last executing test programs: 9.047346501s ago: executing program 3 (id=3017): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10, 0x5, "fb5b1ff53e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.709662874s ago: executing program 0 (id=3019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000000200000028000480240001800a0001007175657565000000140002ebcbb0c4400003000006000240000700000900010073797a300000000009"], 0x7c}}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff01000000000000002f0000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0x20048b4}, 0x0) 8.519375823s ago: executing program 0 (id=3020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_submit(0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r8, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000002c0)={r9, 0x3}, &(0x7f0000000300)=0x8) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000000414000527bd7000fe5249250800010001000000696b79285488e6bc263770b855a8f420fd823d3099ceee6cacd3feb4cfee74b06d43f01965de8c17c012109b80483cec984a345bb38db3d72b8ea0f9547b923d13d4053849c36611466f192fa3531ef281b4d33270749704d90e7b302a8efab5d31fee34e4922978e32136c9e110f2094e7fa39e4e8d001c16499cd4ba229f911f95a9496fdaddd57d32559ff190bb2b58fa7865a182dde963d25875e258c911c1adb2160544a482732d751890dd4d8cd404b2f68a"], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x44011) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'xfrm0\x00'}) 7.282387188s ago: executing program 0 (id=3021): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1a, &(0x7f0000000640)=@raw=[@ldst={0x1, 0x2, 0x3, 0xb, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x2}, @generic={0x3e, 0x4, 0x6, 0x7fd, 0x7ac4}], &(0x7f0000000200)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[r0, r0, r0], &(0x7f0000000300)=[{0x0, 0x5, 0xe}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f00000000c0), &(0x7f0000000340)=r6}, 0x20) syz_io_uring_setup(0x4955, 0x0, 0x0, &(0x7f0000000380)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0x400000], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x400402, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0xfffffffe, {}, 0x5, 0x107ffffffe}}}, 0x90) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) 6.759293189s ago: executing program 1 (id=3024): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0x5a7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x6, 0x20000000, 0x1, 0xb9d8, 0x8, 0x2, 0x4000001}, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) close(0x3) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = dup2(r8, r8) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, 0x0) 6.758918854s ago: executing program 4 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000011000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000094000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000005c0004801400030076657468315f6d6163767461700000000800014000000005"], 0x130}}, 0x0) 6.419452037s ago: executing program 4 (id=3026): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x1000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 6.210900218s ago: executing program 2 (id=3027): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f0000001340)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r4, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.675791416s ago: executing program 3 (id=3028): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x2b18, 0xbbba, 0x0, 0x18, 0x0, {0x0, 0x1}, {0x0, 0xfffffff9, 0xfffffffe}, {0x3f8d419}, {0x1000800, 0x4000000}, 0x1000000, 0x3f0, 0x2000000, 0xd213, 0x0, 0x0, 0x4607, 0x401, 0x0, 0x1, 0x800, 0x1, 0x0, 0x4}) 5.652346502s ago: executing program 1 (id=3029): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\x95\\4\x150xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r4, 0xc0001502, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_submit(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r7, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000002c0)={r8, 0x3}, &(0x7f0000000300)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'xfrm0\x00'}) 4.833314737s ago: executing program 0 (id=3033): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fcntl$getown(r0, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x2, 0x2002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x4, 0x0, 0x0, 0x1, 0xd3, &(0x7f0000001380)=""/211, 0x100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef6cd8d8000080003400000000114"], 0xf0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="120100031624c1085e0475076ddd0102030109021200010708e04209048e0000fff21e06e4fe301951edb84890d308c7e4ee97e52a2cc641539d50896f873f972949f9a72eed335203847977d157f7fdbfbbbd19b568eb35ea5c0cf99b2124646d7ef4118ae9f43d3148a1aa70a9cc54a979009f4cba93"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x2, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b0546fbce5"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x5, 0x75}, {0x6, 0x24, 0x1a, 0x400, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0xc, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x9, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x7, 0x59}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0xf6}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x50, 0x2, 0x4, 0x40, 0xc}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0xaa, &(0x7f0000000100)=@string={0xaa, 0x3, "06e95e4c3d24fabf4b0d2e394729219c706e193a589056e5cdb2fc1fb06e149428722ef400786dd4bde4199acf2c3e6da595969c05ed213e7c018a43457b050ee2ca3fce85e8623931fd037cbe438b8121b7bea48a8bc4d141176c9d2e0380b05b3c5c69fb307a3fac3cb81b39763015a4457637e2b6c106535775fdffc7c0d7499a76533d0343d7402e6a5ab84f2ef1fd092a96479f11e7df47004034470f8110d24e3cf2aa71d7"}}, {0xa9, &(0x7f0000000880)=ANY=[@ANYBLOB="a903a77ca005db9811b8d2f4692944317e6904a56a8b5ee56767b8ab67606efb1012bcd3aa95b744ccc34e590c3bc1e39bd8647e9a47dd76dc66fc42ff000000000000003c2ecb420130b7e053fb8c7586ad99d36f09b8c52e13d984dd5aec859fe7405181352454ed6b9d8aa484493229531985f18c66194e3bb059dc070538e60d459426d30bd708a34d29750d69fa0100eb8ba53139c135cc2b85d5446e2fa870d3d4dead0f8cdea713126c2cd1d11e1cd3047b1c76d7a9d00b0f3f5cb1d3a48294024b3098e570a702839eb74d4f94362ead7e378e064870d080937eacf3c8a10e5bca2a21a514dda855b1730d32aaae13b20fa69c53"]}, {0x8c, &(0x7f0000000300)=@string={0x8c, 0x3, "d34f7bc8bf26d98a67e1285b2a5308623c53ce66dcdb51c76fa30dadbb06a3cee1ce500b8109e2c1a23ba79c3f4a8db5fea47b2ce155e0f0c303855f0f9f5b3d4bdfbec97534e49a808de1a64e487aa23ffea917ffaa5137c368dfbf1f2a5bf86c9bb7bad1cc59fa6bdad5008a4b1b3f552d2a263a8607563fef2601f39198a457021f0d64ade06fb444"}}, {0x9a, &(0x7f00000003c0)=@string={0x9a, 0x3, "511ee9a536adcf6556b185464410fc29111f74a2b45bd66a9c16b733e5dd3ba357ccf1b8c3decf559a71f6b7fa61b4494d5004f6718ac729ea475741aa9bf0adb61b66d44c5b3ada3c3241cd6cb75d8a70a4c18e93937543b8d8c58c7cee8460a9391daadb8d70f4dbf6aac6d21d09fb0b2a33d4589601e4976ed81b55db9cd8c6d40c97a4ea5b9747a3a23ab9b11020ba5e5b033d7a7104"}}, {0xc7, &(0x7f0000000980)=ANY=[@ANYBLOB="c7031a90c487e87b9d7d4aeeaf78573f4095be7dc78e3f42eaf631f037aa024f38cc513f83ae40c89d0155f6569b5923186c6b1f8a920fdd2dac97af068e932c64103a5ed6bc8bc2909e72b4532df1e712d0a1cc922d2a44cbd1c60eb1bb6e3b55abea9a4a8ca251a77222525f1dec462ee037a5ed77f0b6e720547b6d744a30fcdc46356fab04276f05d94765e8884b5abc69495bb480d95d70a5c814b8496016b244185de02f131b8f04a7b19152f3cf52e7a2185119993d102ff1aaa6192d8dbaf616401dbaba60e529d6b242d9c805f62fe543274b412c836e61b746e42ceaf9a74737c10603fb1f7a"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c01}}, {0xf6, &(0x7f00000005c0)=@string={0xf6, 0x3, "b67d4b9629ba0a0a844ab078f680aa117426dacc263884d976a6f95fe60af028261c9576c1b096de529395b81559a16ba198634d7cdccc98b2cdfb28f9be6f986729227c2870ad246ac66a02ecf737b016bfd4de00c388607365fb7cefa4a9bb905d282e81be7d817f42bf7381c6e6dd430a88e9777632a1d91f17dd2db86701945638cda713da193ffcd64f469d17307f0f46c80294a452f23cc9a0081da5cd7a30a320f02b777bf1daeacc49b121fc771d979866a3a084ad971a12e08df03328451689f647200a28fa51f586bb16b3729543709f9aa4a6da51023e6c6bbb686e7b6024a412253153da22dff9d07af82a78224c"}}, {0xdf, &(0x7f00000006c0)=@string={0xdf, 0x3, "4e0d5802c91abc1874f43a5e573cedee5aa97341dec7e8ab944da1319ab0c204e5fff9c64685a182feee03b76d90c6841196a7160171c47481576fb3f4f1644b0af11f29b91a30ff340da60655a15915a1525bd133db1973f49a17581f1b73f688d0650d162b0c08acc0b8766e9ca4b64f02d342c4b040607bb8bf762460b73a3053e02ee021e91bbe7b8dae6cdbd627f4b0db651533057fde44e745ff521aaefd7a9ede85e00226b0ff7d7232262dc1b4869afa49e543cfcf26fabb49508fe85cf9745f588e4ea80fcd9e26fad00495e8f6f1aa9116c561132b862768"}}]}) socket$nl_generic(0x10, 0x3, 0x10) 4.695340703s ago: executing program 1 (id=3034): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f0000001340)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r4, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.669775184s ago: executing program 3 (id=3035): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x7, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_adjtime(0xa00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x570}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000008000000020013"], 0x50}}, 0x0) 4.387275302s ago: executing program 3 (id=3036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000000)={&(0x7f00000002c0)=[{0xf, 0x10, 0x5, &(0x7f0000000080)="cd137f461e"}], 0x1}) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2154, 0xc000, 0x3, 0xc4}) unshare(0x6020400) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 3.989200143s ago: executing program 2 (id=3037): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x4000000000000000, 0xfffffffffffffffc}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) 3.763766022s ago: executing program 2 (id=3038): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x0, 0x3, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x67, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x38}, {[@end, @generic={0x83, 0x2}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000440)={0x1, 0x1, 0x5, r3, 0x3}, 0xc) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2501010000000000180012800e00010069703665720000616e000000040002800a000100ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x6, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad00200ebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997e9bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_submit(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r9, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000002c0)={r10, 0x3}, &(0x7f0000000300)=0x8) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) 3.63502385s ago: executing program 4 (id=3039): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x3, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x36, 0x0, "f1f7882eade7f9ed59dd754e93fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) r2 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='ro\x00', &(0x7f0000000140)="a6", 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x808b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 3.48354183s ago: executing program 4 (id=3040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xd6}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x49) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x100000, 0x0, 0x30) 2.125978297s ago: executing program 2 (id=3041): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970afdaab4a", 0x6c, 0xffffffffffffffff) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$cont(0x1f, r5, 0x100, 0x4) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000480)=0x1d, 0x4) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) sendmsg$nl_route(r6, 0x0, 0x800) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="fbffffffffffbbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa2b009078f7000000450000000000000000000000ac1414aaac1414aa"], 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 1.963459589s ago: executing program 1 (id=3042): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000840)={0x240, 0x2, 0x0, {{0x500, 0xff, 0xffff, 0xe803, {0x2, 0x0, 0x2}, 0x40800000, 0x0, 0x9, 0x0, 0x53, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\xff\xff\xff', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x24, '\xd2\x99\x98\x80\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x974\xbd\xfd\xf0\xadpt\x13\xba3\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x240) 1.68737801s ago: executing program 2 (id=3043): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000100003040000000002dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="204a00000750050008001300", @ANYRES32=0x0, @ANYBLOB="de00de9b"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4080) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x2, 0x0, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40000001, 0x0) sched_setattr(0x0, &(0x7f0000010100)={0x38, 0x0, 0x60, 0xf, 0x80000000, 0x8000000009, 0x0, 0xfffffffffffffffe, 0xfa11, 0xa}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x10082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000100)='./file0\x00') ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) close(r5) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x5) keyctl$instantiate(0xc, 0x0, &(0x7f0000010040)=ANY=[@ANYRESOCT=r5, @ANYRES16, @ANYRESOCT], 0x2d, 0xfffffffffffffff9) 1.644497504s ago: executing program 1 (id=3044): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000003bbfe8000000000000000000000000000aa4e200e22"], 0x0) 1.497322886s ago: executing program 1 (id=3045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x101003) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@del={0xe0, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {{'generic-gcm-aesni\x00'}, '\x00', '\x00', 0x400, 0x6a25607d6decc742}}, 0xe0}, 0x1, 0x0, 0x0, 0x40008000}, 0x8000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_io_uring_setup(0x7e3, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r4, 0x0) syz_io_uring_complete(r7) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.329465697s ago: executing program 4 (id=3046): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x2000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 1.175060367s ago: executing program 2 (id=3047): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x7}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r9, 0x9000aea4, &(0x7f0000001340)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r4, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 768.60516ms ago: executing program 0 (id=3048): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x7, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_adjtime(0xa00, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x570}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000009000000020013"], 0x50}}, 0x0) 0s ago: executing program 0 (id=3049): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d5, &(0x7f00000000c0)={0x0, 0x6669, 0x80, 0x2, 0x37a}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x22, 0x4007, @fd_index=0x6, 0x7e6c, 0x9, 0x5, 0x13, 0x0, {0x3}}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2a, &(0x7f00000019c0)=0x5, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xd, 0x414241) io_uring_register$IORING_REGISTER_IOWQ_AFF(r9, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 6': attribute type 1 has an invalid length. [ 661.091166][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 661.140838][ T5932] usb 2-1: USB disconnect, device number 97 [ 661.586702][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 661.646564][ T10] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 661.677038][ T5932] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 661.743409][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 661.752708][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.760820][ T9] usb 4-1: Product: syz [ 661.765180][ T9] usb 4-1: Manufacturer: syz [ 661.770071][ T9] usb 4-1: SerialNumber: syz [ 661.777465][ T9] usb 4-1: config 0 descriptor?? [ 661.796526][ T10] usb 3-1: device descriptor read/64, error -71 [ 661.838627][ T5932] usb 5-1: config 0 has no interfaces? [ 661.850096][ T5932] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 661.860451][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.871677][ T5932] usb 5-1: Product: syz [ 661.877976][ T5932] usb 5-1: Manufacturer: syz [ 661.887038][ T5932] usb 5-1: SerialNumber: syz [ 661.899917][ T5932] usb 5-1: config 0 descriptor?? [ 661.988924][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 662.004805][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 662.066711][ T10] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 662.194742][ T9] usb 4-1: USB disconnect, device number 108 [ 662.204126][T11326] usb 5-1: USB disconnect, device number 90 [ 662.206554][ T10] usb 3-1: device descriptor read/64, error -71 [ 662.337226][ T10] usb usb3-port1: attempt power cycle [ 662.686661][ T10] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 662.720015][ T10] usb 3-1: device descriptor read/8, error -71 [ 662.910609][T14375] binder: BINDER_SET_CONTEXT_MGR already set [ 662.920263][T14375] binder: 14372:14375 ioctl 4018620d 200000000100 returned -16 [ 662.928218][T14375] binder: BINDER_SET_CONTEXT_MGR already set [ 662.934382][T14375] binder: 14372:14375 ioctl 4018620d 200000000100 returned -16 [ 662.942427][T14375] binder: BINDER_SET_CONTEXT_MGR already set [ 662.948798][T14375] binder: 14372:14375 ioctl 4018620d 200000000100 returned -16 [ 662.956781][T14375] binder: BINDER_SET_CONTEXT_MGR already set [ 663.028713][ T10] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 663.049313][T14375] binder: 14372:14375 ioctl 4018620d 200000000100 returned -16 [ 663.078449][ T10] usb 3-1: device descriptor read/8, error -71 [ 663.197701][ T10] usb usb3-port1: unable to enumerate USB device [ 663.657187][T14397] fuse: Unknown parameter 'rootmÛΔBode' [ 664.076549][ T10] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 664.298693][ T10] usb 1-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 664.309510][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.339227][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.353752][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.397789][ T10] usb 1-1: Product: syz [ 664.397805][ T10] usb 1-1: Manufacturer: syz [ 664.397814][ T10] usb 1-1: SerialNumber: syz [ 664.506939][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 664.694822][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 664.713424][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.736030][ T9] usb 4-1: Product: syz [ 664.742069][ T9] usb 4-1: Manufacturer: syz [ 664.750817][ T9] usb 4-1: SerialNumber: syz [ 664.801303][ T9] usb 4-1: config 0 descriptor?? [ 664.821495][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 664.992793][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 665.005037][ T10] usb 1-1: USB disconnect, device number 94 [ 665.066619][T11326] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 665.069142][ T7846] udevd[7846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.091876][ T9] hso 4-1:0.0: Failed to find BULK IN ep [ 665.109552][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 665.156717][ T5932] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 665.248443][T11326] usb 5-1: config 0 has no interfaces? [ 665.256024][T11326] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 665.268526][T11326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.285037][T11326] usb 5-1: Product: syz [ 665.290557][ T10] usb 4-1: USB disconnect, device number 109 [ 665.296511][T11326] usb 5-1: Manufacturer: syz [ 665.301617][T11326] usb 5-1: SerialNumber: syz [ 665.315777][T11326] usb 5-1: config 0 descriptor?? [ 665.328682][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 665.338478][ T5932] usb 2-1: not running at top speed; connect to a high speed hub [ 665.348071][ T5932] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 665.356298][ T5932] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 665.366890][ T5932] usb 2-1: config 5 has no interface number 0 [ 665.376665][ T5932] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 665.406572][ T5932] usb 2-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.428251][ T5932] usb 2-1: config 5 interface 246 has no altsetting 0 [ 665.449877][ T5932] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 665.459193][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.467338][ T5932] usb 2-1: Product: syz [ 665.476652][ T5932] usb 2-1: Manufacturer: syz [ 665.486749][ T5932] usb 2-1: SerialNumber: syz [ 665.537059][T11326] usb 5-1: USB disconnect, device number 91 [ 666.285142][T14435] vlan2: entered allmulticast mode [ 668.116919][ T13] usb 2-1: Failed to submit usb control message: -71 [ 668.125994][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 668.142157][ T5932] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 668.182359][ T13] usb 2-1: unable to get target info from device [ 668.234539][ T5932] usb 2-1: USB disconnect, device number 98 [ 668.255743][ T13] usb 2-1: could not get target info (-71) [ 668.270227][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 668.291217][ T13] usb 2-1: could not probe fw (-71) [ 668.608045][T14465] loop8: detected capacity change from 0 to 8 [ 668.660361][T14465] Dev loop8: unable to read RDB block 8 [ 668.696578][T14465] loop8: unable to read partition table [ 668.702448][T14465] loop8: partition table beyond EOD, truncated [ 668.736764][T14465] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 668.839362][T14469] loop8: detected capacity change from 0 to 8 [ 668.869089][T14469] Dev loop8: unable to read RDB block 8 [ 668.888840][T14469] loop8: unable to read partition table [ 668.902509][T14469] loop8: partition table beyond EOD, truncated [ 668.916575][T14469] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 668.946642][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 669.088271][T14479] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2583'. [ 669.111555][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 669.126528][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.144443][ T10] usb 2-1: Product: syz [ 669.154650][ T10] usb 2-1: Manufacturer: syz [ 669.162260][ T10] usb 2-1: SerialNumber: syz [ 669.176272][T14483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2581'. [ 669.225791][ T10] usb 2-1: config 0 descriptor?? [ 669.320658][T14482] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2580'. [ 669.481705][ T10] hso 2-1:0.0: Failed to find BULK IN ep [ 669.505809][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 669.777608][ T10] usb 2-1: USB disconnect, device number 99 [ 669.796547][ T5932] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 670.027993][ T5932] usb 4-1: config 0 has no interfaces? [ 670.043538][ T5932] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 670.063423][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.072805][ T5932] usb 4-1: Product: syz [ 670.080548][ T5932] usb 4-1: Manufacturer: syz [ 670.086502][ T5932] usb 4-1: SerialNumber: syz [ 670.101950][ T5932] usb 4-1: config 0 descriptor?? [ 670.371657][ T5932] usb 4-1: USB disconnect, device number 110 [ 671.766748][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 671.928698][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 671.964810][ T10] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 671.996251][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 672.027298][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 672.036364][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.054682][ T10] usb 5-1: Product: syz [ 672.069734][ T10] usb 5-1: Manufacturer: syz [ 672.074380][ T10] usb 5-1: SerialNumber: syz [ 672.608209][T14548] fuse: Bad value for 'fd' [ 672.631964][T14548] ipip0: entered promiscuous mode [ 672.637413][T14548] ipip0: entered allmulticast mode [ 672.936571][ T5901] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 673.066643][ T5901] usb 1-1: device descriptor read/64, error -71 [ 673.316991][ T5901] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 673.365323][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'. [ 673.446607][ T5901] usb 1-1: device descriptor read/64, error -71 [ 673.526585][ T5932] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 673.556997][ T5901] usb usb1-port1: attempt power cycle [ 673.710533][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 673.735891][ T5932] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 673.748960][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.758165][ T5932] usb 3-1: Product: syz [ 673.762531][ T5932] usb 3-1: Manufacturer: syz [ 673.768059][ T5932] usb 3-1: SerialNumber: syz [ 673.782650][ T5932] r8152-cfgselector 3-1: Unknown version 0x0000 [ 673.793597][ T5932] r8152-cfgselector 3-1: config 0 descriptor?? [ 673.966516][ T5901] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 673.997318][ T5901] usb 1-1: device descriptor read/8, error -71 [ 674.014787][ T5932] r8152-cfgselector 3-1: Needed 1 retries to read version [ 674.017879][T14566] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2609'. [ 674.236582][ T5901] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 674.257360][ T5901] usb 1-1: device descriptor read/8, error -71 [ 674.537516][T14573] veth0_to_hsr: entered promiscuous mode [ 674.544396][T14573] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 674.608932][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 674.608950][ T29] audit: type=1326 audit(1772142298.276:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 674.626625][ T5901] usb usb1-port1: unable to enumerate USB device [ 674.850315][ T29] audit: type=1326 audit(1772142298.276:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 674.909870][ T9] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 674.938929][ T29] audit: type=1326 audit(1772142298.276:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 674.989643][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input54 [ 675.002335][ T29] audit: type=1326 audit(1772142298.276:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 675.035465][T14578] loop8: detected capacity change from 0 to 8 [ 675.051086][T14578] Dev loop8: unable to read RDB block 8 [ 675.057585][T14578] loop8: unable to read partition table [ 675.071537][ T10] usb 5-1: USB disconnect, device number 92 [ 675.071587][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 675.078412][T14578] loop8: partition table beyond EOD, [ 675.086254][ T29] audit: type=1326 audit(1772142298.276:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 675.130473][ T29] audit: type=1326 audit(1772142298.276:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 675.131445][T14578] truncated [ 675.203699][ T29] audit: type=1326 audit(1772142298.276:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 675.228718][T14578] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 675.256596][ T10] appletouch 5-1:1.0: input: appletouch disconnected [ 675.354146][ T29] audit: type=1326 audit(1772142298.276:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 675.408664][ T29] audit: type=1326 audit(1772142298.276:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 675.574150][ T29] audit: type=1326 audit(1772142298.276:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4f2c99c799 code=0x7ffc0000 [ 676.401526][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2621'. [ 677.153611][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2625'. [ 677.236553][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 677.387390][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 677.399087][ T10] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 677.440771][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 677.451654][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.469343][ T10] quatech2 2-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 677.486641][ T5901] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 677.636638][ T5901] usb 5-1: device descriptor read/64, error -71 [ 677.669972][ T10] usb 2-1: qt2_attach - failed to power on unit: -71 [ 677.683925][ T10] quatech2 2-1:24.0: probe with driver quatech2 failed with error -71 [ 677.707952][ T10] usb 2-1: USB disconnect, device number 100 [ 677.865417][T14636] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2628'. [ 677.895545][ T5901] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 677.947053][T14636] SET target dimension over the limit! [ 677.976301][T14636] netdevsim netdevsim2: Direct firmware load for / [ 677.976301][T14636] failed with error -2 [ 677.987137][T14636] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 677.987137][T14636] [ 678.037669][ T5901] usb 5-1: device descriptor read/64, error -71 [ 678.146742][ T5901] usb usb5-port1: attempt power cycle [ 678.179800][T14641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.401260][T14643] loop8: detected capacity change from 0 to 8 [ 678.428172][T14643] Dev loop8: unable to read RDB block 8 [ 678.448711][T14643] loop8: unable to read partition table [ 678.471181][T14643] loop8: partition table beyond EOD, truncated [ 678.488772][ T5901] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 678.491663][T14643] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 678.557855][ T5901] usb 5-1: device descriptor read/8, error -71 [ 678.842578][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2633'. [ 678.852718][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2633'. [ 678.927383][ T5901] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 678.987212][ T5901] usb 5-1: device descriptor read/8, error -71 [ 679.110319][ T5901] usb usb5-port1: unable to enumerate USB device [ 679.466548][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 679.494035][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 679.617026][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 679.624610][ T9] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.636651][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 679.645925][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.906782][ T5901] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 680.058714][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 680.068158][ T5901] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 680.082213][ T9] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 680.083658][ T5901] usb 1-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 680.102950][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.117370][ T5901] quatech2 1-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 680.129405][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 680.290505][ T9] usb 3-1: USB disconnect, device number 105 [ 680.296698][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 680.341782][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 680.365714][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.401571][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.418605][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.429407][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.446973][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 680.456291][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.627874][T14688] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2646'. [ 680.980050][ T10] usb 4-1: USB disconnect, device number 111 [ 681.750649][T14698] netlink: 'syz.3.2650': attribute type 27 has an invalid length. [ 681.895340][T14703] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 681.910353][T14703] ipt_ECN: cannot use operation on non-tcp rule [ 682.122909][T14709] loop8: detected capacity change from 0 to 8 [ 682.131040][ T7846] Dev loop8: unable to read RDB block 8 [ 682.163343][ T7846] loop8: unable to read partition table [ 682.184802][ T7846] loop8: partition table beyond EOD, truncated [ 682.199228][T14709] Dev loop8: unable to read RDB block 8 [ 682.206044][T14709] loop8: unable to read partition table [ 682.213522][T14709] loop8: partition table beyond EOD, truncated [ 682.220224][T14709] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 682.640921][ T5901] usb 1-1: qt2_attach - failed to power on unit: -71 [ 682.717121][ T5901] quatech2 1-1:24.0: probe with driver quatech2 failed with error -71 [ 682.730011][ T5901] usb 1-1: USB disconnect, device number 99 [ 682.771829][ T5932] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 682.916675][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 682.946424][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.966640][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.984299][ T5932] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 682.997633][ T5932] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.011861][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.064660][ T5932] usb 4-1: config 0 descriptor?? [ 683.087710][T14730] loop8: detected capacity change from 0 to 8 [ 683.100143][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 683.107326][ T9] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.126828][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 683.141091][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.150487][ T7846] Dev loop8: unable to read RDB block 8 [ 683.156096][ T7846] loop8: unable to read partition table [ 683.162474][ T7846] loop8: partition table beyond EOD, truncated [ 683.170667][T14730] Dev loop8: unable to read RDB block 8 [ 683.186075][T14730] loop8: unable to read partition table [ 683.194364][T14730] loop8: partition table beyond EOD, truncated [ 683.220527][T14730] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 683.282189][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.322079][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.359827][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.375049][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.423888][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.457110][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.470602][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.481462][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.497401][T14734] fuse: Unknown parameter 'U' [ 683.504324][T14734] netlink: 'syz.2.2660': attribute type 10 has an invalid length. [ 683.514515][T14719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.524864][T14719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.661407][T14742] syz.2.2660 (14742): /proc/14731/oom_adj is deprecated, please use /proc/14731/oom_score_adj instead. [ 683.662944][T14734] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 683.684334][ T9] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 683.779855][ T5932] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 683.800719][T14734] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 683.864812][ T9] usb 2-1: USB disconnect, device number 101 [ 684.259072][ T9] usb 4-1: USB disconnect, device number 112 [ 684.397706][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 684.686284][T14761] fuse: Bad value for 'fd' [ 684.866035][ T5932] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 685.026522][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 685.039970][ T5932] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 685.069835][ T5932] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 685.194522][ T5901] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 685.215015][T14773] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2673'. [ 685.226576][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.247885][ T5932] quatech2 2-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 685.359730][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.371152][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.415268][ T5901] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 685.445666][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.507271][ C1] sd 0:0:1:0: [sda] tag#361 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.517831][ C1] sd 0:0:1:0: [sda] tag#361 CDB: Read(6) 08 00 00 00 00 00 [ 685.525244][ C1] sd 0:0:1:0: [sda] tag#362 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.535583][ C1] sd 0:0:1:0: [sda] tag#362 CDB: Read(6) 08 00 00 00 00 00 [ 685.542852][ C1] sd 0:0:1:0: [sda] tag#363 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.553216][ C1] sd 0:0:1:0: [sda] tag#363 CDB: Read(6) 08 00 00 00 00 00 [ 685.560475][ C1] sd 0:0:1:0: [sda] tag#364 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.570741][ C1] sd 0:0:1:0: [sda] tag#364 CDB: Read(6) 08 00 00 00 00 00 [ 685.578004][ C1] sd 0:0:1:0: [sda] tag#365 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.588271][ C1] sd 0:0:1:0: [sda] tag#365 CDB: Read(6) 08 00 00 00 00 00 [ 685.595573][ C1] sd 0:0:1:0: [sda] tag#366 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.605840][ C1] sd 0:0:1:0: [sda] tag#366 CDB: Read(6) 08 00 00 00 00 00 [ 685.613125][ C1] sd 0:0:1:0: [sda] tag#367 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.623405][ C1] sd 0:0:1:0: [sda] tag#367 CDB: Read(6) 08 00 00 00 00 00 [ 685.630692][ C1] sd 0:0:1:0: [sda] tag#368 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.640978][ C1] sd 0:0:1:0: [sda] tag#368 CDB: Read(6) 08 00 00 00 00 00 [ 685.648252][ C1] sd 0:0:1:0: [sda] tag#369 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.658521][ C1] sd 0:0:1:0: [sda] tag#369 CDB: Read(6) 08 00 00 00 00 00 [ 685.665784][ C1] sd 0:0:1:0: [sda] tag#370 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 685.676059][ C1] sd 0:0:1:0: [sda] tag#370 CDB: Read(6) 08 00 00 00 00 00 [ 685.685723][ T5901] usb 5-1: config 0 descriptor?? [ 685.708172][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.716538][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.930742][ T5901] usbhid 5-1:0.0: can't add hid device: -71 [ 685.938568][ T5901] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 685.985043][ T5901] usb 5-1: USB disconnect, device number 97 [ 686.356666][ T5901] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 686.466618][T11326] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 686.488263][ T5901] usb 5-1: device descriptor read/64, error -71 [ 686.628402][T11326] usb 4-1: Using ep0 maxpacket: 16 [ 686.640700][T11326] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.669239][T11326] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 686.669262][T11326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.740111][ T5901] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 686.876577][ T5901] usb 5-1: device descriptor read/64, error -71 [ 686.997004][ T5901] usb usb5-port1: attempt power cycle [ 687.021462][T14801] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 687.039907][T14801] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 687.089779][T11326] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 687.289129][T11326] usb 4-1: USB disconnect, device number 113 [ 687.336589][ T5901] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 687.359886][ T5901] usb 5-1: device descriptor read/8, error -71 [ 687.526785][ T9] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 687.551649][ T5932] usb 2-1: qt2_attach - failed to power on unit: -71 [ 687.573083][ T5932] quatech2 2-1:24.0: probe with driver quatech2 failed with error -71 [ 687.597919][ T5901] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 687.606385][ T5932] usb 2-1: USB disconnect, device number 102 [ 687.627350][ T5901] usb 5-1: device descriptor read/8, error -71 [ 687.678003][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 687.688771][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 687.701180][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 687.717665][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.735741][ T9] usb 1-1: Product: syz [ 687.736969][ T5901] usb usb5-port1: unable to enumerate USB device [ 687.740473][ T9] usb 1-1: Manufacturer: syz [ 687.752111][ T9] usb 1-1: SerialNumber: syz [ 687.763364][ T9] usb 1-1: config 0 descriptor?? [ 687.773686][T14809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 687.784137][T14809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 688.000568][T14809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 688.014129][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 688.023283][T14817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2687'. [ 688.035921][T14817] netlink: 'syz.3.2687': attribute type 4 has an invalid length. [ 688.116715][T14809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 688.507556][T14819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 688.657727][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2685'. [ 688.670701][ T9] Error reading MAC address [ 688.878424][T14826] loop8: detected capacity change from 0 to 8 [ 688.885869][T14826] Dev loop8: unable to read RDB block 8 [ 688.895019][T14826] loop8: unable to read partition table [ 688.908198][T14826] loop8: partition table beyond EOD, truncated [ 688.931214][T14826] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 689.654591][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'. [ 689.681492][T14832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2692'. [ 690.055800][ T5823] cgroup: fork rejected by pids controller in /syz2 [ 690.206722][ T5932] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 690.307858][ T796] usb 1-1: USB disconnect, device number 100 [ 690.429179][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 690.447601][ T5932] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 690.461859][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.480112][ T5932] usb 5-1: Product: syz [ 690.491529][ T5932] usb 5-1: Manufacturer: syz [ 690.503877][ T5932] usb 5-1: SerialNumber: syz [ 690.539351][ T5932] r8152-cfgselector 5-1: Unknown version 0x0000 [ 690.545674][ T5932] r8152-cfgselector 5-1: config 0 descriptor?? [ 690.674299][ T796] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 690.916609][ T5932] r8152-cfgselector 5-1: Needed 1 retries to read version [ 691.126953][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 691.153386][ T796] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.169413][ T796] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 691.300215][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.542769][ T9] r8152-cfgselector 5-1: USB disconnect, device number 102 [ 691.643577][ T12] bridge_slave_1: left allmulticast mode [ 691.655675][ T12] bridge_slave_1: left promiscuous mode [ 691.674121][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.729769][ T12] bridge_slave_0: left promiscuous mode [ 691.754374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.772417][ T796] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 691.961760][ T796] usb 1-1: USB disconnect, device number 101 [ 692.125927][ T12] gretap0 (unregistering): left promiscuous mode [ 692.265102][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 692.278599][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 692.287621][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 692.298554][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 692.309996][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 692.366000][ T796] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 692.547548][ T12] bond0 (unregistering): left promiscuous mode [ 692.565903][ T12] bond_slave_0: left promiscuous mode [ 692.587637][ T12] bond_slave_1: left promiscuous mode [ 692.590312][ T796] usb 4-1: config 0 has no interfaces? [ 692.602512][ T796] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 692.602927][ T12] veth0_to_hsr: left promiscuous mode [ 692.612868][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.625565][ T796] usb 4-1: Product: syz [ 692.633355][ T796] usb 4-1: Manufacturer: syz [ 692.639251][ T796] usb 4-1: SerialNumber: syz [ 692.646876][ T796] usb 4-1: config 0 descriptor?? [ 692.652874][ T12] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 692.686075][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.712259][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.728613][ T12] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 692.758653][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 692.776073][ T12] bond0 (unregistering): Released all slaves [ 692.791521][ T12] bond1 (unregistering): Released all slaves [ 692.821657][T14859] vlan3: entered allmulticast mode [ 692.960377][ T12] tipc: Left network mode [ 693.119298][ T5905] usb 4-1: USB disconnect, device number 114 [ 693.363518][T14889] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.2706'. [ 693.384081][T14889] SET target dimension over the limit! [ 693.426178][T14889] netdevsim netdevsim4: Direct firmware load for / [ 693.426178][T14889] failed with error -2 [ 693.441162][T14863] chnl_net:caif_netlink_parms(): no params data found [ 693.472120][T14889] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 693.472120][T14889] [ 693.487931][ T796] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 693.546401][ T12] hsr_slave_0: left promiscuous mode [ 693.667676][ T796] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 693.736513][ T796] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 693.752694][ T12] hsr_slave_1: left promiscuous mode [ 693.765160][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.779964][ T796] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 693.805896][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.807770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.830818][ T796] usb 1-1: Product: syz [ 693.863594][ T796] usb 1-1: Manufacturer: syz [ 693.891277][ T796] usb 1-1: SerialNumber: syz [ 693.921831][ T796] usb 1-1: config 0 descriptor?? [ 693.960397][T14885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 693.976746][T14885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 694.106015][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 694.169721][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 694.195844][T14885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 694.212407][T14885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 694.429761][T12203] Bluetooth: hci0: command tx timeout [ 694.469710][T14910] netlink: 'syz.3.2709': attribute type 4 has an invalid length. [ 694.838023][ T796] Error reading MAC address [ 695.025206][ T12] team0 (unregistering): Port device team_slave_1 removed [ 695.151964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 695.589761][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2707'. [ 695.615255][T14863] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.644872][T14863] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.657162][T14863] bridge_slave_0: entered allmulticast mode [ 695.676666][T14863] bridge_slave_0: entered promiscuous mode [ 695.703542][T14863] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.726690][T14863] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.744827][T14863] bridge_slave_1: entered allmulticast mode [ 695.761388][T14863] bridge_slave_1: entered promiscuous mode [ 695.846860][ T5905] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 695.862583][T14863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.907331][T14863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.018086][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 696.028157][ T5905] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.048255][ T5905] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 696.080374][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.165161][ T12] IPVS: stop unused estimator thread 0... [ 696.182862][T14863] team0: Port device team_slave_0 added [ 696.215877][T14863] team0: Port device team_slave_1 added [ 696.371495][T14863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.400744][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.489699][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 696.498817][T12203] Bluetooth: hci0: command tx timeout [ 696.514617][T14863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.530942][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 696.543373][T14863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.570176][ T5905] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 696.583176][T14863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.701305][T14935] netlink: 'syz.1.2713': attribute type 4 has an invalid length. [ 696.734050][ T796] usb 1-1: USB disconnect, device number 102 [ 696.744181][T14863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.793041][ T9] usb 5-1: USB disconnect, device number 103 [ 697.199166][T14863] hsr_slave_0: entered promiscuous mode [ 697.212174][T14863] hsr_slave_1: entered promiscuous mode [ 697.604136][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 698.290072][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 698.356918][ T5905] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 698.459476][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.473600][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 698.510291][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 698.522263][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.544173][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 698.548746][ T9] usb 1-1: config 0 descriptor?? [ 698.568432][T12203] Bluetooth: hci0: command tx timeout [ 698.618360][ T5905] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 698.677435][ T5905] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 698.698489][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.739439][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 698.853296][ T5905] usb 4-1: Product: syz [ 698.860608][ T5905] usb 4-1: Manufacturer: syz [ 698.865472][ T5905] usb 4-1: SerialNumber: syz [ 698.922448][ T5905] usb 4-1: config 0 descriptor?? [ 698.929562][T14863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 698.948047][T14974] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 698.950262][T14863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 698.955570][T14974] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 698.994885][T14863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 699.021684][T14863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 699.202088][T14974] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 699.215281][T14863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.222314][T14974] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 699.288766][T14863] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.320716][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.327888][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.387467][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.394681][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.659969][T14863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.695274][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 699.707568][ T5905] Error reading MAC address [ 699.796049][T15004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 699.825525][T14863] veth0_vlan: entered promiscuous mode [ 699.940315][T14863] veth1_vlan: entered promiscuous mode [ 700.042481][T14863] veth0_macvtap: entered promiscuous mode [ 700.092694][T14863] veth1_macvtap: entered promiscuous mode [ 700.279423][T14863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.290075][T14863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.347089][ T1331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.379062][ T1331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.448364][ T1331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.485513][ T1331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.524813][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.533147][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.608118][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.617634][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.650450][T12203] Bluetooth: hci0: command tx timeout [ 700.959104][ T9] usb 4-1: USB disconnect, device number 115 [ 701.030992][ T10] usb 1-1: USB disconnect, device number 103 [ 701.447917][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 701.757095][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 701.759116][ T9] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.759165][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 701.759189][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.175621][ T9] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 702.197850][T15052] vlan3: entered allmulticast mode [ 702.425715][ T9] usb 4-1: USB disconnect, device number 116 [ 702.777347][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 702.928540][ T5884] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 702.971001][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 702.991677][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 703.002519][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.023131][ T9] usb 5-1: Product: syz [ 703.027757][ T9] usb 5-1: Manufacturer: syz [ 703.036570][ T9] usb 5-1: SerialNumber: syz [ 703.051929][ T9] usb 5-1: config 0 descriptor?? [ 703.119951][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 703.132941][ T5884] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 703.154348][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.178134][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 703.193771][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 703.234732][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 703.257146][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.267756][ T5884] usb 3-1: Product: syz [ 703.272193][ T5884] usb 3-1: Manufacturer: syz [ 703.277016][ T5905] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 703.287258][ T10] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 703.306689][ T5884] usb 3-1: SerialNumber: syz [ 703.314597][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.328067][ T9] hso 5-1:0.0: Failed to find BULK IN ep [ 703.348183][ T10] usb 1-1: Product: syz [ 703.352415][ T10] usb 1-1: Manufacturer: syz [ 703.372615][ T9] usb-storage 5-1:0.0: USB Mass Storage device detected [ 703.399459][T15084] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.2740'. [ 703.411346][T15084] SET target dimension over the limit! [ 703.419179][T15084] netdevsim netdevsim1: Direct firmware load for / [ 703.419179][T15084] failed with error -2 [ 703.430184][T15084] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 703.430184][T15084] [ 703.460690][ T10] usb 1-1: SerialNumber: syz [ 703.476270][ T10] usb 1-1: config 0 descriptor?? [ 703.484874][T15064] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 703.490505][ T5905] usb 4-1: config 0 has no interfaces? [ 703.493462][T15064] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 703.508568][ T5905] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 703.530927][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.556066][ T5905] usb 4-1: Product: syz [ 703.556630][ T5884] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 703.581635][ T9] usb 5-1: USB disconnect, device number 104 [ 703.586714][ T5905] usb 4-1: Manufacturer: syz [ 703.625820][ T5905] usb 4-1: SerialNumber: syz [ 703.650502][ T5905] usb 4-1: config 0 descriptor?? [ 703.753004][T15064] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 703.757612][ T5884] usb 3-1: USB disconnect, device number 106 [ 703.763427][T15064] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 703.885475][ T5905] usb 4-1: USB disconnect, device number 117 [ 703.978779][T15060] usblp0: removed [ 704.206696][T15101] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2742'. [ 704.259525][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2738'. [ 704.311825][ T10] Error reading MAC address [ 704.504056][ T5884] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 704.611948][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 704.708420][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 704.722094][ T5884] usb 3-1: config 2 has an invalid interface number: 95 but max is 0 [ 704.743443][ T5884] usb 3-1: config 2 has no interface number 0 [ 704.769749][ T5884] usb 3-1: config 2 interface 95 has no altsetting 0 [ 704.780576][ T5884] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=e3.7d [ 704.820359][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.828695][ T5884] usb 3-1: Product: syz [ 704.832940][ T5884] usb 3-1: Manufacturer: syz [ 704.840879][ T5884] usb 3-1: SerialNumber: syz [ 704.894979][ T5884] usb 3-1: unknown interface protocol 0x7f, assuming v1 [ 704.902108][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 704.998359][ T5884] usb 3-1: cannot find UAC_HEADER [ 705.065045][ T5884] snd-usb-audio 3-1:2.95: probe with driver snd-usb-audio failed with error -22 [ 705.088779][T15100] fuse: Bad value for 'fd' [ 705.098081][ T7846] udevd[7846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.108023][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'. [ 705.127066][ T796] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 705.148090][ T5884] usb 3-1: USB disconnect, device number 107 [ 705.156872][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 705.166587][ T10] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 705.223416][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 705.239121][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.339096][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.354740][ T10] quatech2 4-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 705.365461][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.375781][ T796] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 705.387988][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.425916][ T796] usb 2-1: config 0 descriptor?? [ 705.449640][ T796] usbhid 2-1:0.0: can't add hid device: -22 [ 705.457237][ T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 705.665722][ T796] usb 2-1: USB disconnect, device number 103 [ 705.761040][ T9] usb 1-1: USB disconnect, device number 104 [ 706.236613][ T9] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 706.256756][ T796] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 706.289337][T15147] loop8: detected capacity change from 0 to 8 [ 706.298562][ T7846] Dev loop8: unable to read RDB block 8 [ 706.304178][ T7846] loop8: unable to read partition table [ 706.310426][ T7846] loop8: partition table beyond EOD, truncated [ 706.337618][T15147] Dev loop8: unable to read RDB block 8 [ 706.343257][T15147] loop8: unable to read partition table [ 706.349466][T15147] loop8: partition table beyond EOD, truncated [ 706.355652][T15147] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 706.377079][ T5884] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 706.407005][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 706.414095][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.435949][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 706.450345][ T9] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.462322][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 706.471531][ T796] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 706.481442][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.490135][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.508141][ T796] usb 3-1: config 0 descriptor?? [ 706.527858][ T796] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 706.556663][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 706.567063][ T5884] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 706.578304][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.587900][ T5884] usb 5-1: Product: syz [ 706.592813][ T5884] usb 5-1: Manufacturer: syz [ 706.598079][ T5884] usb 5-1: SerialNumber: syz [ 706.613828][ T5884] r8152-cfgselector 5-1: Unknown version 0x0000 [ 706.620502][ T5884] r8152-cfgselector 5-1: config 0 descriptor?? [ 706.835959][ T5884] r8152-cfgselector 5-1: Needed 1 retries to read version [ 706.910522][ T9] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 707.178906][ T9] usb 1-1: USB disconnect, device number 105 [ 707.445549][ T5884] r8152-cfgselector 5-1: USB disconnect, device number 105 [ 707.645817][ T10] usb 4-1: qt2_attach - failed to power on unit: -71 [ 707.686609][ T10] quatech2 4-1:24.0: probe with driver quatech2 failed with error -71 [ 707.717745][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 707.728603][ T10] usb 4-1: USB disconnect, device number 118 [ 708.046701][ T9] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 708.167136][ T5932] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 708.326525][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 708.335141][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 708.388062][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.396085][ T9] usb 1-1: Product: syz [ 708.420801][ T5932] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 708.433659][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.466887][ T9] usb 1-1: Manufacturer: syz [ 708.471520][ T9] usb 1-1: SerialNumber: syz [ 708.488876][ T9] usb 1-1: config 0 descriptor?? [ 708.489679][ T5932] usb 2-1: Product: syz [ 708.524102][ T5932] usb 2-1: Manufacturer: syz [ 708.534352][ T5932] usb 2-1: SerialNumber: syz [ 708.582224][ T5932] usb 2-1: config 0 descriptor?? [ 708.693737][ T5905] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 708.784402][T15171] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2760'. [ 708.878386][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 708.883203][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 708.889776][ T5905] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 708.914932][ T9] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 708.950397][ T9] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 708.977239][ T9] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 709.000646][ T5905] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 709.013090][ T5932] usb 2-1: Firmware version (0.0) predates our first public release. [ 709.056941][ T5932] usb 2-1: Please update to version 0.2 or newer [ 709.073983][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.076629][ T9] usb 1-1: USB disconnect, device number 106 [ 709.083500][ T5932] usb 2-1: Firmware: build [ 709.116157][ T5905] usb 5-1: Product: syz [ 709.138205][ T5905] usb 5-1: Manufacturer: syz [ 709.142840][ T5905] usb 5-1: SerialNumber: syz [ 709.185893][ T5905] usb 5-1: config 0 descriptor?? [ 709.200834][T15169] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 709.209270][T15169] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 709.217606][ T10] usb 3-1: USB disconnect, device number 108 [ 709.422332][T15169] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 709.422472][T15169] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 709.601936][T15188] binder: BINDER_SET_CONTEXT_MGR already set [ 709.608211][T15188] binder: 15184:15188 ioctl 4018620d 200000004a80 returned -16 [ 709.640824][T15183] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2764'. [ 709.656959][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2766'. [ 709.672584][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2766'. [ 709.726276][T15186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2764'. [ 709.775034][T15190] netlink: 'syz.0.2767': attribute type 27 has an invalid length. [ 709.871668][T15190] team0: left allmulticast mode [ 709.877986][T15190] team_slave_0: left allmulticast mode [ 709.883471][T15190] team_slave_1: left allmulticast mode [ 709.889394][T15190] batadv1: left allmulticast mode [ 709.894436][T15190] team0: left promiscuous mode [ 709.901919][T15190] team_slave_0: left promiscuous mode [ 709.912210][T15190] team_slave_1: left promiscuous mode [ 709.919353][T15190] batadv1: left promiscuous mode [ 709.924900][T15190] macsec2: left promiscuous mode [ 709.930939][T15190] macsec2: left allmulticast mode [ 709.988216][ T5905] Error reading MAC address [ 710.063169][T15191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.073867][T15191] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.092725][T15191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.110882][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 710.504949][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 710.649323][ T5905] usb 2-1: USB disconnect, device number 104 [ 710.816796][ T796] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 710.966945][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 710.971325][ T796] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 710.971354][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.971373][ T796] usb 3-1: Product: syz [ 710.971387][ T796] usb 3-1: Manufacturer: syz [ 710.971400][ T796] usb 3-1: SerialNumber: syz [ 710.978812][ T796] r8152-cfgselector 3-1: Unknown version 0x0000 [ 710.978838][ T796] r8152-cfgselector 3-1: config 0 descriptor?? [ 711.079802][T15209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.187604][ T796] r8152-cfgselector 3-1: Needed 1 retries to read version [ 711.783420][ T10] usb 5-1: USB disconnect, device number 106 [ 711.855184][ T5905] r8152-cfgselector 3-1: USB disconnect, device number 109 [ 711.890262][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2776'. [ 711.908481][T15221] hub 9-0:1.0: USB hub found [ 711.916689][T15221] hub 9-0:1.0: 1 port detected [ 711.949047][T15223] ptrace attach of "./syz-executor exec"[5828] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/video# [ 712.099547][T15225] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2779'. [ 712.640641][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 712.677026][T15233] loop8: detected capacity change from 0 to 8 [ 712.698995][T15233] Dev loop8: unable to read RDB block 8 [ 712.704614][T15233] loop8: unable to read partition table [ 712.936882][T15233] loop8: partition table beyond EOD, truncated [ 713.069124][T15241] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 713.136790][T15233] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 713.336559][ T10] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 713.577744][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 713.616567][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.633496][ T10] usb 5-1: Product: syz [ 713.644969][ T10] usb 5-1: Manufacturer: syz [ 713.661354][ T10] usb 5-1: SerialNumber: syz [ 713.671596][ T10] usb 5-1: config 0 descriptor?? [ 713.998252][ T5905] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 714.440007][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 714.449108][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 714.488166][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 714.496598][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 714.509343][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 714.519352][ T10] usb 5-1: Please update to version 0.2 or newer [ 714.530295][T15259] netlink: 'syz.3.2788': attribute type 4 has an invalid length. [ 714.537779][ T10] usb 5-1: Firmware: build [ 714.612073][ T5905] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 714.631902][T15264] loop8: detected capacity change from 0 to 8 [ 714.659243][ T7677] Dev loop8: unable to read RDB block 8 [ 714.665223][ T7677] loop8: unable to read partition table [ 714.671099][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.671124][ T5905] usb 1-1: Product: syz [ 714.671139][ T5905] usb 1-1: Manufacturer: syz [ 714.671153][ T5905] usb 1-1: SerialNumber: syz [ 714.694611][ T5905] usb 1-1: config 0 descriptor?? [ 714.707280][T15251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 714.725806][T15251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 714.761715][ T7677] loop8: partition table beyond EOD, truncated [ 714.788262][T15264] Dev loop8: unable to read RDB block 8 [ 714.794368][T15264] loop8: unable to read partition table [ 714.800562][T15264] loop8: partition table beyond EOD, truncated [ 714.808252][T15264] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 714.978867][T15251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 714.986360][T15251] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 715.693904][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 715.706646][ T5905] Error reading MAC address [ 715.770432][ T10] usb 5-1: USB disconnect, device number 107 [ 716.065250][T15281] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 716.275126][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'. [ 716.496833][ T5905] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 716.647760][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 716.657510][ T5905] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 716.666803][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.675029][ T5905] usb 5-1: Product: syz [ 716.686385][ T5905] usb 5-1: Manufacturer: syz [ 716.694971][ T5905] usb 5-1: SerialNumber: syz [ 716.722365][ T5905] r8152-cfgselector 5-1: Unknown version 0x0000 [ 716.729245][ T5905] r8152-cfgselector 5-1: config 0 descriptor?? [ 716.937585][ T10] usb 1-1: USB disconnect, device number 107 [ 716.977879][ T5905] r8152-cfgselector 5-1: Needed 1 retries to read version [ 717.331903][T15308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 717.377888][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2805'. [ 717.408885][T15310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2805'. [ 717.516550][ T796] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 717.668416][ T796] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 717.669043][T15318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2808'. [ 717.707240][T15320] netlink: 'syz.0.2809': attribute type 27 has an invalid length. [ 717.720522][ T5905] r8152-cfgselector 5-1: USB disconnect, device number 108 [ 717.726339][ T796] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 717.748966][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 717.759077][ T796] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 717.785206][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.812297][T15307] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 717.842564][ T796] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 717.940518][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 717.976867][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.984891][ T10] usb 4-1: Product: syz [ 718.024558][ T10] usb 4-1: Manufacturer: syz [ 718.035149][ T10] usb 4-1: SerialNumber: syz [ 718.055619][T15307] binder: BINDER_SET_CONTEXT_MGR already set [ 718.062107][T15307] binder: 15305:15307 ioctl 4018620d 200000000140 returned -16 [ 718.108407][T15307] input: syz1 as /devices/virtual/input/input55 [ 718.133254][ T10] usb 4-1: config 0 descriptor?? [ 718.212100][ T796] usb 3-1: USB disconnect, device number 110 [ 718.549681][ T10] usb 4-1: Firmware version (0.0) predates our first public release. [ 718.586305][ T10] usb 4-1: Please update to version 0.2 or newer [ 718.622518][ T10] usb 4-1: Firmware: build [ 718.662783][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 718.806897][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2813'. [ 718.869861][T15338] IPv6: NLM_F_CREATE should be specified when creating new route [ 718.927443][T15346] netlink: 'syz.2.2816': attribute type 8 has an invalid length. [ 718.941101][T15346] bond0: entered promiscuous mode [ 718.953901][T15346] bond_slave_0: entered promiscuous mode [ 719.005612][T15346] bond_slave_1: entered promiscuous mode [ 719.029743][T15346] gretap0: entered promiscuous mode [ 719.049818][T15346] debugfs: 'hsr1' already exists in 'hsr' [ 719.060181][T15346] Cannot create hsr debugfs directory [ 719.080390][T15346] hsr1: entered promiscuous mode [ 719.087704][ T5932] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 719.278505][ T5932] usb 1-1: config 0 has no interfaces? [ 719.287582][ T5932] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 719.314040][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.322968][ T5932] usb 1-1: Product: syz [ 719.328093][ T5932] usb 1-1: Manufacturer: syz [ 719.332933][ T5932] usb 1-1: SerialNumber: syz [ 719.349126][ T5932] usb 1-1: config 0 descriptor?? [ 719.667594][ T5932] usb 1-1: USB disconnect, device number 108 [ 719.914735][T15373] __nla_validate_parse: 1 callbacks suppressed [ 719.914748][T15373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2823'. [ 719.946652][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 720.022746][T15375] x_tables: duplicate underflow at hook 3 [ 720.076787][T15378] syz_tun: entered allmulticast mode [ 720.106735][ C0] syz_tun: tun_net_xmit 54 [ 720.126556][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 720.137307][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 720.146687][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.154672][ T10] usb 3-1: Product: syz [ 720.159483][ T10] usb 3-1: Manufacturer: syz [ 720.164070][ T10] usb 3-1: SerialNumber: syz [ 720.173721][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 720.183041][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 720.336701][ T5932] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 720.356738][ T5901] usb 4-1: USB disconnect, device number 119 [ 720.415632][ T10] r8152-cfgselector 3-1: Needed 1 retries to read version [ 720.525568][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 720.536046][ T5932] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 720.573408][ T5932] usb 5-1: config 0 has no interface number 0 [ 720.634497][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 720.706851][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.715052][ T5932] usb 5-1: Product: syz [ 720.719378][ T5932] usb 5-1: Manufacturer: syz [ 720.746952][ T5932] usb 5-1: SerialNumber: syz [ 720.763326][ T5932] usb 5-1: config 0 descriptor?? [ 720.983894][ T5932] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 720.995633][ T5932] usb 5-1: USB disconnect, device number 109 [ 721.016734][ C1] syz_tun: tun_net_xmit 54 [ 721.116817][ T5901] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 721.306580][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 721.316409][ T5901] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 721.326350][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.334544][ T5901] usb 4-1: Product: syz [ 721.340114][ T5901] usb 4-1: Manufacturer: syz [ 721.353123][ T5901] usb 4-1: SerialNumber: syz [ 721.366353][ T5901] usb 4-1: config 0 descriptor?? [ 721.384033][ T5901] gspca_main: se401-2.14.0 probing 047d:5003 [ 721.485850][ T796] r8152-cfgselector 3-1: USB disconnect, device number 111 [ 721.531590][T15396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 721.542245][T15396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2831'. [ 721.576582][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 721.590723][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 721.708941][ T10] usb 2-1: device descriptor read/64, error -71 [ 721.776324][T15406] fuse: Bad value for 'fd' [ 721.804507][T15404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (68719476720 ns) > initial count (1052832 ns). Using initial count to start timer. [ 721.869233][ T5901] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 721.926722][ C1] syz_tun: tun_net_xmit 54 [ 721.959939][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2837'. [ 721.989255][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 722.146931][ T10] usb 2-1: device descriptor read/64, error -71 [ 722.156566][ T5901] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 722.202682][ T5901] usb 4-1: USB disconnect, device number 120 [ 722.289488][ T10] usb usb2-port1: attempt power cycle [ 722.972588][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 723.011537][ T10] usb 2-1: device descriptor read/8, error -71 [ 723.387145][T15428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 723.656720][ T10] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 723.760530][ T10] usb 2-1: device descriptor read/8, error -71 [ 723.878314][T15438] netlink: 'syz.3.2845': attribute type 27 has an invalid length. [ 723.907048][ T10] usb usb2-port1: unable to enumerate USB device [ 724.256837][ T10] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 724.391359][T15451] netlink: 'syz.4.2849': attribute type 8 has an invalid length. [ 724.399856][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2849'. [ 724.419527][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 724.429332][ T10] usb 1-1: config 220 has an invalid descriptor of length 75, skipping remainder of the config [ 724.463427][ T10] usb 1-1: config 220 has no interface number 2 [ 724.475227][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 724.489217][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 724.496050][ T10] usb 1-1: config 220 interface 0 has no altsetting 1 [ 724.504174][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 724.512031][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 724.526156][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 724.536046][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.544388][ T10] usb 1-1: Product: syz [ 724.548987][ T10] usb 1-1: Manufacturer: syz [ 724.553601][ T10] usb 1-1: SerialNumber: syz [ 724.746585][ T796] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 724.892978][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.914073][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.919154][ T796] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 724.952367][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.986670][ T796] usb 2-1: Product: syz [ 724.990899][ T796] usb 2-1: Manufacturer: syz [ 724.995529][ T796] usb 2-1: SerialNumber: syz [ 725.008457][ T796] usb 2-1: config 0 descriptor?? [ 725.222824][ T796] usb-storage 2-1:0.0: USB Mass Storage device detected [ 725.446335][ T5901] usb 2-1: USB disconnect, device number 109 [ 725.830692][T15478] netlink: zone id is out of range [ 725.896571][ T5901] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 726.058758][ T5901] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 726.083688][ T5901] usb 3-1: config 8 has no interface number 0 [ 726.098974][ T5901] usb 3-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 726.123860][ T5901] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 726.152041][ T5901] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 726.189452][ T5901] usb 3-1: config 8 interface 177 has no altsetting 0 [ 726.196652][ T5901] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 726.213560][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.238656][T15472] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 726.339386][T15488] fuse: Bad value for 'fd' [ 726.577797][ T5901] usb 3-1: string descriptor 0 read error: -71 [ 726.612238][ T5901] ir_toy 3-1:8.177: required endpoints not found [ 726.647882][ T5901] usb 3-1: USB disconnect, device number 112 [ 727.040677][ T10] usb 1-1: selecting invalid altsetting 0 [ 727.047332][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 727.073510][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 727.153835][ T10] usb 1-1: selecting invalid altsetting 0 [ 727.179981][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 727.217001][ T10] usb 1-1: USB disconnect, device number 109 [ 727.314779][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 727.662785][T15512] trusted_key: encrypted_key: insufficient parameters specified [ 728.146597][ T5905] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 728.301686][ T5905] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 728.312343][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.366639][ T5905] usb 4-1: Product: syz [ 728.370843][ T5905] usb 4-1: Manufacturer: syz [ 728.385678][ T5905] usb 4-1: SerialNumber: syz [ 728.399616][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 728.411220][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 728.474757][ T5905] usb 4-1: config 0 descriptor?? [ 728.485356][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 728.524822][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 728.549305][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 728.646550][ T10] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 728.683585][ T5905] usb-storage 4-1:0.0: USB Mass Storage device detected [ 728.878720][ T10] usb 5-1: config 0 has no interfaces? [ 728.890889][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 728.900545][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.910305][ T10] usb 5-1: Product: syz [ 728.912951][ T5905] usb 4-1: USB disconnect, device number 121 [ 728.924935][ T10] usb 5-1: Manufacturer: syz [ 728.931649][ T10] usb 5-1: SerialNumber: syz [ 728.956228][ T10] usb 5-1: config 0 descriptor?? [ 729.218745][T11326] usb 5-1: USB disconnect, device number 110 [ 729.340840][T15525] chnl_net:caif_netlink_parms(): no params data found [ 730.054024][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2879'. [ 730.502314][T15551] netlink: 'syz.4.2882': attribute type 27 has an invalid length. [ 730.657725][T12203] Bluetooth: hci5: command tx timeout [ 730.762517][T15525] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.793322][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.810307][T15525] bridge_slave_0: entered allmulticast mode [ 730.839598][T15525] bridge_slave_0: entered promiscuous mode [ 730.949429][T15557] netlink: 'syz.1.2884': attribute type 27 has an invalid length. [ 730.960890][T15525] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.027066][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.046060][T15525] bridge_slave_1: entered allmulticast mode [ 731.073901][T15525] bridge_slave_1: entered promiscuous mode [ 731.179381][T15525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.197691][T15568] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2886'. [ 731.211641][T15568] SET target dimension over the limit! [ 731.239939][T15568] netdevsim netdevsim3: Direct firmware load for / [ 731.239939][T15568] failed with error -2 [ 731.277819][T15525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.287539][T15568] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 731.287539][T15568] [ 731.336074][T15525] team0: Port device team_slave_0 added [ 731.357256][ T5905] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 731.365514][T15525] team0: Port device team_slave_1 added [ 731.477652][T15525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.487673][ T5901] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 731.506805][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.578068][ T5905] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 731.589292][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.598118][ T5905] usb 3-1: Product: syz [ 731.603912][T15525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.615024][ T5905] usb 3-1: Manufacturer: syz [ 731.620398][ T5905] usb 3-1: SerialNumber: syz [ 731.639401][ T5905] usb 3-1: config 0 descriptor?? [ 731.647030][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 731.647050][ T128] hsr0: left allmulticast mode [ 731.652186][ T128] hsr_slave_0: left allmulticast mode [ 731.652205][ T128] hsr_slave_1: left allmulticast mode [ 731.652220][ T128] hsr0: left promiscuous mode [ 731.654173][ T128] bridge0: port 3(hsr0) entered disabled state [ 731.666403][ T5901] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.691103][ T5901] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 731.708638][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.748650][ T128] bridge_slave_1: left allmulticast mode [ 731.762311][ T128] bridge_slave_1: left promiscuous mode [ 731.791449][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.811877][ T128] bridge_slave_0: left promiscuous mode [ 731.822963][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.851351][ T5905] usb-storage 3-1:0.0: USB Mass Storage device detected [ 731.989113][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 732.148653][ T5905] usb 3-1: USB disconnect, device number 113 [ 732.169214][ T5901] mcp2221 0003:04D8:00DD.0028: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 732.473406][ T5905] usb 2-1: USB disconnect, device number 110 [ 732.726843][T12203] Bluetooth: hci5: command tx timeout [ 733.014351][ T128] bond0 (unregistering): left promiscuous mode [ 733.027559][ T128] bond_slave_0: left promiscuous mode [ 733.038240][ T128] bond_slave_1: left promiscuous mode [ 733.043821][ T128] veth0_to_hsr: left promiscuous mode [ 733.076840][ T5898] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 733.100629][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.121213][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.138707][ T128] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 733.152787][ T128] bond0 (unregistering): Released all slaves [ 733.169675][ T128] bond1 (unregistering): Released all slaves [ 733.184651][ T128] bond2 (unregistering): Released all slaves [ 733.197954][ T128] bond3 (unregistering): Released all slaves [ 733.211407][T15525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.218881][T15525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.226752][ T5898] usb 4-1: device descriptor read/64, error -71 [ 733.252066][T15525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.297338][T15605] vlan2: entered allmulticast mode [ 733.336609][ T5905] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 733.353018][ T128] tipc: Left network mode [ 733.400231][T15525] hsr_slave_0: entered promiscuous mode [ 733.418288][T15525] hsr_slave_1: entered promiscuous mode [ 733.424620][T15525] debugfs: 'hsr0' already exists in 'hsr' [ 733.432886][T15525] Cannot create hsr debugfs directory [ 733.439930][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 733.498188][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 733.504896][ T5905] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 733.532176][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.546878][ T5898] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 733.556365][ T5905] usb 2-1: config 0 descriptor?? [ 733.718573][ T5898] usb 4-1: device descriptor read/64, error -71 [ 733.726559][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 733.778221][ T5905] usb 2-1: string descriptor 0 read error: -71 [ 733.819929][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 733.837194][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 733.842543][ T5898] usb usb4-port1: attempt power cycle [ 733.871343][ T5905] usb 2-1: USB disconnect, device number 111 [ 733.895524][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 733.912293][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.951943][ T10] usb 3-1: Product: syz [ 733.956157][ T10] usb 3-1: Manufacturer: syz [ 733.973028][ T10] usb 3-1: SerialNumber: syz [ 733.980655][ T128] hsr_slave_0: left promiscuous mode [ 733.987563][ T10] usb 3-1: config 0 descriptor?? [ 734.000114][ T128] hsr_slave_1: left promiscuous mode [ 734.016411][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.033331][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.107647][ T128] team0 (unregistering): Port device batadv1 removed [ 734.201511][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 734.227955][ T5898] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 734.269279][ T5898] usb 4-1: device descriptor read/8, error -71 [ 734.625730][ T5905] usb 3-1: USB disconnect, device number 114 [ 734.723862][ T128] team0 (unregistering): Port device team_slave_1 removed [ 734.736716][ T5898] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 734.778933][ T5898] usb 4-1: device descriptor read/8, error -71 [ 734.791653][ T128] team0 (unregistering): Port device team_slave_0 removed [ 734.806544][T12203] Bluetooth: hci5: command tx timeout [ 734.896981][ T5898] usb usb4-port1: unable to enumerate USB device [ 735.192057][ T5905] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 735.376579][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 735.383742][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.396355][ T5905] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 735.425796][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.454470][ T5905] usb 2-1: Product: syz [ 735.464839][ T5905] usb 2-1: Manufacturer: syz [ 735.474683][ T5905] usb 2-1: SerialNumber: syz [ 735.487867][ T5905] usb 2-1: config 0 descriptor?? [ 735.523228][ T5905] xr_serial 2-1:0.0: failed to claim sibling interface: -16 [ 735.547814][ T5905] xr_serial 2-1:0.0: probe with driver xr_serial failed with error -16 [ 735.752155][ T5901] usb 2-1: USB disconnect, device number 112 [ 735.849361][T15673] vlan2: entered allmulticast mode [ 735.889782][ T128] IPVS: stop unused estimator thread 0... [ 735.957270][T15525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 735.980281][T15525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.021208][T15525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 736.054041][T15683] SET target dimension over the limit! [ 736.065697][T15525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 736.121969][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2916'. [ 736.175811][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 736.214702][T15683] netdevsim netdevsim4: Direct firmware load for / [ 736.214702][T15683] failed with error -2 [ 736.233669][T15683] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 736.233669][T15683] [ 736.460593][T15702] loop8: detected capacity change from 0 to 8 [ 736.536681][T15700] netlink: 'syz.1.2919': attribute type 27 has an invalid length. [ 736.557558][T15702] Dev loop8: unable to read RDB block 8 [ 736.563571][T15702] loop8: unable to read partition table [ 736.573396][T15702] loop8: partition table beyond EOD, truncated [ 736.585791][T15702] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 736.856533][ T796] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 736.888052][T15525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.896811][T12203] Bluetooth: hci5: command tx timeout [ 737.002384][T15525] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.027045][ T796] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 737.043944][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.065627][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.072787][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.081592][ T796] usb 4-1: Product: syz [ 737.085769][ T796] usb 4-1: Manufacturer: syz [ 737.091806][ T796] usb 4-1: SerialNumber: syz [ 737.100681][ T796] usb 4-1: config 0 descriptor?? [ 737.114983][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.122225][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.131973][T15720] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2922'. [ 737.157807][T15720] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 737.318136][ T796] usb-storage 4-1:0.0: USB Mass Storage device detected [ 737.363337][T15525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.481482][T15729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.503202][T15525] veth0_vlan: entered promiscuous mode [ 737.517373][T15737] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2924'. [ 737.524635][ T796] usb 4-1: USB disconnect, device number 126 [ 737.537654][T15729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.613891][T15525] veth1_vlan: entered promiscuous mode [ 737.726968][T15712] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 737.744844][T15525] veth0_macvtap: entered promiscuous mode [ 737.782061][T15525] veth1_macvtap: entered promiscuous mode [ 737.815695][T15525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.839046][T15525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.866296][ T1315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.888636][ T1315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.897646][ T1315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.909244][T15712] usb 5-1: Using ep0 maxpacket: 8 [ 737.934641][T15712] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 737.947666][ T1315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.989974][T15712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 738.041546][T15712] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 738.070248][T15712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.088645][T15712] usb 5-1: Product: syz [ 738.093234][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.103919][T15712] usb 5-1: Manufacturer: syz [ 738.122591][T15712] usb 5-1: SerialNumber: syz [ 738.125877][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.155913][T15712] usb 5-1: config 0 descriptor?? [ 738.239589][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.267358][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.337569][T15712] rc_core: IR keymap rc-streamzap not found [ 738.344242][T15712] Registered IR keymap rc-empty [ 738.466840][T15763] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 738.532266][T15712] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 738.603962][T15712] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 738.801258][T15712] usb 5-1: USB disconnect, device number 111 [ 738.832714][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2930'. [ 738.964086][T15778] loop8: detected capacity change from 0 to 8 [ 739.011578][T15778] Dev loop8: unable to read RDB block 8 [ 739.044202][T15778] loop8: unable to read partition table [ 739.151090][T15778] loop8: partition table beyond EOD, truncated [ 739.191774][T15778] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 739.597962][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 739.718387][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 739.726880][T15713] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 739.740929][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 739.749408][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 739.760849][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 739.769346][ T10] usb 3-1: device descriptor read/64, error -71 [ 739.777775][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 739.886609][T15712] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 739.900988][T15713] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 739.926681][T15713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.934729][T15713] usb 1-1: Product: syz [ 739.942749][T15713] usb 1-1: Manufacturer: syz [ 739.950356][T15713] usb 1-1: SerialNumber: syz [ 739.969821][T15713] usb 1-1: config 0 descriptor?? [ 740.009516][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 740.046655][T15712] usb 2-1: Using ep0 maxpacket: 8 [ 740.056830][T15712] usb 2-1: config 0 interface 0 has no altsetting 0 [ 740.066549][T15712] usb 2-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 740.075642][T15712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.119264][T15712] usb 2-1: config 0 descriptor?? [ 740.167363][ T10] usb 3-1: device descriptor read/64, error -71 [ 740.180714][T15713] usb-storage 1-1:0.0: USB Mass Storage device detected [ 740.191991][T15810] vlan2: entered allmulticast mode [ 740.222855][T13982] syz_tun (unregistering): left allmulticast mode [ 740.231273][T13982] bond1: (slave syz_tun): Releasing active interface [ 740.290263][ T10] usb usb3-port1: attempt power cycle [ 740.396426][ T5898] usb 1-1: USB disconnect, device number 110 [ 740.482998][T15797] chnl_net:caif_netlink_parms(): no params data found [ 740.544377][T15712] gyration 0003:0C16:0003.0029: hidraw0: USB HID vd.60 Device [HID 0c16:0003] on usb-dummy_hcd.1-1/input0 [ 740.646725][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 740.699146][ T10] usb 3-1: device descriptor read/8, error -71 [ 740.735905][ T5898] usb 2-1: USB disconnect, device number 113 [ 740.866154][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.874912][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.885035][T15797] bridge_slave_0: entered allmulticast mode [ 740.898219][T15797] bridge_slave_0: entered promiscuous mode [ 740.939261][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 740.948407][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.955557][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.967282][ T10] usb 3-1: device descriptor read/8, error -71 [ 740.981956][T15797] bridge_slave_1: entered allmulticast mode [ 740.997569][T15797] bridge_slave_1: entered promiscuous mode [ 741.013996][T15842] loop8: detected capacity change from 0 to 8 [ 741.020397][T15712] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 741.050466][ T7846] Dev loop8: unable to read RDB block 8 [ 741.070070][ T7846] loop8: unable to read partition table [ 741.075992][ T7846] loop8: partition table beyond EOD, truncated [ 741.083009][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.093126][ T10] usb usb3-port1: unable to enumerate USB device [ 741.109806][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.120180][T15842] Dev loop8: unable to read RDB block 8 [ 741.137064][T15842] loop8: unable to read partition table [ 741.142979][T15842] loop8: partition table beyond EOD, truncated [ 741.170508][T15842] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 741.227252][T15712] usb 4-1: config 0 has no interfaces? [ 741.244770][T15712] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 741.260619][T15797] team0: Port device team_slave_0 added [ 741.266252][T15712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.274537][T15712] usb 4-1: Product: syz [ 741.296696][T15712] usb 4-1: Manufacturer: syz [ 741.301352][T15712] usb 4-1: SerialNumber: syz [ 741.323694][T15712] usb 4-1: config 0 descriptor?? [ 741.394883][T15797] team0: Port device team_slave_1 added [ 741.430917][T15851] loop8: detected capacity change from 0 to 8 [ 741.444772][ T7846] Dev loop8: unable to read RDB block 8 [ 741.454637][ T7846] loop8: unable to read partition table [ 741.465884][ T7846] loop8: partition table beyond EOD, truncated [ 741.473741][T15851] Dev loop8: unable to read RDB block 8 [ 741.480436][T15851] loop8: unable to read partition table [ 741.486345][T15851] loop8: partition table beyond EOD, truncated [ 741.492785][T15851] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 741.513539][ T1322] bridge_slave_1: left allmulticast mode [ 741.537316][ T1322] bridge_slave_1: left promiscuous mode [ 741.557117][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.633233][ T1322] bridge_slave_0: left promiscuous mode [ 741.648561][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.668238][T15860] loop8: detected capacity change from 0 to 8 [ 741.681897][ T7846] Dev loop8: unable to read RDB block 8 [ 741.697391][ T7846] loop8: unable to read partition table [ 741.725002][ T7846] loop8: partition table beyond EOD, truncated [ 741.740644][T15860] Dev loop8: unable to read RDB block 8 [ 741.746252][T15860] loop8: unable to read partition table [ 741.777505][T15860] loop8: partition table beyond EOD, truncated [ 741.789983][T15860] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 741.850706][T12203] Bluetooth: hci3: command tx timeout [ 742.131183][T15877] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2950'. [ 742.183274][ T1322] gretap0 (unregistering): left promiscuous mode [ 742.450742][ T1322] bond0 (unregistering): left promiscuous mode [ 742.462180][ T1322] bond_slave_0: left promiscuous mode [ 742.468095][ T1322] bond_slave_1: left promiscuous mode [ 742.474584][ T1322] veth0_to_hsr: left promiscuous mode [ 742.509021][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.524555][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.542357][ T1322] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 742.558397][ T1322] bond0 (unregistering): Released all slaves [ 742.575684][ T1322] bond1 (unregistering): Released all slaves [ 742.597610][ T1322] bond2 (unregistering): Released all slaves [ 742.674052][T15711] usb 4-1: USB disconnect, device number 127 [ 742.677381][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.841408][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.869244][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.902070][T15713] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 742.915971][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.923816][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.952056][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.973674][T15879] vlan3: entered allmulticast mode [ 743.006556][ T1322] tipc: Left network mode [ 743.067785][T15886] loop2: detected capacity change from 0 to 7 [ 743.081368][ T7846] loop2: [ 743.084385][ T7846] loop2: partition table partially beyond EOD, truncated [ 743.085680][T15713] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 743.119373][T15713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.122060][T15886] loop2: [ 743.133663][T15713] usb 3-1: Product: syz [ 743.144565][T15886] loop2: partition table partially beyond EOD, truncated [ 743.151711][T15713] usb 3-1: Manufacturer: syz [ 743.151733][T15713] usb 3-1: SerialNumber: syz [ 743.154684][T15713] usb 3-1: config 0 descriptor?? [ 743.228437][T15797] hsr_slave_0: entered promiscuous mode [ 743.254730][T15797] hsr_slave_1: entered promiscuous mode [ 743.302180][T15797] debugfs: 'hsr0' already exists in 'hsr' [ 743.320324][T15797] Cannot create hsr debugfs directory [ 743.383783][T15894] loop8: detected capacity change from 0 to 8 [ 743.388315][T15898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2958'. [ 743.404277][T15713] usb-storage 3-1:0.0: USB Mass Storage device detected [ 743.443302][T15894] Dev loop8: unable to read RDB block 8 [ 743.463616][T15894] loop8: unable to read partition table [ 743.495604][T15894] loop8: partition table beyond EOD, truncated [ 743.544523][T15894] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 743.619530][T15713] usb 3-1: USB disconnect, device number 119 [ 743.927566][T12203] Bluetooth: hci3: command tx timeout [ 744.099384][ T1322] hsr_slave_0: left promiscuous mode [ 744.108147][ T1322] hsr_slave_1: left promiscuous mode [ 744.119300][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.166043][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.212493][T15928] netlink: 'syz.3.2965': attribute type 27 has an invalid length. [ 744.391570][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2967'. [ 744.412132][T15929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2967'. [ 744.481257][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 744.495916][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 744.638663][T15928] ipip0: left promiscuous mode [ 744.643654][T15928] ipip0: left allmulticast mode [ 744.659293][T15929] bridge0: entered promiscuous mode [ 744.665827][T15929] syz_tun: entered promiscuous mode [ 744.693518][T15938] vlan3: entered allmulticast mode [ 745.192871][T15954] loop8: detected capacity change from 0 to 8 [ 745.211264][ T7846] Dev loop8: unable to read RDB block 8 [ 745.223622][ T7846] loop8: unable to read partition table [ 745.236726][ T7846] loop8: partition table beyond EOD, truncated [ 745.341521][T15954] Dev loop8: unable to read RDB block 8 [ 745.358482][T15954] loop8: unable to read partition table [ 745.387557][T15954] loop8: partition table beyond EOD, truncated [ 745.393778][T15954] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 745.433194][T15957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2975'. [ 745.485217][ T1322] IPVS: stop unused estimator thread 0... [ 745.535497][T15959] FAULT_INJECTION: forcing a failure. [ 745.535497][T15959] name failslab, interval 1, probability 0, space 0, times 0 [ 745.563390][T15959] CPU: 0 UID: 0 PID: 15959 Comm: syz.2.2976 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.563421][T15959] Tainted: [L]=SOFTLOCKUP [ 745.563429][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.563440][T15959] Call Trace: [ 745.563447][T15959] [ 745.563456][T15959] dump_stack_lvl+0xe8/0x150 [ 745.563486][T15959] should_fail_ex+0x412/0x560 [ 745.563512][T15959] should_failslab+0xa8/0x100 [ 745.563533][T15959] __kmalloc_noprof+0xe8/0x760 [ 745.563551][T15959] ? tomoyo_encode+0x28b/0x550 [ 745.563577][T15959] tomoyo_encode+0x28b/0x550 [ 745.563603][T15959] tomoyo_realpath_from_path+0x58d/0x5d0 [ 745.563634][T15959] ? tomoyo_path_number_perm+0x219/0x630 [ 745.563653][T15959] tomoyo_path_number_perm+0x246/0x630 [ 745.563675][T15959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 745.563695][T15959] ? __lock_acquire+0x6b5/0x2cf0 [ 745.563726][T15959] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 745.563764][T15959] ? __fget_files+0x2a/0x420 [ 745.563790][T15959] ? __fget_files+0x2a/0x420 [ 745.563812][T15959] ? __fget_files+0x3a0/0x420 [ 745.563832][T15959] ? __fget_files+0x2a/0x420 [ 745.563858][T15959] security_file_ioctl+0xc3/0x2a0 [ 745.563888][T15959] __se_sys_ioctl+0x47/0x170 [ 745.563911][T15959] do_syscall_64+0x14d/0xf80 [ 745.563936][T15959] ? trace_irq_disable+0x3b/0x150 [ 745.563961][T15959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.563979][T15959] ? clear_bhb_loop+0x40/0x90 [ 745.564032][T15959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.564050][T15959] RIP: 0033:0x7fd7b7b9c799 [ 745.564068][T15959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.564083][T15959] RSP: 002b:00007fd7b89b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.564102][T15959] RAX: ffffffffffffffda RBX: 00007fd7b7e15fa0 RCX: 00007fd7b7b9c799 [ 745.564115][T15959] RDX: 0000200000003f80 RSI: 0000000080044dff RDI: 0000000000000004 [ 745.564127][T15959] RBP: 00007fd7b89b9090 R08: 0000000000000000 R09: 0000000000000000 [ 745.564138][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.564149][T15959] R13: 00007fd7b7e16038 R14: 00007fd7b7e15fa0 R15: 00007fd7b7f3fa48 [ 745.564178][T15959] [ 745.564199][T15959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 745.914721][T15977] loop8: detected capacity change from 0 to 8 [ 745.966160][T15977] Dev loop8: unable to read RDB block 8 [ 745.974517][T15977] loop8: unable to read partition table [ 745.997254][T15977] loop8: partition table beyond EOD, truncated [ 746.003495][T15977] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 746.013138][T12203] Bluetooth: hci3: command tx timeout [ 746.018705][T15713] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 746.056848][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 746.181209][T15713] usb 3-1: Using ep0 maxpacket: 8 [ 746.203343][T15713] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 746.236994][T15713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.237804][T15988] loop8: detected capacity change from 0 to 8 [ 746.245106][T15713] usb 3-1: Product: syz [ 746.245126][T15713] usb 3-1: Manufacturer: syz [ 746.280743][T15988] Dev loop8: unable to read RDB block 8 [ 746.287297][T15988] loop8: unable to read partition table [ 746.293582][T15988] loop8: partition table beyond EOD, truncated [ 746.316296][T15713] usb 3-1: SerialNumber: syz [ 746.316719][T15988] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 746.412815][T15713] usb 3-1: config 0 descriptor?? [ 746.596636][T15797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.641040][T15713] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 746.651702][T15713] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 746.667634][T15797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 746.681182][T15713] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 746.689468][T15713] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 746.715813][T15797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 746.730200][T15797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 746.778637][T16002] netlink: 212228 bytes leftover after parsing attributes in process `syz.1.2986'. [ 746.781403][T15713] usb 3-1: USB disconnect, device number 120 [ 747.063561][T15797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.130988][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.139129][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.368898][T15797] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.426358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.433569][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.507109][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.514293][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.911791][T15797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.026390][T15797] veth0_vlan: entered promiscuous mode [ 748.086556][T12203] Bluetooth: hci3: command tx timeout [ 748.118860][T15797] veth1_vlan: entered promiscuous mode [ 748.346776][T15797] veth0_macvtap: entered promiscuous mode [ 748.381163][T15797] veth1_macvtap: entered promiscuous mode [ 748.584356][T15797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.601259][T15797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.616610][T15713] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 748.773166][ T1315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.793002][T15713] usb 4-1: Using ep0 maxpacket: 16 [ 748.809452][T15713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 748.842208][ T1315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.856564][T15713] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 748.944613][ T1315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.965060][T15713] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 748.994842][ T1315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.005191][T15713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.040229][T15713] usb 4-1: Product: syz [ 749.044430][T15713] usb 4-1: Manufacturer: syz [ 749.104641][T15713] usb 4-1: SerialNumber: syz [ 749.109438][T15711] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 749.190041][ T10] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 749.287280][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.310492][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.342858][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.362986][T15713] usb 4-1: 0:2 : does not exist [ 749.382663][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.389050][T15713] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 749.396613][ T10] usb 1-1: config 0 has no interfaces? [ 749.419974][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 749.422576][T15713] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 749.456207][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.478828][T15713] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 749.489057][ T10] usb 1-1: Product: syz [ 749.515289][ T10] usb 1-1: Manufacturer: syz [ 749.537058][ T10] usb 1-1: SerialNumber: syz [ 749.559686][ T10] usb 1-1: config 0 descriptor?? [ 749.644152][T15713] usb 4-1: USB disconnect, device number 3 [ 749.743191][ T7846] udevd[7846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.917285][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 749.950275][ T5898] usb 1-1: USB disconnect, device number 111 [ 750.097604][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 750.127939][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3001'. [ 750.146879][T16076] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3001'. [ 750.209538][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 750.229014][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.252477][ T10] usb 5-1: Product: syz [ 750.326358][ T10] usb 5-1: Manufacturer: syz [ 750.334421][ T10] usb 5-1: SerialNumber: syz [ 750.350370][ T10] usb 5-1: config 0 descriptor?? [ 750.444619][T16079] trusted_key: encrypted_key: insufficient parameters specified [ 750.611718][ T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 750.634531][ T10] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 750.729425][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 750.748738][ T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 750.769669][ T10] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 750.804450][ T10] usb 5-1: USB disconnect, device number 112 [ 750.969067][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 750.980570][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 750.991175][ T5898] usb 4-1: config 255 has an invalid interface number: 193 but max is 1 [ 751.000047][ T5898] usb 4-1: config 255 has no interface number 1 [ 751.008013][ T5898] usb 4-1: config 255 interface 0 has no altsetting 0 [ 751.016031][ T5898] usb 4-1: config 255 interface 193 has no altsetting 0 [ 751.031160][T16095] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3004'. [ 751.044758][T16095] Cannot find add_set index 0 as target [ 751.065461][ T5898] usb 4-1: New USB device found, idVendor=1199, idProduct=68a9, bcdDevice=9d.4a [ 751.085503][T16095] netdevsim netdevsim0: Direct firmware load for / [ 751.085503][T16095] failed with error -2 [ 751.097078][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.097413][T16095] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 751.097413][T16095] [ 751.117157][ T5898] usb 4-1: Product: syz [ 751.121341][ T5898] usb 4-1: Manufacturer: syz [ 751.296345][ T5898] usb 4-1: SerialNumber: syz [ 751.317619][T16097] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 751.552011][T16085] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3002'. [ 751.635631][ T5898] usb 4-1: bad CDC descriptors [ 751.676538][ T5884] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 751.721583][ T5898] usb 4-1: USB disconnect, device number 4 [ 751.836526][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 752.043280][ T5884] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 752.071832][ T5884] usb 5-1: config 0 has no interface number 0 [ 752.107493][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 752.135106][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.153427][ T5884] usb 5-1: Product: syz [ 752.245531][ T5884] usb 5-1: Manufacturer: syz [ 752.676614][ T5884] usb 5-1: SerialNumber: syz [ 752.850101][ T5884] usb 5-1: config 0 descriptor?? [ 752.974217][ T5884] gspca_main: spca500-2.14.0 probing 046d:0900 [ 753.207148][ T5884] gspca_spca500: reg write: error -71 [ 753.214248][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3008'. [ 753.332327][ T5884] gspca_spca500: reg write: error -71 [ 753.384096][ T5884] gspca_spca500: reg write: error -71 [ 753.409013][ T5884] gspca_spca500: reg write: error -71 [ 753.422934][T16119] vlan2: entered allmulticast mode [ 753.451586][ T5884] gspca_spca500: reg write: error -71 [ 753.477935][ T5884] gspca_spca500: reg write: error -71 [ 753.484824][ T5884] gspca_spca500: reg write: error -71 [ 753.508561][ T5884] gspca_spca500: reg write: error -71 [ 753.575320][ T5884] gspca_spca500: reg write: error -71 [ 753.603453][ T5884] gspca_spca500: reg write: error -71 [ 753.736771][ T5884] gspca_spca500: reg write: error -71 [ 753.757221][ T5884] gspca_spca500: reg write: error -71 [ 753.779113][ T5884] gspca_spca500: reg write: error -71 [ 753.796814][ T5884] gspca_spca500: reg write: error -71 [ 753.912600][ T5884] usb 5-1: USB disconnect, device number 113 [ 754.276654][ T5884] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 754.456640][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 754.474574][ T5884] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.498296][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 754.516850][ T5884] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 754.541131][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.572860][ T5884] usb 5-1: config 0 descriptor?? [ 755.075140][ T5884] ortek 0003:05A4:8003.002A: unknown main item tag 0x5 [ 755.173380][ T5884] ortek 0003:05A4:8003.002A: unknown main item tag 0x7 [ 755.217444][ T5884] ortek 0003:05A4:8003.002A: global environment stack underflow [ 755.286598][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.299198][ T5884] ortek 0003:05A4:8003.002A: item 0 0 1 11 parsing failed [ 755.311935][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.360816][ T5884] ortek 0003:05A4:8003.002A: probe with driver ortek failed with error -22 [ 755.494723][T16175] loop8: detected capacity change from 0 to 8 [ 755.547468][T16175] Dev loop8: unable to read RDB block 8 [ 755.553053][T16175] loop8: unable to read partition table [ 755.636712][T16175] loop8: partition table beyond EOD, truncated [ 755.666602][T16175] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 755.831765][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 756.357255][ T796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 756.542454][ T796] usb 4-1: device descriptor read/64, error -71 [ 756.936745][ T796] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 757.125768][ T796] usb 4-1: device descriptor read/64, error -71 [ 757.296840][ T796] usb usb4-port1: attempt power cycle [ 757.497328][ T5898] usb 5-1: USB disconnect, device number 114 [ 757.667037][ T796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 757.687487][ T796] usb 4-1: device descriptor read/8, error -71 [ 757.715855][T16199] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 757.976551][ T796] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 758.036287][ T796] usb 4-1: device descriptor read/8, error -71 [ 758.117870][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'. [ 758.183181][T16206] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 758.191938][ T796] usb usb4-port1: unable to enumerate USB device [ 758.217140][T16205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3025'. [ 758.361668][T16206] kAFS: unable to lookup cell 'ÿ' [ 758.392185][T16208] kAFS: unable to lookup cell '(,c¾Ì' [ 758.611188][T16212] fuse: Bad value for 'fd' [ 758.630038][T16212] ipip0: entered promiscuous mode [ 758.635102][T16212] ipip0: entered allmulticast mode [ 759.186059][T16218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3027'. [ 759.409751][T16221] loop8: detected capacity change from 0 to 8 [ 759.427876][T16221] Dev loop8: unable to read RDB block 8 [ 759.457990][T16221] loop8: unable to read partition table [ 759.534467][T16221] loop8: partition table beyond EOD, truncated [ 759.558730][T16221] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 759.945308][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3031'. [ 760.330196][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 760.607026][ T5905] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 760.889506][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 760.917062][ T5905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 760.936770][ T5905] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 760.987901][ T5898] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 761.015456][ T5905] usb 1-1: config 7 has no interface number 0 [ 761.060194][ T5905] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 761.103312][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.179284][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 761.227686][ T5898] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 761.246209][ T5898] usb 4-1: config 0 has no interface number 0 [ 761.246228][ T5905] usb 1-1: Product: syz [ 761.246245][ T5905] usb 1-1: Manufacturer: syz [ 761.303057][ T5905] usb 1-1: SerialNumber: syz [ 761.388766][ T5898] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 761.430292][ T5898] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 761.464140][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.490429][ T5898] usb 4-1: Product: syz [ 761.499548][ T5898] usb 4-1: Manufacturer: syz [ 761.505860][ T5898] usb 4-1: SerialNumber: syz [ 761.516943][ T5898] usb 4-1: config 0 descriptor?? [ 761.740354][ T5898] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 761.766179][T16237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.816516][ T5898] em28xx 4-1:0.132: Video interface 132 found: [ 761.829232][T16237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.115499][ T5898] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 762.857580][T16269] loop5: detected capacity change from 0 to 7 [ 762.871549][T16269] Dev loop5: unable to read RDB block 7 [ 762.877242][T16269] loop5: AHDI p1 p2 p3 [ 762.881444][T16269] loop5: partition table partially beyond EOD, truncated [ 762.947224][T16269] loop5: p1 start 1601398130 is beyond EOD, truncated [ 762.964417][T16269] loop5: p2 start 1702059890 is beyond EOD, truncated [ 763.286849][ T5898] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 763.310404][ T5898] em28xx 4-1:0.132: board has no eeprom [ 763.396602][ T5898] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 763.414734][ T5898] em28xx 4-1:0.132: analog set to bulk mode. [ 763.441184][ T5884] em28xx 4-1:0.132: Registering V4L2 extension [ 763.570733][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 763.666637][ T5898] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 763.717535][T16285] fuse: Bad value for 'fd' [ 763.761919][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 763.817327][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 763.880959][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 763.962926][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.974048][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.005547][ T5905] usb 1-1: USB disconnect, device number 112 [ 764.039641][ T5898] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 764.121824][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3047'. [ 764.216919][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.251974][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 764.276200][ T5898] usb 2-1: config 0 descriptor?? [ 764.305700][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 764.331276][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 764.401432][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 764.669842][ T5898] usb 2-1: string descriptor 0 read error: -71 [ 764.727067][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input60 [ 764.751610][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 764.766025][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 764.786109][ T5178] bcm5974 2-1:0.0: could not read from device [ 764.800605][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 764.800948][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 764.801250][ T5884] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 764.804835][ T5884] em28xx 4-1:0.132: Config register raw data: 0xfffffffb [ 764.814291][ T5884] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 764.814311][ T5884] em28xx 4-1:0.132: No AC97 audio processor [ 764.848261][ T5884] usb 4-1: Decoder not found [ 764.939278][ T5884] em28xx 4-1:0.132: failed to create media graph [ 764.976065][ T5178] bcm5974 2-1:0.0: could not read from device [ 765.147941][ T5884] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 765.172142][ T5898] usb 2-1: USB disconnect, device number 114 [ 765.192813][T16296] ================================================================== [ 765.193932][ T5884] em28xx 4-1:0.132: Remote control support is not available for this card. [ 765.200889][T16296] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 765.200915][T16296] Read of size 8 at addr ffff8880212dc748 by task v4l_id/16296 [ 765.200930][T16296] [ 765.200944][T16296] CPU: 1 UID: 0 PID: 16296 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 765.200967][T16296] Tainted: [L]=SOFTLOCKUP [ 765.200973][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.200983][T16296] Call Trace: [ 765.200990][T16296] [ 765.200998][T16296] dump_stack_lvl+0xe8/0x150 [ 765.201025][T16296] print_report+0xba/0x230 [ 765.201047][T16296] ? v4l2_fh_open+0xac/0x420 [ 765.201063][T16296] kasan_report+0x117/0x150 [ 765.201084][T16296] ? v4l2_fh_open+0xac/0x420 [ 765.201105][T16296] v4l2_fh_open+0xac/0x420 [ 765.201123][T16296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 765.201143][T16296] em28xx_v4l2_open+0x157/0x9a0 [ 765.201166][T16296] ? do_raw_spin_lock+0x12b/0x2f0 [ 765.201187][T16296] v4l2_open+0x1bf/0x3a0 [ 765.201208][T16296] chrdev_open+0x4cd/0x5e0 [ 765.201230][T16296] ? __pfx_chrdev_open+0x10/0x10 [ 765.201249][T16296] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 765.201278][T16296] ? __pfx_chrdev_open+0x10/0x10 [ 765.201297][T16296] do_dentry_open+0x785/0x14e0 [ 765.201325][T16296] vfs_open+0x3b/0x340 [ 765.201346][T16296] ? path_openat+0x2df0/0x3860 [ 765.201371][T16296] path_openat+0x2e08/0x3860 [ 765.201394][T16296] ? __pfx_stack_trace_save+0x10/0x10 [ 765.201413][T16296] ? stack_depot_save_flags+0x33/0x810 [ 765.201439][T16296] ? __pfx_path_openat+0x10/0x10 [ 765.201455][T16296] ? __x64_sys_openat+0x138/0x170 [ 765.201476][T16296] ? do_syscall_64+0x14d/0xf80 [ 765.201500][T16296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.201522][T16296] ? __lock_acquire+0x6b5/0x2cf0 [ 765.201547][T16296] do_file_open+0x23e/0x4a0 [ 765.201566][T16296] ? __pfx_do_file_open+0x10/0x10 [ 765.201592][T16296] ? _raw_spin_unlock+0x28/0x50 [ 765.201613][T16296] ? alloc_fd+0x64b/0x6c0 [ 765.201639][T16296] do_sys_openat2+0x113/0x200 [ 765.201663][T16296] ? __pfx_do_sys_openat2+0x10/0x10 [ 765.201687][T16296] ? exc_page_fault+0x6a/0xc0 [ 765.201713][T16296] ? do_user_addr_fault+0xc6f/0x1340 [ 765.201736][T16296] __x64_sys_openat+0x138/0x170 [ 765.201762][T16296] do_syscall_64+0x14d/0xf80 [ 765.201786][T16296] ? trace_irq_disable+0x3b/0x150 [ 765.201810][T16296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.201828][T16296] ? clear_bhb_loop+0x40/0x90 [ 765.201848][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.201866][T16296] RIP: 0033:0x7fbbef8a7407 [ 765.201883][T16296] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 765.201899][T16296] RSP: 002b:00007fff04596eb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 765.201919][T16296] RAX: ffffffffffffffda RBX: 00007fbbf0081880 RCX: 00007fbbef8a7407 [ 765.201934][T16296] RDX: 0000000000000000 RSI: 00007fff04597f1b RDI: ffffffffffffff9c [ 765.201947][T16296] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 765.201960][T16296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 765.201971][T16296] R13: 00007fff04597100 R14: 00007fbbf01e8000 R15: 0000562b847b34d8 [ 765.201992][T16296] [ 765.201999][T16296] [ 765.526102][T16296] Allocated by task 5884: [ 765.530403][T16296] kasan_save_track+0x3e/0x80 [ 765.535072][T16296] __kasan_kmalloc+0x93/0xb0 [ 765.539638][T16296] __kmalloc_cache_noprof+0x31c/0x660 [ 765.544985][T16296] em28xx_v4l2_init+0x10b/0x2e70 [ 765.549906][T16296] em28xx_init_extension+0x120/0x1c0 [ 765.555173][T16296] process_scheduled_works+0xb02/0x1830 [ 765.560709][T16296] worker_thread+0xa50/0xfc0 [ 765.565296][T16296] kthread+0x388/0x470 [ 765.569339][T16296] ret_from_fork+0x51e/0xb90 [ 765.573906][T16296] ret_from_fork_asm+0x1a/0x30 [ 765.578653][T16296] [ 765.580962][T16296] Freed by task 5884: [ 765.584926][T16296] kasan_save_track+0x3e/0x80 [ 765.589583][T16296] kasan_save_free_info+0x46/0x50 [ 765.594586][T16296] __kasan_slab_free+0x5c/0x80 [ 765.599323][T16296] kfree+0x1c1/0x630 [ 765.603193][T16296] em28xx_v4l2_init+0x1683/0x2e70 [ 765.608193][T16296] em28xx_init_extension+0x120/0x1c0 [ 765.613456][T16296] process_scheduled_works+0xb02/0x1830 [ 765.618975][T16296] worker_thread+0xa50/0xfc0 [ 765.623544][T16296] kthread+0x388/0x470 [ 765.627586][T16296] ret_from_fork+0x51e/0xb90 [ 765.632166][T16296] ret_from_fork_asm+0x1a/0x30 [ 765.636962][T16296] [ 765.639262][T16296] The buggy address belongs to the object at ffff8880212dc000 [ 765.639262][T16296] which belongs to the cache kmalloc-8k of size 8192 [ 765.653291][T16296] The buggy address is located 1864 bytes inside of [ 765.653291][T16296] freed 8192-byte region [ffff8880212dc000, ffff8880212de000) [ 765.667238][T16296] [ 765.669547][T16296] The buggy address belongs to the physical page: [ 765.676047][T16296] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x212d8 [ 765.684795][T16296] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 765.693544][T16296] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 765.701077][T16296] page_type: f5(slab) [ 765.705039][T16296] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 765.713687][T16296] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 765.722345][T16296] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 765.730999][T16296] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 765.739645][T16296] head: 00fff00000000003 ffffea000084b601 00000000ffffffff 00000000ffffffff [ 765.748298][T16296] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 765.756952][T16296] page dumped because: kasan: bad access detected [ 765.763355][T16296] page_owner tracks the page as allocated [ 765.769048][T16296] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5485, tgid 5485 (start-stop-daem), ts 40648364666, free_ts 40648258263 [ 765.789865][T16296] post_alloc_hook+0x231/0x280 [ 765.794616][T16296] get_page_from_freelist+0x24dc/0x2580 [ 765.800141][T16296] __alloc_frozen_pages_noprof+0x18d/0x380 [ 765.805926][T16296] allocate_slab+0x77/0x660 [ 765.810407][T16296] refill_objects+0x331/0x3c0 [ 765.815068][T16296] __pcs_replace_empty_main+0x2b9/0x620 [ 765.820599][T16296] __kmalloc_cache_noprof+0x392/0x660 [ 765.825947][T16296] tomoyo_init_log+0x112e/0x1fb0 [ 765.830862][T16296] tomoyo_supervisor+0x353/0x1570 [ 765.835868][T16296] tomoyo_env_perm+0x151/0x1f0 [ 765.840614][T16296] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 765.846226][T16296] tomoyo_bprm_check_security+0x11b/0x180 [ 765.851930][T16296] security_bprm_check+0x85/0x240 [ 765.856939][T16296] bprm_execve+0x896/0x1460 [ 765.861419][T16296] do_execveat_common+0x50d/0x690 [ 765.866423][T16296] __x64_sys_execve+0x97/0xc0 [ 765.871086][T16296] page last free pid 5485 tgid 5485 stack trace: [ 765.877391][T16296] __free_frozen_pages+0xc2b/0xdb0 [ 765.882502][T16296] __slab_free+0x263/0x2b0 [ 765.886902][T16296] qlist_free_all+0x97/0x100 [ 765.891475][T16296] kasan_quarantine_reduce+0x148/0x160 [ 765.896915][T16296] __kasan_slab_alloc+0x22/0x80 [ 765.901746][T16296] __kmalloc_noprof+0x316/0x760 [ 765.906577][T16296] tomoyo_supervisor+0xc22/0x1570 [ 765.911599][T16296] tomoyo_env_perm+0x151/0x1f0 [ 765.916381][T16296] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 765.921996][T16296] tomoyo_bprm_check_security+0x11b/0x180 [ 765.927696][T16296] security_bprm_check+0x85/0x240 [ 765.932734][T16296] bprm_execve+0x896/0x1460 [ 765.937217][T16296] do_execveat_common+0x50d/0x690 [ 765.942218][T16296] __x64_sys_execve+0x97/0xc0 [ 765.946867][T16296] do_syscall_64+0x14d/0xf80 [ 765.951438][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.957309][T16296] [ 765.959624][T16296] Memory state around the buggy address: [ 765.965228][T16296] ffff8880212dc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 765.973271][T16296] ffff8880212dc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 765.981315][T16296] >ffff8880212dc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 765.989376][T16296] ^ [ 765.995771][T16296] ffff8880212dc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.003807][T16296] ffff8880212dc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 766.011841][T16296] ================================================================== [ 766.076938][ T7846] bcm5974 2-1:0.0: could not read from device [ 766.357888][ T5905] usb 4-1: USB disconnect, device number 9 [ 766.364697][ T5905] em28xx 4-1:0.132: Disconnecting em28xx [ 766.419569][ T5905] em28xx 4-1:0.132: Closing input extension [ 766.435191][T16296] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 766.442395][T16296] CPU: 1 UID: 0 PID: 16296 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 766.452966][T16296] Tainted: [L]=SOFTLOCKUP [ 766.457330][T16296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.467382][T16296] Call Trace: [ 766.470651][T16296] [ 766.473561][T16296] vpanic+0x56c/0xa60 [ 766.477535][T16296] ? __pfx_vpanic+0x10/0x10 [ 766.482018][T16296] panic+0xc5/0xd0 [ 766.485719][T16296] ? __pfx_panic+0x10/0x10 [ 766.490112][T16296] ? preempt_schedule_thunk+0x16/0x30 [ 766.495469][T16296] ? preempt_schedule_thunk+0x16/0x30 [ 766.500817][T16296] ? v4l2_fh_open+0xac/0x420 [ 766.505388][T16296] check_panic_on_warn+0x89/0xb0 [ 766.510314][T16296] ? v4l2_fh_open+0xac/0x420 [ 766.514883][T16296] end_report+0x73/0x180 [ 766.519108][T16296] ? v4l2_fh_open+0xac/0x420 [ 766.523677][T16296] kasan_report+0x128/0x150 [ 766.528158][T16296] ? v4l2_fh_open+0xac/0x420 [ 766.532751][T16296] v4l2_fh_open+0xac/0x420 [ 766.537153][T16296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 766.543135][T16296] em28xx_v4l2_open+0x157/0x9a0 [ 766.548020][T16296] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.553023][T16296] v4l2_open+0x1bf/0x3a0 [ 766.557242][T16296] chrdev_open+0x4cd/0x5e0 [ 766.561640][T16296] ? __pfx_chrdev_open+0x10/0x10 [ 766.566553][T16296] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 766.572864][T16296] ? __pfx_chrdev_open+0x10/0x10 [ 766.577777][T16296] do_dentry_open+0x785/0x14e0 [ 766.582525][T16296] vfs_open+0x3b/0x340 [ 766.586572][T16296] ? path_openat+0x2df0/0x3860 [ 766.591312][T16296] path_openat+0x2e08/0x3860 [ 766.595879][T16296] ? __pfx_stack_trace_save+0x10/0x10 [ 766.601285][T16296] ? stack_depot_save_flags+0x33/0x810 [ 766.606727][T16296] ? __pfx_path_openat+0x10/0x10 [ 766.611644][T16296] ? __x64_sys_openat+0x138/0x170 [ 766.616647][T16296] ? do_syscall_64+0x14d/0xf80 [ 766.621392][T16296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.627440][T16296] ? __lock_acquire+0x6b5/0x2cf0 [ 766.632355][T16296] do_file_open+0x23e/0x4a0 [ 766.636846][T16296] ? __pfx_do_file_open+0x10/0x10 [ 766.641848][T16296] ? _raw_spin_unlock+0x28/0x50 [ 766.646679][T16296] ? alloc_fd+0x64b/0x6c0 [ 766.651012][T16296] do_sys_openat2+0x113/0x200 [ 766.655672][T16296] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.660849][T16296] ? exc_page_fault+0x6a/0xc0 [ 766.665508][T16296] ? do_user_addr_fault+0xc6f/0x1340 [ 766.670770][T16296] __x64_sys_openat+0x138/0x170 [ 766.675601][T16296] do_syscall_64+0x14d/0xf80 [ 766.680174][T16296] ? trace_irq_disable+0x3b/0x150 [ 766.685181][T16296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.691226][T16296] ? clear_bhb_loop+0x40/0x90 [ 766.695886][T16296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.701756][T16296] RIP: 0033:0x7fbbef8a7407 [ 766.706160][T16296] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 766.725756][T16296] RSP: 002b:00007fff04596eb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 766.734156][T16296] RAX: ffffffffffffffda RBX: 00007fbbf0081880 RCX: 00007fbbef8a7407 [ 766.742112][T16296] RDX: 0000000000000000 RSI: 00007fff04597f1b RDI: ffffffffffffff9c [ 766.750069][T16296] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 766.758025][T16296] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 766.765992][T16296] R13: 00007fff04597100 R14: 00007fbbf01e8000 R15: 0000562b847b34d8 [ 766.773962][T16296] [ 766.777365][T16296] Kernel Offset: disabled [ 766.781673][T16296] Rebooting in 86400 seconds..