0x2a0 [ 256.490732][ T9934] ? __pfx___might_resched+0x10/0x10 [ 256.490758][ T9934] __mutex_lock+0x1aa/0x1ca0 [ 256.490784][ T9934] ? kernfs_seq_start+0x4f/0x2a0 [ 256.490808][ T9934] ? kernfs_seq_start+0x4f/0x2a0 [ 256.490833][ T9934] ? __pfx___mutex_lock+0x10/0x10 [ 256.490862][ T9934] ? rcu_is_watching+0x12/0xc0 [ 256.490885][ T9934] ? trace_kmalloc+0x2b/0xb0 [ 256.490908][ T9934] ? __kvmalloc_node_noprof+0x3c9/0xa40 [ 256.490932][ T9934] ? kernfs_seq_start+0x4f/0x2a0 [ 256.490955][ T9934] kernfs_seq_start+0x4f/0x2a0 [ 256.490980][ T9934] seq_read_iter+0x2c1/0x12d0 [ 256.491003][ T9934] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 256.491027][ T9934] kernfs_fop_read_iter+0x46c/0x610 [ 256.491054][ T9934] copy_splice_read+0x618/0xc20 [ 256.491079][ T9934] ? __pfx_aa_file_perm+0x10/0x10 [ 256.491103][ T9934] ? __pfx_copy_splice_read+0x10/0x10 [ 256.491131][ T9934] ? __fget_files+0x204/0x3c0 [ 256.491155][ T9934] ? __pfx_copy_splice_read+0x10/0x10 [ 256.491178][ T9934] do_splice_read+0x285/0x370 [ 256.491202][ T9934] splice_file_to_pipe+0x109/0x120 [ 256.491229][ T9934] do_sendfile+0x400/0xe50 [ 256.491252][ T9934] ? __pfx_do_sendfile+0x10/0x10 [ 256.491273][ T9934] ? do_seccomp+0x333/0x2640 [ 256.491291][ T9934] ? __pfx___seccomp_filter+0x10/0x10 [ 256.491313][ T9934] __ia32_sys_sendfile64+0x1d7/0x220 [ 256.491329][ T9934] ? xfd_validate_state+0x61/0x180 [ 256.491345][ T9934] ? __pfx___ia32_sys_sendfile64+0x10/0x10 [ 256.491362][ T9934] ? __secure_computing+0x21c/0x320 [ 256.491382][ T9934] __do_fast_syscall_32+0xe8/0x680 [ 256.491409][ T9934] do_fast_syscall_32+0x32/0x80 [ 256.491424][ T9934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 256.491445][ T9934] RIP: 0023:0xf7fb6579 [ 256.491459][ T9934] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 256.491476][ T9934] RSP: 002b:00000000f54a655c EFLAGS: 00000296 ORIG_RAX: 00000000000000ef [ 256.491492][ T9934] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000009 [ 256.491503][ T9934] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 256.491513][ T9934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 256.491523][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.491533][ T9934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 256.491549][ T9934] [ 256.738656][ T8336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.018232][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.848279][ T8335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.538190][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.540937][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.968320][ T8334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.098260][ T8335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.458238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.218287][ T8334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.738281][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.338780][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.378428][ T6033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.438738][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.218221][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.221176][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.548486][ T8335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.648226][ T8335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog