last executing test programs: 16.043630826s ago: executing program 3 (id=2072): keyctl$instantiate(0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7570646174f1400f000000eaffff1f747275737465643a6e657720"], 0x1c, 0xfffffffffffffffb) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = socket$pptp(0x18, 0x1, 0x2) fremovexattr(r3, &(0x7f0000002e00)=@known='system.sockprotoname\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x12, 0x64, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x44004}, 0x20040004) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000240)={r8, &(0x7f0000000200), 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs_dir/buffer_size_kb\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) 15.179311831s ago: executing program 3 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000080) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a"], 0x22) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x9}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x600) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffd, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4040810}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a0000000000000000810000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4, 0x0, 0x0, 0x20045, [0x0, 0x89ff]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/module/loop/parameters/max_loop\x00', 0x0, 0x0) read(r5, &(0x7f0000000500), 0x64) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0xc, 0x0, 0x39, r4}, 0x10) 13.152537771s ago: executing program 3 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030000000000140002007663616e300000000000000000000000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 12.828712358s ago: executing program 3 (id=2082): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) ioctl$OTPLOCK(r1, 0x800c4d10, &(0x7f00000000c0)={0x6, 0x2d57, 0x1ff}) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x294}, 0x1, 0x0, 0x0, 0x80}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) 12.545917953s ago: executing program 3 (id=2083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002bbf70009cfdb7279c00000008000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x58a306a2, 0x88002) clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r3, &(0x7f00000001c0)=[{{r4, r5/1000+60000}, 0x11, 0x100, 0x7}, {{}, 0x1f, 0x8, 0xfffffffb}, {{}, 0x0, 0x1000, 0x9}], 0x48) 12.023541565s ago: executing program 3 (id=2085): r0 = socket$kcm(0x10, 0x3, 0x0) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async, rerun: 32) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3a745bf02ae585c42dbd7000ffdbdf250900020073797a32000f0000080041007278650014003300776732"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000051404002abd7000fddbdf250800010000000000080003000400000008000100000000000800030002000000080001000100000008000300000000000810010001000000080003000400000008000100010000000800030003000000081301000000000008000300010000000800010002000000080003000300000008000100020000000800030004000000"], 0x90}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=', 0x22) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r6}) (async) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x1, 0x3, 0x0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) write$6lowpan_control(r14, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) r15 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r15, &(0x7f0000000380)={0x1d, r16, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000002c0)={'sit0\x00', r16, 0x8728, 0x28, 0xffffff90, 0x4e, {{0xb, 0x4, 0x3, 0x39, 0x2c, 0x66, 0x0, 0x1, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, {[@noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x1, [{@remote, 0x2}, {@private=0xa010101}]}]}}}}}) (async, rerun: 64) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000100)=0x2) (async) r17 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKPG(r17, 0x1269, &(0x7f0000000000)={0x3, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x4000000, 0xa}}) (async) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) (async) r18 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff0000000705810240000007050202400000070583034000"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) (async) mkdir(0x0, 0x1ff) syz_usb_control_io$hid(r18, &(0x7f0000000ac0)={0x24, &(0x7f0000000680)={0x20, 0x2c33d225f307fd45, 0xda, {0xda, 0x11, "bc88425c6f1a648fd1a0db84be1c676aeb06084514cf3e97d1b3069bc1a0ed0412f2372a3dfa85fec1cf3da54448dedf44a5c820fa3a5b87e3a5c9b537ea4d2f44dd4db583b0d4c1df5397c0f530b4b6910c70cf3bc1c14d250348ad6aff478a80011888794bec6d5b32b6e27fa5633bc137f69b817cf4b3170e762a6d9e78370f708da7ac831c2152ceef54b0b302ebe420f2bb234a35f3c4cb9c159091ce74ddcb1f820ff31ffddead81f49245c9fa0e310a896b90b63a34dc4d4322d1c393edaf9113a299f3d2327f0980e9b245a22cd59a802807c141"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}, &(0x7f00000007c0)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x2, "d3"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x304}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000b00)={0x0, 0x16, 0x29, "9ca5f765a0aedc722e7b3fcf7c0b9be954dd3c87716ad29c80c74125350f5eb4b47f7a87f756c8c751"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000c80)=ANY=[@ANYBLOB="20012d00000086650b72bf4a7b555a508a357ced6a2db8b0975801c19501ae124b5ea828a6f7d96fb5fdc07fd4b81c3ac09b501cc0cfe62874636d327fdcfb186185236608fa45efe95e4964ae06c70bd84f02bf71cebe71fec693ed457c331ec7b2a61829a099266bfb64ede841eff386a871a4ee6e00e006838df08597f00204a4ced560e59dc2e8f460046981d12aa1a551f9370f79b669c9c11339533e4ee2aa56ace86c6c0192e861cfc2bd0c7c9998c773a8a6c94f604d33b592f55e91ee48e78da3cc89f56f3715846eaefc8cbfabd68e65c79cb2f57cf760816b78ef43985aea5ab94c5f"], &(0x7f0000000c00)={0x20, 0x3, 0x1, 0xf6}}) 7.65908394s ago: executing program 2 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000020050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.514316711s ago: executing program 2 (id=2110): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) bind$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) listen(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="40000000d4f760867396ecfc6d52fca06cd38b020601080000000000000000000000040900020073797a30000000000553dbe8f77c0d2aac4be33e6926f70004000000000010000300686173683af66a8b6e640ad6f6238679a4bdfbe25cf76486cb477007b5a378ddfa64c2ab8acfccd9970f28d064c92040d649884767d767b5b19227dbb08401d53d511596ef4ed2aa5858fbf277b45427d766435f730491dbf9d4c59e07e575598acf059b2d608656a9c36daefd6c3e352fa8063b66", @ANYRESDEC=r1, @ANYRES32, @ANYRES16=r2], 0x40}}, 0x40000) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000006e5071b45cf54c3c6852f4ab7e7c53e2418e7bdde867506310657e0d62ed"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="800100edc500000700000000b4591ef7199e54b700000000fe88000000e5cb7bb200000000005fc7b1e7560331be00"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x18, 0x10}}], 0x1, 0x10) 7.456357754s ago: executing program 2 (id=2112): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf", @ANYRESDEC], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES8=r0], 0x128}, 0x4004880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r6, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r6, 0x0, 0x0) read(r6, &(0x7f0000000100), 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0xc138fd12, &(0x7f0000000200)="04") openat$kvm(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r5, &(0x7f0000000340)=""/251, 0xfb) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x386}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf019, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 4.805892525s ago: executing program 1 (id=2116): futex(&(0x7f0000000180)=0x2, 0x0, 0x6, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000200)={0x7, 'veth0_to_bridge\x00', {0x7}, 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, &(0x7f0000000280)={0x4}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01042db97000c4dcd7a8b393741c00000300", @ANYRES32=r4, @ANYBLOB="04002800"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fbdbdf258900000010001d776e1685800500060100000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) futex(&(0x7f0000000000)=0x2, 0x92d63f1fdcab0a1d, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)=0x1, 0x0) 4.057978341s ago: executing program 1 (id=2117): syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) io_setup(0x8d24, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a310000000005000100"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 3.844223835s ago: executing program 1 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000200005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.657492533s ago: executing program 2 (id=2119): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) bind$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e) listen(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="40000000d4f760867396ecfc6d52fca06cd38b020601080000000000000000000000040900020073797a30000000000553dbe8f77c0d2aac4be33e6926f70004000000000010000300686173683af66a8b6e640ad6f6238679a4bdfbe25cf76486cb477007b5a378ddfa64c2ab8acfccd9970f28d064c92040d649884767d767b5b19227dbb08401d53d511596ef4ed2aa5858fbf277b45427d766435f730491dbf9d4c59e07e575598acf059b2d608656a9c36daefd6c3e352fa8063b66", @ANYRESDEC=r1, @ANYRES32, @ANYRES16=r2], 0x40}}, 0x40000) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406010200000000000000000200000205000100070000006e5071b45cf54c3c6852f4ab7e7c53e2418e7bdde867506310657e0d62ed"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="800100edc500000700000000b4591ef7199e54b700000000fe88000000e5cb7bb200000000005fc7b1e7560331be00"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x18, 0x10}}], 0x1, 0x10) 3.255451438s ago: executing program 1 (id=2120): r0 = socket(0x2, 0x3, 0xff) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) (async) fchdir(r4) symlinkat(&(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000180)='./bus\x00') r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0xffff, 0x10000}}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_submit(0x0, 0x0, 0x0) (async) io_submit(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$inet6(0xa, 0x3, 0x1) (async) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x37}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x23, 0x3, 0x401}, {0x5, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x3, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0) (async) sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca24ffffff556ea6e5000b000000000000000000", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_ttl={{0xffffffffffffff2a, 0x0, 0x2, 0xedd}}], 0x18}}], 0x2, 0x4800) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r9, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000080)) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) 3.201316537s ago: executing program 2 (id=2121): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) splice(r2, &(0x7f0000000040)=0x9, r1, &(0x7f0000000100)=0x2aa, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0}, 0x0) 1.960867629s ago: executing program 0 (id=2124): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async) ioctl$I2C_PEC(r6, 0x708, 0x3) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) 1.864665245s ago: executing program 0 (id=2125): syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) io_setup(0x8d24, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a310000000005000100"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1.807786274s ago: executing program 0 (id=2126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x10001, 0x0, 0xffffffffffffffff}) read$char_usb(r1, &(0x7f0000000040)=""/162, 0xa2) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e61, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000880}, 0x40) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000002540)={r7, 0x1000}, 0x8) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc, 0x100000000000000, &(0x7f0000000440)="97713b46fbaa2b1044f2d408"}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) pread64(r9, &(0x7f0000002100)=""/171, 0xab, 0x9a) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 945.771085ms ago: executing program 0 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000200005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 939.008219ms ago: executing program 1 (id=2128): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r1, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0x3, 0x7, {"a80ec51f23b52f22f312877217359bf4"}, 0xa1, 0x6}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff7fff}}}, 0x118) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket(0x10, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, r5, 0xc}, 0x10) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r9, 0x80207450, &(0x7f0000000100)) syz_usb_connect(0x5, 0x24, &(0x7f0000000940)={{0x12, 0x1, 0x310, 0xc, 0xa0, 0xf1, 0x10, 0x6d0, 0x622, 0xffce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0x10, 0x5, "", [{{0x9, 0x4, 0xff, 0x3, 0x0, 0x2, 0x1b, 0x1d, 0x6}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) close(r7) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="063a9dad7c631bccb7f5bc258163f5cb0e0e67b265d324528b9ea65bad98339f13b0cd138dd5468a45d18dbbc2006ab8fdab0908004425c5a01838400e923ead17b8089064c48593f5565d59956a0f1f5cdc99ebaf6eb68fdf0b30b10fd36137af94ca09e104d7553fc6856d257d3ff06ae6542d451a7e7e757081adff2dae211252b2de39477006d6c7b008a9a007f7af80b6953a9d0e4ecaa727ca070d8bfe325a10c2f390b29e8a1ddb042ea54c0dda762113068600456300ecc4603c2c6dbd8818d22757d103fdc4b6ad0ca4b1fbffffffe1733d4017a5250cdb58a46407293b1ce7f0"], 0x0, 0x0}) r11 = syz_open_dev$I2C(&(0x7f0000000380), 0x7f, 0x402) pread64(r11, 0x0, 0xea, 0x2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000000)={0x5, 0x711c87acbdb5a633}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="000600000000000000a20000"]) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xb}}, 0x20) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="010f0400091920"], 0x7) 867.974233ms ago: executing program 0 (id=2129): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4eb3]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 'id0\x00'}) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={r1, 0x0, 0xf, 0x2, 0x7, 0x1, [0xfffffffffffffeff, 0x4, 0x10, 0x72, 0xfffffffffffffffb, 0x8]}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='\x00', 0x2000, &(0x7f0000000180)={@_ha_fsid={[0x7, 0x5]}, {0x6, 0x1, 0xa, 0x100000000}}, 0x0, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3d}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000280)={0x0, 0x1, 0x7f, 0x8000000000000000, 0x5, 0xfff}) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000300)='\x00', &(0x7f0000000340)='(%+++\xa7,.\x7f\x00', &(0x7f0000000380)='-\x00', &(0x7f00000003c0)=']\x00', &(0x7f0000000400)='})-\x00', &(0x7f0000000440)='--\x00']}, &(0x7f0000000540)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='{/\x00']}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)={0x0, r0, 0x7, 0x8, 0x800, 0xfffffffffffffff7}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x220002, 0x0) write$UHID_INPUT(r0, &(0x7f0000000680)={0x8, {"f6265254ad46775fd86fed4c614f10216e651290f583167ee3b0ad0952cd80f87af43b83adc93d300b4d180584121cca0bf4b683a0728efb73248ffde8d4558ad51fda50a39ab2b3f95cec9e3091f5ee6007398ecae7d1c50fe3336632be8d9709a05fb591becb6982898280b40e3298a7fb7961186a1c54a313004e0d54f82979af8c1d761ec2c69ce738cc65d975da827d32f0bc72fc4a79e860d6a7f57db38b96f59aa7c859c29432fe7d183df308ff229809d65f1320ec3f890c96149d03dd663b87f20e8a4e0b669d8b3797af928a8226932d35f3760f3689564af41393870c5b0c21ac304976219186da428d831721624757268383833fe8ae78d741b692b953516c587c620cb69d1da3b9755e2e635d548bfc57f531536e9dee5d725e7077e26149638ed01a0140c92ceb857bf6f140c5a6cc0787634afd9248b7d3c286ea7132aa0d898f8d3533017bcebcab3247356757cb51c04663da340a699fad131678c71e85df89fbecb36c92289289a8d6e0f351503df7d0533a397498604dbdf852d1ca3aff7b56006586b08db8d03911b4c1e584019c9f05d0b9a05cbd0a0dda5bfd4767720b1d4e4a203fc03f014fc2204613084b24cf61ef8a90e56c7940408b40fad66fb170d621da8c8a8d5d4a52a7788ecb24b05c4062050066c492b4c9fb50bcf365f0022fe1830e6ce2caa39c6cd39327a35a9b2f59a89d63331fb897e7164f2c0ae7d95f871621fb985cb7c7ed6a43e526b4eac03bbb62c2ddec58369c90bfbc081cedb46d47b6b4704467fdb89081c8ee3f01e2e44948840989461d6de2cce8ca517e02dcd7b68d9ab69a683a20460206b2f2fa4d52de3c9ab2d2859be2adcf2a292f33b03b831a8b0d1225a76e4b3503c239a9f6063912210d7ee3598ebd8e804844e858bf4b90636b41737bf343593673a0e5fd4d5a06188df01461575c9837fbf88ca3014a954b1d11476826e5192d82ee51b57ddfcc5848a2af78b104de71cdae52e2a399c37d1374baa2a3aa172a13c570242f2e84b3070dd6701e965192c198940dc7de7541470fe6bab7c2b93eded9620689788b1f6e619836149cece9378c99ac71e6916b324251a1bd75634df727636c1d2abffe75c2f24ee079ce33311b884c72521254686f7ecac9c5b2321752770ab83bca47f751c20ada3cb11164619368be8cd50821aba865c4094f6b4e9066b054aff8442c70edb9a779c26513699018f10b539bc9162fd927df04c45c7d9ed09e99f679fb85f587f1d1d9051ec4797222f1bf8d17ffbea9ff5ac416e393427ba1771f52e955b2a52601cde9c3a8d3e7791c17b24ad5267bb922ad587d5ed3c1ae6be9425f348a0f87abc5a2296fa2be47a67156001e83a2c90142d54120e98c563cf9103a0bc78c6ddeaa9280132af6d5bce655ec18c19855a298ed31c6694dad249c804f216be4021f35c55c2d24824549b78d6f3081de4a1ce711b8997c243c56520aac73cd919b93e414bece483df8a7b81d49c8696bddac9e7e90727d8d4cd817a508326acf87bd2aa3344734fa19241e94ea94bd969d01df0cad94ba3b0621bff5c1b892bfb5f1133745ad187cd2504854fbf35d58fd8c9f7750d3a44c7bb3e83ff3ffb3bf98e3e821b210ebe58752093be0f93e8508b9bf180700a8c3bba6fb49d4346ca175e8251594e66f19312f11d5ec5190d3eb290780dcbef625c6b5b7ca84cf710928894dd788b10f0f45c8f6f75584dbf95abcaf87dcd265a8f75ac87fd4e478116058828b1a2a79a9d7e69f6552ae87bbd0c6141d3366107851dbd57446007a18f4edda93e6be6a6a98426fb992968a91ca1b4db8b3ade2a26111a1002f1ea833e3288db5bf0b7b1fbd00d4667e6715713bb3bdf8d92ef3786b7c5ac02a1f3988022e3e5f16257f446cc21a5eb4efec229240fb097d974dbd73a4448df583cbd1328aeb179946412b21978df237125a4f34183f0b5ea91a35a7914fbd16ee423ed1cbc0d192d81f179e8e0751ae72ca7d854a150073291ba321529a018da20319c2b9cb247a9b68674f91ae1cf47d9930aac55373a6fb96c4c82a733e45da0b374dae8e1ae96cd6e730195180e0b4a998e92d4ea9542682ada83b41f17d4a0ccccb33c2cd4c56458799b6e8df7e938d786c246e651e5ca51b21f63988ba0554aebd9eb0d8c5064e8a95688d1f496c7c343ba24657f2b97f18d58285ceee1da5113c8fbe7628556b2a48d367a11fb3c1723526fecfd6a997d15cb7100e7246f4824fe6463e0b0425c83452d247d9ebb78e2a9a1c70267f732c690942698020d4ee41c7055736a11a92062b32b3bd776215ee1a9ca4b0156b7e8274a2396505a3f6e2192cfdd9a7e612dd60ae9886805920ea6f4a50430f666cefb53310831941513ab0ed4a47a82434c740e685954b39a11aa1c578b934d66f880e866fd5863c4e21befd9921be776914107e6e32a33309c4ed26deee8eb8529b195944809374417cd14e00ba3f0c0900b27722ebbcd014868b4ccacdf519002e94ffbc14eb350361923a024c8d76d74a32cc26da4bd840d7c41e8c96bc2c14404c3212efba76a4be8879ce0901c9c4e1cb79da53c916ffcdeb169a498dfd638411533b8698c521cbb7b118f950526fb8fb1c62bdf901c449640379a41b7c76a409c618485403ac7c042e022e90e90b6fd8c3d5ff0ab19e0a8e80b90518447ba4a82c62d266aa453d7bcf5caf2c35287e56da21a17b76dfa9a011062bcc1f528f3820d9b7bf085b4f29cf6175c354d32e0a14e800703bd49136b96be1956597d90bcddc08611d6b2c06b95ebffa60f8071501be822fd5716760c95c423bf41ffa64ce955c75e104d584beb8b70ea557e0a36b08b74a10f98c92d2c22ad6e32e5c9ab305c4efd592ce51afc665365c6991ddb1f339ae1be0c9b505e1fee3513f01bd711100e68325ee65df08f96da35d2d91cc13c698525fd20c31cef58baf710023bdf7255f96e13390b963f18e15971a6df0d2cf14113146391dcf759e6b7366f284d76711a8be62fa3cc980f2a611df32291084c4893f4ec35c21bcaea9bf8df4a7b1f2a51bed2dc805a80f71428d4f0c4a4b1594d9df6b3c4aa60547fe91e08e654c6795fec5c5efde1c0a519554a56180fac46f4e33f66b99f5e0e8efbddc71739408d45e7d9c978df00cfb286cc30bbf8b536a760b85c8aa6a742a78e26ca94f67c42526b88a935ea303294ed280a9fc5516b595cc741fd502c81d7a950d13b4ee21f99b4baa7adc1a6a4e0aab6e42204950fe91ef3494ca69fa3ba6e578184d867a76fd3d9ec64e279f754c6650802ca3b533ef47121544cd96b2c03f7787d64da73adace31210dec0d0295af237845a9b3f5731d6c7f5a86590b8e442b1a2905bd041772c3813c695cec76b6a632185f2240517f838187d385ac06e65e124419cafb6947c7c792652385738b8a07cffa7b08a5e9d944634e350cd4c79ea348d0e4dab6a4961c5544f658b6b78cfcf123466959482ac968833887c73a5e6b79c94ec81ccb37256ec886caf45f969f46729eb973690b1c5093085177cd15ef6e92f1fdb0b48755245a96a953f63947caf0e23a05cf589b99896f237bde0ba182b4141e11e5f543804ac51df1a99f21fbb45f5dcd2d8164e5bdafd0e6e4b73c1f29ab6d69bdf6edf389635b34adfb79d7cfb64fe7649e68239063939546ca1e1588189738c4ccd1cefbdc3c09a0e2e2908d97b734676103e337c2f130f14ad77d0a988888426f1c46bfbdb5741f21dc0e63b4d8e4e127c9623a4cae2b777417441945a66640e463898041290934772a250bb21d5a3c54f99687f1d2f774ae48fef45a11ead87992a855dc4ba4ef348f7517e5f50cfdddb3eccbe262cc1da911d35934ee28bc426692e876de98a76c887bfe8dd7076a8e94462b77308a81543d513817baa7a13211c45f044bdec6d95f3b8326cadd1cf1d2fb2aa1943a33859f933285e100cbbe37b8a4da057820408b9b4723635108518f396133b5dbce1a12b60389beda69c40f54f2b8d83da9f076c772942179ef86a05867b4db3ea1574ae09bf5dc0871f8fc0c27b9b26615f0c6742b3eae63ade4a1d3971957d116b496d1b2863302dee13d1d4e85cd9c9f346b21cd082978bcd6398541fb639bed386e6388dab21683a776f102b098157bf7a0bbfa4d34ed785528311f32016881bc4d78cc458dec8b5d61e5a48986821becf3f1b2eacd2f5758d41901606b8fcf095e94321bfc68d07e1a1d49b75918724fc270f699866dac3dc93a17957dc5f6b9b1a146faf71fcf3220fa69b1eabb15882338cc41bda480e5955ffa6cd9137c6a2130205edd6e74394616f182584bc72f76c2da9bdf292a9427bbf12ba23fd68cba54ea0f402e892dbf58c02c2714726e618554bdfd27e68515a25d432fa552995e09b87044d60044aafbee1007d277e8223bc3d5fbab610d92867b4a359071b6727a884a509359f165ec98b40b007138af4b300f54608443c7facd1f6cb153db5394cc3b71e76eaac9c3e99c2f1196660f3e19d8c116b4eccb06549646dfdf9a0d29d39186f9ba4a24240d5c3ba14a634cdb108479f44d8f4198a895ba78cdf36afd893a72109e749e93d7b7d58bb0ac17c2490b00dd8f9ae15469f7e2d08d8a94dbb59cffc7520fc6497b409eb23c21dfbc5463543373c8c8a8eb3ca85e695d871892de2c951e138eea3c4610c8480bdf3915156ada4c282511f9544e75f5d803cff7c8c39b6b91270f31d0c449ac5f08b8e2c217aabc1e74ebcff0b6a968b0bf9a9d0f649e59f74a74a7a922f67fb1d5e230834d61c7d23fd49d834b3b57167c54c1a4d5c66a98c6366180c256d0fc52b99eeb9c58e4e92ac7204d90d91b84eeb3d4eee9bd259397b9b3a65c16a2caa2c528eeb4616d0f023177c5dad069e147aa33f5e0330fb1f8f2c006fc5bcfa60e396881f533dd5b1dbb3d642d5255e135fe62438758d68aad901e753159ac38143805b3b32fe6d8f9df8e3b52c2c31f0f9f9cfb228385058be305020c5ec82e458e29ea8a781c7b40e67c7ca91f6e8a9aac02e14fe091d4ae6c3272bec44b5c4e3a03600d84eef22d8f4ba7d5e0d2a7a01254117e3a5866456ec8526cc1c5b748fa687d366fd835cb3ea5ae95bb035d014eb3dae1e6dddd18dd9cb9abcb328ce88bdc5ab4e584ef5745e180bd9e61a0e1f5400df2c29a0ee93157f5cf126bced956f0a0cd005b9153b76204c099e38a513cc9de192686a441eaf3486202477d094370d216d0433a36f5fde34bafaf00d35b366dc5b5a5170bf1427f9752b98c1c0a802ea14141a137733cf6976d1242219783b8154e244347b67048659e8b052c650eb6a40c9b9d857aaf8a278534ffcde174779b22dab09be37bbe4ce929d25d29775e12d76f500ce0794be1ecf8d657191fafe444c2419f4e42b81ef383bb65aa307cd69d70d26d5602ecea8bb7b65ad8757670abf88c8604472032868ce96aea1e54ef0ed439bbae65ab23fa4c5a93fe966844887f9f7f467f4361d1dce21a55b2070e55aea686041a45181529baa57b6a09f0d2f912d9948bf24905aa40d9f60aaae73feabf1fe285a66bc5eb6e9dd01fb43c399182a18587264d6cf8eb4334fee089d644fa8f10dbaaf1cbb30717a753d4706fc88eaedd9e1fdaca6184e304df84ce8d87e5eca8758dbbef6836e0ddae56f50bda07d899f4ff4c676a65fcbf822010fa384f0a6804012280227ab80154f774c99f335638200ca1c950d7c5f5cf28d90832dde113a8568fb6ca707d911f58", 0x1000}}, 0x1006) rename(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)='./file0\x00') io_submit(0x0, 0x1, &(0x7f0000001800)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000001740)="8ccb344697c4ccee5f8c28a65783f26c153f99e3f6a59c8906e540d87513601cc0b17209ec2892e8bce821e06104bf86fbc32863cf5c768f1c3702e89f2a5c12b876d80a647278f4a9dc778ddec526a1253b60d21bad4b532e0889e540a52f2de835f2", 0x63, 0xffffffffffffff38, 0x0, 0x1, r0}]) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000001840)={0x2, "5e1fd3905e5cbe3b6b427a2311d246689b7117449e45a026bd428cd17e7c56519d2ebf3b9db5982ff2bca1c59e9c46979e793afdb066036afe2cbe29d36ac8b7", {0x7, 0x9}}) ioctl$FITHAW(r0, 0xc0045878) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000001900)={0x0, 0x751e}, 0x8) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000001940)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001980)=""/18, &(0x7f00000019c0)=0x12) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f0000001e40)={&(0x7f0000001a00)={{@host, 0x7f}, {@my=0x0, 0x1}, 0x400, "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"}, 0x418, 0x3ff}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001f40)=[@text32={0x20, &(0x7f0000001ec0)="b9c10d0000b808000000ba000000000f30f30f0964640fc76f0b66b80f018ed8c4c229406cbb1f9a000000009500b9800000c00f3235000100000f30c4e16572e2000f20c035000000400f22c0c4c3a10e5300de", 0x54}], 0x1, 0x8cac7f278e789c13, &(0x7f0000001f80), 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000002080)={0x80000000, &(0x7f0000001fc0), &(0x7f0000002000)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000002640)={0x0, 0x7, 0x0, &(0x7f00000020c0)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000002380)=[{}, {}], 0x3, 0x0, &(0x7f0000002480)=[{}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x8, 0x0, &(0x7f0000002500)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000002780)={0x80000000, &(0x7f00000026c0), &(0x7f0000002700)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000002c00)={0x0, 0x4, 0x0, &(0x7f00000027c0)=[{}, {}, {}, {}], 0x3, 0x0, &(0x7f0000002940)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000002ac0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000002b80)=[{}, {}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000002c80)={{r7, r8, 0x1, [0x4, 0x7fff]}, {r9, r10, 0x4, [0x10001, 0x5]}, 0x1, [0x9, 0x3a]}) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000002cc0)=""/231) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r2, 0x5ce9000) 657.446504ms ago: executing program 0 (id=2130): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x2f, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566774e0c1907fc5a5e1800112233445566778899aabbccddeeaabbccddee561f111833445566778899aabbccddeeff00", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x32, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r2) sendmmsg$unix(r1, &(0x7f0000001a40)=[{{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40004}}], 0x1, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000302000000020340e2c9abce559b8c7a43abf5a2c88f4d12bfc51107da86cec997eaa909e7a8e4fa68fc05fd77be302a832de069fd428bb94dc4efd353d53119fa9142a550ba8251cf42efc75b0fa10a667e5d258ac50ba72af912"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0003020000000203ab14359704d7738b6eccbe8cdf5dd2c64bd596e53daa4401aa298ff3eda83968f5949ebd9770eb62fa9151e63a15e453afeb4aafe86192658b66c2ffbee946483f447bfa07b41c490ee7e368f2acac34339979ba7a268996e0692f595ab298d91b1436530bff34fdc6074e4cf4043c39686193be504d5c202c36f9622def1df6c2b8c6982120db31509f67a61e2e4dbb83f96989e7683bd616034890525047e1ad773ca27612648d4afd388ff8fbad8d429c757a5433295974f7a83e55c0b637a250eaf36605690bc99a8d3ebe04b4f2be4e0f9e2008efafec1dee7c0cb42b107bee0470d6cc0ad40e1aa70b89916dfe4d7daaee664d1d6f7490ceecd5a0e0f55d845e0bbc774359041202e62702e474473bc5f176eb1bc2f632496f8843bc7d45ad4d7920e46d536ce84c1386d42c17c8afaa86b2e2bcf2879010999cb123fe3c12cdd44857be19c1d74dc49ff3a015228162b53ad38ce213f984ee94a424cbca9a60881ae4abde906861a219e33e18694e0ce01e494bee6067bdfb0755a856e5272a1540c6b431170f00000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000005034a04acd742db8a1a32e819729bf1d08ab78025ea79ec7e59f5b09c24177af7a5e88e01df807a31464105ca07c7c31c0b1133"], 0x0, 0x0}, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) pidfd_send_signal(r3, 0x3a, &(0x7f0000000700)={0x1b, 0x5, 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 62.369228ms ago: executing program 1 (id=2131): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x804, 0xfffffffc}, 0x20) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, &(0x7f0000000540)={{0x0, 0x4, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x14, 0x40000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffc, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0xfffffff0, 0xa}) syz_usb_connect(0x1, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xe0, 0xe4, 0x75, 0x8, 0x830, 0x50, 0x2153, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x3, 0x20, 0xde, "", [{{0x9, 0x4, 0xda, 0x1, 0x0, 0xed, 0xcc, 0xfc, 0x2}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0xf, 0x0, 0x1, [{0x0, 0x0}]}) 0s ago: executing program 2 (id=2132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='user\x00', 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0x55e, 0x0, 0x0, 0x1000, 0x7f, 0xffffffffffffffff, 0x0, 0x12}}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) kernel console output (not intermixed with test programs): capabilities [ 222.932582][ T822] usb 2-1: USB disconnect, device number 5 [ 225.541710][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 225.699230][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.699260][ T32] usb 1-1: config 0 has no interfaces? [ 225.699293][ T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.699319][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.747625][ T32] usb 1-1: config 0 descriptor?? [ 226.279836][ T32] usb 1-1: USB disconnect, device number 4 [ 231.382428][ T6807] tipc: Started in network mode [ 231.382527][ T6807] tipc: Node identity 4, cluster identity 4711 [ 231.382563][ T6807] tipc: Node number set to 4 [ 232.604253][ T5771] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 232.765008][ T5771] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.767879][ T5771] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 232.767909][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 232.767930][ T5771] usb 2-1: Product: syz [ 232.767946][ T5771] usb 2-1: Manufacturer: syz [ 232.838510][ T5771] usb_debug 2-1:1.0: debug converter detected [ 232.855758][ T5771] usb 2-1: debug converter now attached to ttyUSB0 [ 233.065760][ T5771] usb 2-1: USB disconnect, device number 6 [ 233.136216][ T5771] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 233.137149][ T5771] usb_debug 2-1:1.0: device disconnected [ 234.394678][ T6823] capability: warning: `syz.2.324' uses 32-bit capabilities (legacy support in use) [ 234.520499][ T6827] netlink: 96 bytes leftover after parsing attributes in process `syz.1.327'. [ 237.445988][ T6860] tipc: Can't bind to reserved service type 1 [ 239.209964][ T6881] syz.2.349 (6881) used greatest stack depth: 17408 bytes left [ 240.039837][ T6900] overlayfs: failed to clone upperpath [ 241.462595][ T6910] Zero length message leads to an empty skb [ 247.254466][ T6988] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 247.255035][ T6987] capability: warning: `syz.2.386' uses deprecated v2 capabilities in a way that may be insecure [ 248.070708][ T7007] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 248.072940][ T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 248.257408][ T32] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.259321][ T32] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 248.285812][ T32] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 248.285860][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.285881][ T32] usb 1-1: Product: syz [ 248.285899][ T32] usb 1-1: Manufacturer: syz [ 248.296148][ T32] usb 1-1: SerialNumber: syz [ 248.377585][ T32] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 248.407144][ T32] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 248.437729][ T32] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 248.730264][ T7012] input: syz1 as /devices/virtual/input/input7 [ 252.495013][ T7040] overlayfs: failed to clone lowerpath [ 253.366616][ T7001] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -110 [ 253.410146][ T7001] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32 [ 253.455616][ T5698] usb 1-1: USB disconnect, device number 5 [ 253.592153][ T5698] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 253.626966][ T7043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.405'. [ 253.709810][ T5698] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 253.733025][ T5698] ti_usb_3410_5052 1-1:2.0: device disconnected [ 257.225472][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.225582][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.838325][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 258.294175][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 258.454144][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 258.456552][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 258.456581][ T10] usb 2-1: config 179 has no interface number 0 [ 258.456649][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 258.456670][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 258.456690][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 258.456708][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 258.456727][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 258.456760][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 258.456776][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.585080][ T7110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.711648][ T7128] fuse: fd is not a fuse device [ 259.034708][ T5699] usb 2-1: USB disconnect, device number 7 [ 259.034708][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 259.034778][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 259.169841][ T5828] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 261.034262][ T5699] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 261.187246][ T5699] usb 2-1: unable to get BOS descriptor set [ 261.232341][ T5699] usb 2-1: config 7 has an invalid interface number: 201 but max is 0 [ 261.232363][ T5699] usb 2-1: config 7 has no interface number 0 [ 261.232385][ T5699] usb 2-1: config 7 interface 201 has no altsetting 0 [ 262.293270][ T5699] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 262.293302][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.293323][ T5699] usb 2-1: Product: syz [ 262.293337][ T5699] usb 2-1: Manufacturer: syz [ 262.293351][ T5699] usb 2-1: SerialNumber: syz [ 262.617929][ T5699] ums-usbat 2-1:7.201: USB Mass Storage device detected [ 262.642813][ T5699] ums-usbat 2-1:7.201: Quirks match for vid 0781 pid 0005: 1 [ 262.750372][ T5699] usb 2-1: USB disconnect, device number 8 [ 264.263838][ T1011] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 264.447273][ T1011] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 264.447297][ T1011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.447318][ T1011] usb 2-1: Product: syz [ 264.447329][ T1011] usb 2-1: Manufacturer: syz [ 264.447361][ T1011] usb 2-1: SerialNumber: syz [ 264.493541][ T1011] usb 2-1: config 0 descriptor?? [ 264.531336][ T1011] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 265.178968][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 265.324180][ T5699] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 265.494643][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 265.538277][ T5699] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 265.538315][ T5699] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.538334][ T5699] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.538457][ T5699] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.538543][ T5699] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 265.538558][ T5699] usb 1-1: config 0 has no interface number 0 [ 265.538591][ T5699] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 265.538611][ T5699] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 265.538627][ T5699] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.538786][ T5699] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.547208][ T5699] usb 1-1: config 0 interface 125 has no altsetting 0 [ 265.548758][ T5699] usb 1-1: config 0 interface 125 has no altsetting 2 [ 265.685507][ T5699] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 265.685539][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.685561][ T5699] usb 1-1: Product: syz [ 265.685640][ T5699] usb 1-1: Manufacturer: syz [ 265.685658][ T5699] usb 1-1: SerialNumber: syz [ 265.757977][ T5699] usb 1-1: config 0 descriptor?? [ 265.787551][ T5699] usb 1-1: selecting invalid altsetting 2 [ 266.212118][ C1] usb 1-1: async_complete: urb error -71 [ 266.212235][ C1] usb 1-1: async_complete: urb error -71 [ 266.212342][ C1] usb 1-1: async_complete: urb error -71 [ 266.218408][ T5699] get_1284_register: usb error -71 [ 266.353454][ T1011] gspca_stk1135: reg_w 0x200 err -71 [ 266.354633][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354648][ T1011] gspca_stk1135: Sensor write failed [ 266.354705][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354716][ T1011] gspca_stk1135: Sensor write failed [ 266.354750][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354761][ T1011] gspca_stk1135: Sensor read failed [ 266.354792][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354801][ T1011] gspca_stk1135: Sensor read failed [ 266.354809][ T1011] gspca_stk1135: Detected sensor type unknown (0x0) [ 266.354844][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354854][ T1011] gspca_stk1135: Sensor read failed [ 266.354884][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354894][ T1011] gspca_stk1135: Sensor read failed [ 266.354928][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.354938][ T1011] gspca_stk1135: Sensor write failed [ 266.354989][ T1011] gspca_stk1135: serial bus timeout: status=0x00 [ 266.355000][ T1011] gspca_stk1135: Sensor write failed [ 266.366350][ T1011] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 266.532427][ T5699] usb 1-1: USB disconnect, device number 6 [ 266.580400][ T1011] usb 2-1: USB disconnect, device number 9 [ 274.001140][ T7300] syz.2.499 (7300) used greatest stack depth: 16608 bytes left [ 275.844151][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 276.004767][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 276.007632][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.015645][ T9] usb 2-1: config 3 has an invalid interface number: 105 but max is 1 [ 276.015674][ T9] usb 2-1: config 3 has an invalid interface number: 164 but max is 1 [ 276.015695][ T9] usb 2-1: config 3 has no interface number 0 [ 276.015712][ T9] usb 2-1: config 3 has no interface number 1 [ 276.015760][ T9] usb 2-1: config 3 interface 105 has no altsetting 0 [ 276.015779][ T9] usb 2-1: config 3 interface 164 has no altsetting 0 [ 276.091067][ T9] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 276.091101][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.091123][ T9] usb 2-1: Product: syz [ 276.091139][ T9] usb 2-1: Manufacturer: syz [ 276.091155][ T9] usb 2-1: SerialNumber: syz [ 276.653799][ T7334] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.653969][ T7334] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 276.852470][ T7334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.855086][ T7334] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.939552][ T7334] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.939711][ T7334] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 277.083013][ T7334] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.083154][ T7334] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 277.178321][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.197731][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.212146][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.218806][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.239408][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.247268][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.590817][ T9] uvcvideo 2-1:3.164: Found multiple Units with ID 5 [ 277.591799][ T9] uvcvideo 2-1:3.164: Found multiple Units with ID 1 [ 277.593695][ T9] uvcvideo 2-1:3.164: Found UVC 0.03 device syz (04c8:0720) [ 277.615890][ T9] uvcvideo 2-1:3.164: Entity type for entity Output 32773 was not initialized! [ 278.234122][ T4912] Bluetooth: hci0: command 0x0406 tx timeout [ 278.511020][ T9] uvcvideo 2-1:3.164: Entity type for entity Input 65535 was not initialized! [ 278.511113][ T9] uvcvideo 2-1:3.164: Failed to create links for entity 32773 [ 278.511131][ T9] uvcvideo 2-1:3.164: Failed to register entities (-22). [ 278.678694][ T9] usb 2-1: USB disconnect, device number 10 [ 278.832991][ T5699] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 278.874282][ T4912] Bluetooth: hci1: command 0x0406 tx timeout [ 278.954973][ T4912] Bluetooth: hci2: command 0x0406 tx timeout [ 279.004395][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 279.008010][ T5699] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 279.008036][ T5699] usb 1-1: config 1 has no interface number 0 [ 279.008076][ T5699] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 279.008100][ T5699] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 279.008124][ T5699] usb 1-1: config 1 interface 105 has no altsetting 0 [ 279.027141][ T7376] fuse: fd is not a fuse device [ 279.087967][ T5699] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 279.087999][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 279.088018][ T5699] usb 1-1: Product: syz [ 279.088032][ T5699] usb 1-1: Manufacturer: syz [ 279.088046][ T5699] usb 1-1: SerialNumber: syz [ 279.114183][ T4912] Bluetooth: hci3: command 0x0406 tx timeout [ 279.156227][ T7369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.156359][ T7369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.274999][ T7379] fuse: fd is not a fuse device [ 279.484419][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 279.565316][ T7369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.565431][ T7369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.644134][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 279.646752][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 279.646797][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 279.646841][ T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 279.646870][ T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.646898][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 279.693308][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.693394][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.693438][ T9] usb 2-1: Product: syz [ 279.693454][ T9] usb 2-1: Manufacturer: syz [ 279.693469][ T9] usb 2-1: SerialNumber: syz [ 279.729783][ T9] usb 2-1: config 0 descriptor?? [ 279.761186][ T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.816266][ T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 280.055702][ T9] usb 2-1: USB disconnect, device number 11 [ 280.076389][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 280.187110][ T5699] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 280.187643][ T5699] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 280.319326][ T4912] Bluetooth: hci0: command 0x0406 tx timeout [ 280.319601][ T5699] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:af:dd:2f:81:f0 [ 280.355541][ T5699] usb 1-1: USB disconnect, device number 7 [ 280.361062][ T5699] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 280.655250][ T5699] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 280.655511][ T5699] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 280.655645][ T5699] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 280.954418][ T4912] Bluetooth: hci1: command 0x0406 tx timeout [ 281.034301][ T4912] Bluetooth: hci2: command 0x0406 tx timeout [ 281.275398][ T4912] Bluetooth: hci3: command 0x0406 tx timeout [ 282.562720][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 288.029358][ T7488] netlink: 'syz.0.570': attribute type 29 has an invalid length. [ 290.884922][ T5699] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 291.244199][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 291.247005][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.249448][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 90, changing to 7 [ 291.249491][ T5699] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1024 [ 291.349727][ T7536] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 291.826311][ T5699] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 291.826345][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.826366][ T5699] usb 2-1: Product: syz [ 291.826382][ T5699] usb 2-1: Manufacturer: syz [ 291.826398][ T5699] usb 2-1: SerialNumber: syz [ 293.747411][ T5699] snd-ua101 2-1:1.0: invalid num_altsetting [ 293.847228][ T5699] usb 2-1: USB disconnect, device number 12 [ 297.983045][ T7582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.602'. [ 300.666956][ T7605] tipc: Enabled bearer , priority 0 [ 301.145744][ T7615] overlayfs: failed to clone upperpath [ 308.630797][ T7691] netlink: 48 bytes leftover after parsing attributes in process `syz.3.643'. [ 308.630825][ T7691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.643'. [ 313.348704][ T7723] could not allocate digest TFM handle sha256-generic [ 313.581643][ T7733] fuse: fd is not a fuse device [ 313.914480][ T38] audit: type=1800 audit(1785678500.565:8): pid=7740 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.661" name="cluster_name" dev="configfs" ino=16156 res=0 errno=0 [ 313.917872][ T38] audit: type=1800 audit(1785678500.565:9): pid=7740 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.661" name="toss_secs" dev="configfs" ino=16157 res=0 errno=0 [ 313.920990][ T38] audit: type=1800 audit(1785678500.565:10): pid=7740 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.661" name="scan_secs" dev="configfs" ino=16158 res=0 errno=0 [ 317.500256][ T5699] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 317.936660][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 317.936696][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.936721][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 317.936748][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 317.940538][ T5699] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 317.940567][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.940588][ T5699] usb 2-1: Product: syz [ 317.940603][ T5699] usb 2-1: Manufacturer: syz [ 317.940619][ T5699] usb 2-1: SerialNumber: syz [ 319.594726][ T5699] usb 2-1: config 0 descriptor?? [ 320.542080][ T5699] usb 2-1: can't set config #0, error -71 [ 320.682546][ T5699] usb 2-1: USB disconnect, device number 13 [ 322.184403][ T7825] tipc: Enabling of bearer rejected, failed to enable media [ 323.232767][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.232877][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.690452][ T7835] 9pnet_virtio: no channels available for device syz [ 327.888236][ T7868] input: syz1 as /devices/virtual/input/input9 [ 328.708390][ T822] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 329.506585][ T822] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 329.506620][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.568450][ T822] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 329.848681][ T822] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 329.848710][ T822] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 334.583927][ T7953] tipc: Failed to remove unknown binding: 66,0,0/0:1497489227/1497489228 [ 346.396273][ T8035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.396526][ T8035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.398804][ T8035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.428329][ T8035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.474321][ T4912] Bluetooth: hci3: command 0x0406 tx timeout [ 348.474368][ T4912] Bluetooth: hci2: command 0x0406 tx timeout [ 349.691672][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 349.691972][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 351.330426][ T8073] infiniband syz0: set active [ 351.330667][ T8073] infiniband syz0: added bond0 [ 352.046898][ T8073] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 352.046943][ T8073] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 352.046999][ T8073] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 354.123806][ T8073] RDS/IB: syz0: added [ 354.190556][ T8073] smc: adding ib device syz0 with port count 1 [ 354.225594][ T8073] smc: ib device syz0 port 1 has no pnetid [ 357.400822][ T8162] fuse: fd is not a fuse device [ 358.664193][ T8177] syz.2.823 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 359.849922][ T8188] sctp: [Deprecated]: syz.0.828 (pid 8188) Use of int in maxseg socket option. [ 359.849922][ T8188] Use struct sctp_assoc_value instead [ 361.334453][ T8207] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 365.272224][ T8241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.497220][ T8252] netlink: 220 bytes leftover after parsing attributes in process `syz.1.845'. [ 365.554312][ T8253] bridge0: port 3(erspan0) entered blocking state [ 365.555503][ T8253] bridge0: port 3(erspan0) entered disabled state [ 365.556403][ T8253] erspan0: entered allmulticast mode [ 365.626264][ T8253] erspan0: entered promiscuous mode [ 365.639685][ T8253] bridge0: port 3(erspan0) entered blocking state [ 365.639851][ T8253] bridge0: port 3(erspan0) entered forwarding state [ 366.595290][ T8267] No source specified [ 366.629869][ T8265] rdma_rxe: rxe_newlink: failed to add bond0 [ 366.717624][ T8270] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 366.779209][ T8272] UBIFS error (pid: 8272): cannot open "ubi0_0", error -19 [ 366.935706][ T8281] syz_tun: entered allmulticast mode [ 367.159662][ T8281] syz_tun (unregistering): left allmulticast mode [ 367.489623][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 367.489725][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 368.109091][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 370.128594][ T8343] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.283641][ T8350] pimreg: tun_chr_ioctl cmd 1074025675 [ 370.283662][ T8350] pimreg: persist disabled [ 370.295004][ T8350] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 370.295025][ T8350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 370.418278][ T8350] team0: Port device geneve1 added [ 371.089195][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.457102][ T8343] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.134485][ T8343] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.446892][ T8367] fuse: Unknown parameter 'ä' [ 372.449625][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 372.641246][ T8343] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.043572][ T8362] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.074940][ T8231] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.133426][ T8361] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.191304][ T2163] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.270738][ T8371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.874'. [ 373.271960][ T8371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.874'. [ 374.990576][ T8404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.308519][ T8407] TCP: TCP_TX_DELAY enabled [ 375.593092][ T8331] Set syz1 is full, maxelem 65536 reached [ 376.275705][ T8432] netlink: 'syz.2.894': attribute type 6 has an invalid length. [ 376.375412][ T8435] netlink: 'syz.0.895': attribute type 15 has an invalid length. [ 376.375437][ T8435] netlink: 666 bytes leftover after parsing attributes in process `syz.0.895'. [ 376.591809][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 377.215121][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 377.548581][ T8473] netlink: 'syz.2.907': attribute type 12 has an invalid length. [ 378.149146][ T8496] netlink: 'syz.0.912': attribute type 21 has an invalid length. [ 378.149340][ T8496] netlink: 13 bytes leftover after parsing attributes in process `syz.0.912'. [ 378.269657][ T8475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.773770][ T8514] openvswitch: netlink: IPv4 tunnel dst address is zero [ 378.941762][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 378.986243][ T8520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 379.217815][ T8524] tmpfs: Unknown parameter 'Yr_ÿK' [ 379.220243][ T8526] tipc: Started in network mode [ 379.220278][ T8526] tipc: Node identity ac14142f, cluster identity 4711 [ 379.267474][ T8526] tipc: New replicast peer: 172.20.20.170 [ 379.313843][ T8526] tipc: Enabled bearer , priority 10 [ 379.329308][ T8527] tipc: New replicast peer: 0.0.0.0 [ 379.421316][ T5600] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 380.421311][ T5828] tipc: Node number set to 2886997039 [ 381.048046][ T8568] Invalid source name [ 381.048067][ T8568] UBIFS error (pid: 8568): cannot open "/dev/sg0", error -22 [ 382.139769][ T8605] Invalid source name [ 382.139806][ T8605] UBIFS error (pid: 8605): cannot open "/dev/sg0", error -22 [ 383.756683][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.756783][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.362386][ T8679] Invalid source name [ 385.362407][ T8679] UBIFS error (pid: 8679): cannot open "./file0", error -22 [ 386.153450][ T8682] netlink: 'syz.3.970': attribute type 13 has an invalid length. [ 386.457764][ T8687] io-wq is not configured for unbound workers [ 386.818786][ T8689] netlink: 'syz.2.973': attribute type 27 has an invalid length. [ 386.818804][ T8689] netlink: 164 bytes leftover after parsing attributes in process `syz.2.973'. [ 386.891917][ T8691] PKCS7: Unknown OID: [4] 1.31.15331.16263(bad) [ 386.891934][ T8691] PKCS7: Only support pkcs7_signedData type [ 388.385542][ T8741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.989'. [ 389.177791][ T38] audit: type=1326 audit(1785678575.815:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8770 comm="syz.0.1000" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabe69ce019 code=0x0 [ 389.245853][ T5600] Bluetooth: hci0: unexpected event for opcode 0x080f [ 389.329600][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 391.399445][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 391.883728][ T8821] netlink: 'syz.2.1016': attribute type 37 has an invalid length. [ 392.159605][ T8837] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1021'. [ 392.324460][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 392.503099][ T8848] sock: sock_set_timeout: `syz.3.1023' (pid 8848) tries to set negative timeout [ 392.516639][ T8845] Invalid source name [ 392.516664][ T8845] UBIFS error (pid: 8845): cannot open "/dev/sg0", error -22 [ 392.601737][ T38] audit: type=1326 audit(1785678579.245:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8841 comm="syz.3.1023" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f021c89e019 code=0x0 [ 392.734708][ T5600] Bluetooth: hci3: status 0xff [ 392.734738][ T5600] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 393.278331][ T8865] fuse: fd is not a fuse device [ 393.534927][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 393.631148][ T8881] Invalid source name [ 393.631169][ T8881] UBIFS error (pid: 8881): cannot open "/dev/sg0", error -22 [ 393.790716][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 394.025601][ T822] usb 2-1: emi26_load_firmware - request_firmware() failed [ 394.025625][ T822] usb 2-1: emi26_load_firmware - error loading firmware: error = -110 [ 394.025691][ T822] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 394.033493][ T822] usb 2-1: USB disconnect, device number 14 [ 394.374204][ T822] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 394.544159][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 394.547171][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 394.547207][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.547230][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 394.547257][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 394.547283][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 394.547310][ T822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 394.550147][ T822] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 394.550175][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.550203][ T822] usb 2-1: Product: syz [ 394.550213][ T822] usb 2-1: Manufacturer: syz [ 394.550224][ T822] usb 2-1: SerialNumber: syz [ 394.581144][ T822] usb 2-1: config 0 descriptor?? [ 394.717501][ T8886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 394.718715][ T8886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 395.005168][ T822] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 395.005273][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 395.005366][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 395.038653][ T822] usb 2-1: USB disconnect, device number 15 [ 395.056683][ T822] mcba_usb 2-1:0.0 can0: device disconnected [ 395.589578][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 396.785164][ T8933] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 396.893817][ T8933] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 397.235112][ T8940] fuse: fd is not a fuse device [ 397.297839][ T8945] fuse: fd is not a fuse device [ 400.646698][ T9008] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 401.159435][ T9010] kernel read not supported for file /file0 (pid: 9010 comm: syz.3.1073) [ 401.174017][ T38] audit: type=1800 audit(1785678587.805:13): pid=9010 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.1073" name="file0" dev="mqueue" ino=20346 res=0 errno=0 [ 401.200502][ T9010] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1073'. [ 402.393364][ T9040] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1081'. [ 403.662002][ T9071] fuse: fd is not a fuse device [ 403.663110][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.663424][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.663720][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.664182][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.665032][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.665819][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.666673][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.671925][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.700488][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.701621][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.713218][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.724015][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.724364][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.725199][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.733880][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.742269][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.754808][ T9071] cgroup: Unknown subsys name 'smackfshat' [ 403.778180][ T9074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'. [ 403.778205][ T9074] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1091'. [ 403.778222][ T9074] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1091'. [ 404.040418][ T9081] netlink: 4228 bytes leftover after parsing attributes in process `syz.2.1094'. [ 404.053449][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1094'. [ 404.342780][ T8916] Set syz1 is full, maxelem 65536 reached [ 404.674170][ T9096] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 404.968688][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1105'. [ 405.185696][ T5828] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 405.260416][ T38] audit: type=1326 audit(1785678591.905:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9129 comm="syz.2.1111" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c74d8e019 code=0x0 [ 405.350485][ T5828] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 405.350522][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.350547][ T5828] usb 2-1: Product: syz [ 405.350565][ T5828] usb 2-1: Manufacturer: syz [ 405.350583][ T5828] usb 2-1: SerialNumber: syz [ 405.488751][ T9135] veth0_macvtap: left promiscuous mode [ 405.659164][ T822] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 406.036834][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 406.098123][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.186026][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.292393][ T5329] usb 2-1: USB disconnect, device number 16 [ 406.334116][ T9145] netlink: 'syz.3.1117': attribute type 11 has an invalid length. [ 406.334141][ T9145] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 406.880470][ T822] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 406.971304][ T822] ath9k_htc: Failed to initialize the device [ 407.061944][ T5329] usb 2-1: ath9k_htc: USB layer deinitialized [ 407.288157][ T5258] veth0_macvtap: entered promiscuous mode [ 407.991805][ T9197] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 408.110606][ T9207] Invalid source name [ 408.110625][ T9207] UBIFS error (pid: 9207): cannot open "/dev/sg0", error -22 [ 408.148971][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'. [ 408.525506][ T9209] IPVS: Scheduler module ip_vs_ not found [ 408.715825][ T9225] overlayfs: conflicting options: userxattr,metacopy=on [ 408.757014][ T9225] tmpfs: Bad value for 'nr_blocks' [ 409.663196][ T9240] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 409.717891][ T9245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.722656][ T9245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.742048][ T9243] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 409.742069][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1140'. [ 409.987434][ T5828] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 410.134266][ T5828] usb 2-1: device descriptor read/64, error -71 [ 410.384125][ T5828] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 410.524312][ T5828] usb 2-1: device descriptor read/64, error -71 [ 410.635149][ T5828] usb usb2-port1: attempt power cycle [ 410.716195][ T9269] Invalid source name [ 410.716214][ T9269] UBIFS error (pid: 9269): cannot open "/dev/sg0", error -22 [ 410.718646][ T9269] fuse: fd is not a fuse device [ 411.025810][ T5828] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 411.044955][ T5828] usb 2-1: device descriptor read/8, error -71 [ 411.296107][ T5828] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 411.316744][ T5828] usb 2-1: device descriptor read/8, error -71 [ 411.449767][ T5828] usb usb2-port1: unable to enumerate USB device [ 411.833588][ T9294] Invalid source name [ 411.833601][ T9294] UBIFS error (pid: 9294): cannot open "/dev/sg0", error -22 [ 411.937685][ T9296] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 411.937699][ T9296] overlayfs: missing 'lowerdir' [ 411.976843][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 412.191766][ T9298] netlink: 'syz.2.1159': attribute type 22 has an invalid length. [ 412.191785][ T9298] netlink: 14526 bytes leftover after parsing attributes in process `syz.2.1159'. [ 412.461612][ T9300] mmap: syz.3.1160 (9300) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 412.552325][ T9300] netlink: 'syz.3.1160': attribute type 21 has an invalid length. [ 412.552459][ T9300] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1160'. [ 412.692845][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 412.953586][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1165'. [ 413.370455][ T9338] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1172'. [ 413.825052][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'. [ 413.947330][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1178'. [ 413.947375][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1178'. [ 414.480953][ T5698] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 414.609945][ T9373] netlink: 'syz.2.1183': attribute type 63 has an invalid length. [ 414.609983][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 414.630997][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 414.651422][ T5698] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 414.651454][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.651476][ T5698] usb 2-1: Product: syz [ 414.651492][ T5698] usb 2-1: Manufacturer: syz [ 414.651507][ T5698] usb 2-1: SerialNumber: syz [ 414.651821][ T9373] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 415.020971][ T9381] netlink: 'syz.0.1184': attribute type 23 has an invalid length. [ 415.131355][ T5698] snd-ua101 2-1:1.1: invalid format type [ 415.131376][ T5698] snd-ua101 2-1:1.0: invalid num_altsetting [ 415.238115][ T5698] usb 2-1: USB disconnect, device number 21 [ 415.372427][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1186'. [ 415.996885][ T9402] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.330413][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1191'. [ 416.478701][ T9407] Invalid source name [ 416.478719][ T9407] UBIFS error (pid: 9407): cannot open "/dev/sg0", error -22 [ 417.056162][ T9415] binder: 9414:9415 ioctl c018620c 200000000200 returned -22 [ 417.351433][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 417.928195][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'. [ 418.135245][ T9434] tipc: Started in network mode [ 418.135271][ T9434] tipc: Node identity 2007ff, cluster identity 4711 [ 418.135286][ T9434] tipc: Node number set to 2099199 [ 418.508462][ T9447] sctp: [Deprecated]: syz.3.1205 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.508462][ T9447] Use struct sctp_sack_info instead [ 418.533399][ T9447] sctp: [Deprecated]: syz.3.1205 (pid 9447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.533399][ T9447] Use struct sctp_sack_info instead [ 418.819233][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'. [ 419.090789][ T9461] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 419.119062][ T9462] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 419.593068][ T9484] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 419.593092][ T9484] netlink: 'syz.0.1213': attribute type 2 has an invalid length. [ 419.659187][ T9484] overlayfs: failed to clone upperpath [ 420.045109][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1215'. [ 420.085880][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 420.133157][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1216'. [ 420.376862][ T9512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1219'. [ 420.407034][ T9511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1218'. [ 420.580759][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 421.087638][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 421.119276][ T9532] /dev/nullb0: Can't lookup blockdev [ 421.914304][ T4912] Bluetooth: hci0: command 0x0406 tx timeout [ 422.849683][ T9596] /dev/nullb0: Can't lookup blockdev [ 423.196156][ T32] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 423.918892][ T9641] __nla_validate_parse: 9 callbacks suppressed [ 423.918913][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 423.994288][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 424.289538][ T9646] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1255'. [ 424.351003][ T9646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.393751][ T9651] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1255'. [ 424.413114][ T9651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.449268][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1260'. [ 424.590365][ T9666] netlink: 'syz.1.1263': attribute type 21 has an invalid length. [ 424.590418][ T9666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'. [ 425.936758][ T4912] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 426.047581][ T9706] netlink: 'syz.3.1277': attribute type 21 has an invalid length. [ 426.047647][ T9706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1277'. [ 427.225870][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1284'. [ 427.484958][ T9745] netlink: 'syz.0.1287': attribute type 21 has an invalid length. [ 427.485111][ T9745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1287'. [ 428.554363][ T32] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 428.734176][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 428.736674][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.736703][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.736761][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 428.736791][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 428.736818][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.806177][ T32] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 428.806209][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.806231][ T32] usb 2-1: Product: syz [ 428.806246][ T32] usb 2-1: Manufacturer: syz [ 428.806261][ T32] usb 2-1: SerialNumber: syz [ 428.847790][ T32] usb 2-1: config 0 descriptor?? [ 428.850431][ T9763] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 428.905399][ T32] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 429.034350][ T9780] netlink: 'syz.0.1299': attribute type 23 has an invalid length. [ 429.124616][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 429.501492][ C0] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 429.608018][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 429.987139][ T9809] netlink: 'syz.3.1308': attribute type 21 has an invalid length. [ 429.987212][ T9809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1308'. [ 431.288312][ T9848] netlink: 'syz.3.1319': attribute type 21 has an invalid length. [ 431.288379][ T9848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1319'. [ 431.379353][ T5828] usb 2-1: USB disconnect, device number 23 [ 431.459226][ T9852] nfs4: Unknown parameter 'rdmaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaax{Œ|a_\S4?Ïa~÷€Õ¸¹MI:-IGòê5ÌÀîŠA>¦»‚Ð [ 431.459226][ T9852] ñöŽ.1¥ToÙŒ‡ü¨œJP?Æ ;€ýNñSÒ^á—ädÄ2kD…ZØ€¥ßÙÅ»' [ 432.024315][ T5828] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 432.185129][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 432.218756][ T5828] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 432.222554][ T5828] usb 2-1: string descriptor 0 read error: -22 [ 432.222698][ T5828] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 432.222725][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.319490][ T5828] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.319562][ T5828] usb 2-1: MIDIStreaming interface descriptor not found [ 432.647524][ T5828] usb 2-1: USB disconnect, device number 24 [ 432.662883][ T9885] netlink: 'syz.3.1330': attribute type 21 has an invalid length. [ 432.662954][ T9885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1330'. [ 432.863688][ T9890] tmpfs: Bad value for 'mpol' [ 432.956115][ T9892] fuse: fd is not a fuse device [ 433.028895][ T9896] netlink: 'syz.3.1333': attribute type 58 has an invalid length. [ 433.028916][ T9896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1333'. [ 433.323252][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1337'. [ 433.711967][ T9924] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 433.711995][ T9924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 433.860539][ T9924] vhci_hcd vhci_hcd.0: Device attached [ 433.926748][ T9925] vhci_hcd: connection closed [ 433.978128][ T5811] vhci_hcd vhci_hcd.1: stop threads [ 433.981336][ T5811] vhci_hcd vhci_hcd.1: release socket [ 433.981545][ T5811] vhci_hcd vhci_hcd.1: disconnect device [ 434.501910][ T9959] netlink: 'syz.0.1352': attribute type 9 has an invalid length. [ 435.103882][ T9983] FAULT_INJECTION: forcing a failure. [ 435.103882][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 435.105207][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.1.1360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 435.105285][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.105328][ T9983] Call Trace: [ 435.105351][ T9983] [ 435.105374][ T9983] dump_stack_lvl+0xe8/0x150 [ 435.105465][ T9983] should_fail_ex+0x467/0x600 [ 435.105550][ T9983] _copy_from_user+0x2d/0xb0 [ 435.105618][ T9983] ___sys_sendmsg+0x1c6/0x360 [ 435.105671][ T9983] ? __lock_acquire+0x6df/0x2e40 [ 435.105733][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.105954][ T9983] ? __fget_files+0x2a/0x420 [ 435.106023][ T9983] ? __fget_files+0x3a8/0x420 [ 435.106119][ T9983] __x64_sys_sendmsg+0x1b7/0x290 [ 435.106210][ T9983] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.106363][ T9983] do_syscall_64+0x17b/0x530 [ 435.106421][ T9983] ? irqentry_exit+0x10f/0x8f0 [ 435.106477][ T9983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.106530][ T9983] ? clear_bhb_loop+0x40/0x90 [ 435.106604][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.106670][ T9983] RIP: 0033:0x7f18591ae019 [ 435.106733][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.106780][ T9983] RSP: 002b:00007f1857406028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.106848][ T9983] RAX: ffffffffffffffda RBX: 00007f1859435fa0 RCX: 00007f18591ae019 [ 435.106894][ T9983] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 435.106936][ T9983] RBP: 00007f1857406090 R08: 0000000000000000 R09: 0000000000000000 [ 435.106971][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.107005][ T9983] R13: 00007f1859436038 R14: 00007f1859435fa0 R15: 00007fffcc022488 [ 435.107080][ T9983] [ 436.174984][T10015] nfs: Unknown parameter 'mountprotoÍ×:3­£²½ock' [ 436.474190][ T4912] Bluetooth: hci0: command 0x0406 tx timeout [ 436.947909][T10032] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 436.947909][T10032] program syz.1.1373 not setting count and/or reply_len properly [ 436.993304][T10040] netlink: 'syz.2.1376': attribute type 21 has an invalid length. [ 436.993373][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1376'. [ 437.654318][ T5698] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 437.784093][ T5698] usb 2-1: device descriptor read/64, error -71 [ 438.027074][ T5698] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 438.163632][ T5698] usb 2-1: device descriptor read/64, error -71 [ 438.266698][ T5698] usb usb2-port1: attempt power cycle [ 438.298166][ T9978] Set syz1 is full, maxelem 65536 reached [ 438.484747][T10068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1382'. [ 438.614121][ T5698] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 438.635267][ T5698] usb 2-1: device descriptor read/8, error -71 [ 438.877847][ T5698] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 438.885901][T10081] netlink: 'syz.0.1388': attribute type 21 has an invalid length. [ 438.886064][T10081] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1388'. [ 438.904749][ T5698] usb 2-1: device descriptor read/8, error -71 [ 439.017389][ T5698] usb usb2-port1: unable to enumerate USB device [ 439.343904][T10088] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 439.344004][T10088] PKCS7: Only support pkcs7_signedData type [ 440.792760][T10100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1395'. [ 441.749176][T10121] netlink: 'syz.0.1401': attribute type 21 has an invalid length. [ 441.749246][T10121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1401'. [ 442.230027][T10134] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1406'. [ 442.345271][T10138] fuse: fd is not a fuse device [ 442.837466][T10155] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 442.837604][T10155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.922662][T10155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.986726][T10155] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 443.746007][T10097] Set syz1 is full, maxelem 65536 reached [ 444.214103][ T1011] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 444.374584][ T1011] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 444.374614][ T1011] usb 2-1: config 1 has no interface number 0 [ 444.374661][ T1011] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.374685][ T1011] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 444.374711][ T1011] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 444.456118][ T1011] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 444.456150][ T1011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.456170][ T1011] usb 2-1: Product: syz [ 444.456185][ T1011] usb 2-1: Manufacturer: syz [ 444.456199][ T1011] usb 2-1: SerialNumber: syz [ 444.507441][T10177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.507647][T10177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 444.512599][ T1011] usb 2-1: Expected 3 endpoints, found: 2 [ 444.971214][T10192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 444.971235][T10192] IPv6: NLM_F_CREATE should be set when creating new route [ 444.989960][T10192] overlay: Unknown parameter 'smackfsdef' [ 445.196636][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.196762][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.589751][T10209] overlayfs: failed to resolve './bus': -2 [ 446.462844][T10173] Set syz1 is full, maxelem 65536 reached [ 446.504154][T10220] overlayfs: failed to clone upperpath [ 446.587257][T10225] netlink: 'syz.0.1438': attribute type 21 has an invalid length. [ 446.587339][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1438'. [ 447.159258][ T5771] usb 2-1: USB disconnect, device number 29 [ 447.667695][T10244] vivid-000: disconnect [ 448.041363][T10269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1449'. [ 448.061702][T10241] vivid-000: reconnect [ 448.109597][T10262] Invalid source name [ 448.109616][T10262] UBIFS error (pid: 10262): cannot open "ubifs", error -22 [ 448.338796][ T4912] Bluetooth: hci0: unexpected event for opcode 0x204e [ 448.577545][T10288] netlink: 'syz.1.1454': attribute type 21 has an invalid length. [ 448.577615][T10288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1454'. [ 449.697924][T10321] netlink: 'syz.1.1467': attribute type 75 has an invalid length. [ 449.810504][ T38] audit: type=1326 audit(1785678636.455:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10325 comm="syz.3.1470" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f021c89e019 code=0x0 [ 449.819750][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1469'. [ 450.099458][T10329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.100157][T10329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.194150][ T5329] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 450.333181][T10347] fuse: fd is not a fuse device [ 450.357422][T10348] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 450.357751][T10348] Error validating options; rc = [-22] [ 451.132299][T10359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1479'. [ 451.198271][T10362] ubi3: attaching mtd0 [ 451.239915][T10362] ubi3: scanning is finished [ 451.239935][T10362] ubi3: empty MTD device detected [ 451.240088][T10362] ubi3 error: ubi_read_volume_table: LEB size too small for a volume record [ 451.503201][T10362] ubi3 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 452.294104][ T5329] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 452.454408][ T5329] usb 2-1: Using ep0 maxpacket: 8 [ 452.458831][ T5329] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.458865][ T5329] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.458892][ T5329] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.458917][ T5329] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.458960][ T5329] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.458984][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.739171][ T5329] usb 2-1: GET_CAPABILITIES returned 0 [ 452.739213][ T5329] usbtmc 2-1:16.0: can't read capabilities [ 452.907228][ T4912] Bluetooth: unknown link type 241 [ 452.907295][ T4912] Bluetooth: hci2: connection err: -111 [ 453.384648][T10359] Set syz1 is full, maxelem 65536 reached [ 454.124876][T10431] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1503'. [ 454.296595][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 454.298011][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 454.298088][T10438] bridge_slave_1: left allmulticast mode [ 454.298109][T10438] bridge_slave_1: left promiscuous mode [ 454.340505][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.478386][T10438] bridge_slave_0: left allmulticast mode [ 454.478425][T10438] bridge_slave_0: left promiscuous mode [ 454.478737][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.608175][T10440] openvswitch: netlink: Missing key (keys=40, expected=100) [ 454.821647][ T822] usb 2-1: USB disconnect, device number 31 [ 455.041832][T10448] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1509'. [ 455.050311][T10448] netlink: 'syz.0.1509': attribute type 7 has an invalid length. [ 455.240603][T10457] ./bus: Can't lookup blockdev [ 455.241447][T10458] ./bus: Can't lookup blockdev [ 455.289028][T10464] netlink: set zone limit has 4 unknown bytes [ 455.315390][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1511'. [ 456.309491][T10482] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1519'. [ 456.405214][T10484] netlink: 'syz.0.1520': attribute type 21 has an invalid length. [ 456.405286][T10484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1520'. [ 457.115328][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'. [ 457.878850][T10502] fuse: fd is not a fuse device [ 458.145699][T10508] overlayfs: failed to clone upperpath [ 458.189619][T10464] Set syz1 is full, maxelem 65536 reached [ 458.594103][ T32] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 458.634202][ T4912] Bluetooth: hci2: command 0x0406 tx timeout [ 458.744129][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 458.747407][ T32] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 458.747434][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.749947][ T32] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.749976][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.749998][ T32] usb 2-1: Product: syz [ 458.750015][ T32] usb 2-1: Manufacturer: syz [ 458.750025][ T32] usb 2-1: SerialNumber: syz [ 458.818389][ T32] usb 2-1: 0:2 : does not exist [ 458.818547][ T32] usb 2-1: unit 9 not found! [ 458.996790][ T32] usb 2-1: USB disconnect, device number 32 [ 459.298130][T10525] netlink: 'syz.0.1534': attribute type 21 has an invalid length. [ 459.298181][T10525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1534'. [ 459.755227][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 459.924241][ T5828] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 460.054149][ T5828] usb 2-1: device descriptor read/64, error -71 [ 460.294095][ T5828] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 460.344568][T10549] netlink: 'syz.0.1543': attribute type 21 has an invalid length. [ 460.344642][T10549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1543'. [ 460.435179][ T5828] usb 2-1: device descriptor read/64, error -71 [ 460.536785][T10552] netlink: 'syz.3.1544': attribute type 12 has an invalid length. [ 460.536809][T10552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1544'. [ 460.545974][ T5828] usb usb2-port1: attempt power cycle [ 460.652086][T10556] netlink: 'syz.0.1545': attribute type 49 has an invalid length. [ 460.717056][T10556] bond0: (slave bond_slave_0): Releasing backup interface [ 460.854775][T10556] bond_slave_0: entered promiscuous mode [ 460.854796][T10556] bond_slave_0: entered allmulticast mode [ 460.954307][ T5828] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 460.987164][ T5828] usb 2-1: device descriptor read/8, error -71 [ 461.234237][ T5828] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 461.255033][ T5828] usb 2-1: device descriptor read/8, error -71 [ 461.375832][ T5828] usb usb2-port1: unable to enumerate USB device [ 462.362485][T10609] netlink: 'syz.3.1553': attribute type 21 has an invalid length. [ 462.362560][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1553'. [ 463.044513][ T32] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 463.196581][ T32] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 463.196635][ T32] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 463.196666][ T32] usb 2-1: config 1 interface 0 has no altsetting 0 [ 463.202058][ T32] usb 2-1: string descriptor 0 read error: -22 [ 463.202655][T10637] netlink: 'syz.3.1563': attribute type 21 has an invalid length. [ 463.202721][T10637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1563'. [ 463.203108][ T32] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 463.203147][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.522606][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 463.786321][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x5 [ 463.786484][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786518][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786550][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786571][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786591][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786612][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786632][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786653][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.786673][ T32] hid-udraw 0003:20D6:CB17.0001: unknown main item tag 0x0 [ 463.922644][ T32] hid-udraw 0003:20D6:CB17.0001: unbalanced collection at end of report description [ 463.929786][ T32] hid-udraw 0003:20D6:CB17.0001: parse failed [ 463.930024][ T32] hid-udraw 0003:20D6:CB17.0001: probe with driver hid-udraw failed with error -22 [ 464.024379][ T32] usb 2-1: USB disconnect, device number 37 [ 464.300713][T10667] netlink: 'syz.3.1573': attribute type 21 has an invalid length. [ 464.300765][T10667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1573'. [ 464.525772][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'. [ 464.643177][ T38] audit: type=1326 audit(1785678651.285:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10679 comm="syz.3.1576" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f021c89e019 code=0x0 [ 464.691270][ T38] audit: type=1326 audit(1785678651.335:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10679 comm="syz.3.1576" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f021c89e019 code=0x0 [ 464.854130][ T32] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 465.008210][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.008270][ T32] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 465.008300][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.047857][ T32] usb 2-1: config 0 descriptor?? [ 465.459969][ T32] ath6kl: Unsupported hardware version: 0xfbe0c219 [ 465.495718][ T32] ath6kl: Failed to init ath6kl core: -22 [ 465.496588][ T32] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 466.344302][T10698] netlink: 'syz.2.1582': attribute type 21 has an invalid length. [ 466.344371][T10698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1582'. [ 467.672164][ T5698] usb 2-1: USB disconnect, device number 38 [ 467.788012][T10726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1590'. [ 467.852720][T10729] netlink: 'syz.3.1592': attribute type 21 has an invalid length. [ 467.852789][T10729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1592'. [ 469.389715][T10705] Set syz1 is full, maxelem 65536 reached [ 469.481152][T10773] netlink: 'syz.3.1604': attribute type 21 has an invalid length. [ 469.481226][T10773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1604'. [ 470.002201][T10808] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1611'. [ 470.002756][T10808] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 470.122821][T10808] 0ªî{X¹¦: entered allmulticast mode [ 470.129748][T10808] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 470.174255][T10811] raw_sendmsg: syz.3.1612 forgot to set AF_INET. Fix it! [ 470.274863][T10813] Invalid source name [ 470.274881][T10813] UBIFS error (pid: 10813): cannot open "usb0", error -22 [ 470.281583][T10814] Invalid source name [ 470.281602][T10814] UBIFS error (pid: 10814): cannot open "usb0", error -22 [ 470.460439][T10824] netlink: 'syz.2.1616': attribute type 21 has an invalid length. [ 470.460510][T10824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1616'. [ 470.577731][ T5698] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 470.738864][ T5698] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 470.738894][ T5698] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 470.738914][ T5698] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 470.738936][ T5698] usb 2-1: config 1 has no interface number 0 [ 470.738998][ T5698] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.742424][ T5698] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.742455][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.742476][ T5698] usb 2-1: Product: syz [ 470.742492][ T5698] usb 2-1: Manufacturer: syz [ 470.742507][ T5698] usb 2-1: SerialNumber: syz [ 470.907677][ T5698] cdc_wdm 2-1:1.128: skipping garbage [ 470.907710][ T5698] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22 [ 471.144880][ T5698] usb 2-1: USB disconnect, device number 39 [ 471.547316][T10860] netlink: 'syz.2.1625': attribute type 21 has an invalid length. [ 471.547369][T10860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1625'. [ 471.927182][T10874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 471.927213][T10874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 471.950016][T10874] vhci_hcd vhci_hcd.0: Device attached [ 471.963482][T10875] vhci_hcd: connection closed [ 471.968042][ T8233] vhci_hcd vhci_hcd.1: stop threads [ 471.968073][ T8233] vhci_hcd vhci_hcd.1: release socket [ 471.968109][ T8233] vhci_hcd vhci_hcd.1: disconnect device [ 472.551755][T10889] netlink: 'syz.3.1634': attribute type 21 has an invalid length. [ 472.551830][T10889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1634'. [ 472.996715][ T822] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 473.154534][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 473.157505][ T822] usb 2-1: config 0 has no interfaces? [ 473.157542][ T822] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 473.157568][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.200523][ T822] usb 2-1: config 0 descriptor?? [ 473.477568][ T5828] usb 2-1: USB disconnect, device number 40 [ 474.454309][ T5828] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 474.616870][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.616897][ T5828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.666499][ T5828] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 474.666529][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 474.666548][ T5828] usb 2-1: SerialNumber: syz [ 474.770879][T10975] overlayfs: failed to clone upperpath [ 475.951799][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 476.782838][T11006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1658'. [ 477.273138][ T5828] usb 2-1: 0:2 : does not exist [ 477.410784][ T5828] usb 2-1: USB disconnect, device number 41 [ 477.481091][T10517] udevd[10517]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.914718][ T5828] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 478.075660][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 478.081195][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.085073][ T5828] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 478.085149][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.085210][ T5828] usb 2-1: Product: syz [ 478.085246][ T5828] usb 2-1: Manufacturer: syz [ 478.085288][ T5828] usb 2-1: SerialNumber: syz [ 478.135230][ T5828] usb 2-1: config 0 descriptor?? [ 478.162224][ T5828] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 478.162506][ T5828] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 478.718518][T11064] openvswitch: netlink: ERSPAN option length err (len 4788, max 255). [ 479.649433][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 480.367978][ T32] usb 2-1: USB disconnect, device number 42 [ 480.573037][ T38] audit: type=1326 audit(1785678667.215:18): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11101 comm="syz.1.1689" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18591ae019 code=0x0 [ 480.608642][T11106] syz.1.1689 (11106): /proc/11103/oom_adj is deprecated, please use /proc/11103/oom_score_adj instead. [ 480.662237][T11108] CIFS: Attempting to mount //127.0.0.1/share [ 480.717400][T11108] CIFS: VFS: Error connecting to socket. Aborting operation. [ 480.719557][T11108] CIFS: VFS: cifs_mount failed w/return code = -111 [ 480.872947][T11112] fuse: fd is not a fuse device [ 480.881338][T11112] overlayfs: failed to clone upperpath [ 481.418175][T11123] tipc: Resetting bearer [ 481.504894][T11123] tipc: Disabling bearer [ 481.784080][ T5771] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 481.827465][T11144] fuse: fd is not a fuse device [ 481.872978][T11144] fuse: fd is not a fuse device [ 481.934170][ T5771] usb 2-1: Using ep0 maxpacket: 16 [ 481.938818][ T5771] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.938848][ T5771] usb 2-1: config 0 has no interface number 0 [ 481.938896][ T5771] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 481.938925][ T5771] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 1025, setting to 1024 [ 481.938970][ T5771] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 481.938995][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.007460][ T5771] usb 2-1: config 0 descriptor?? [ 482.008419][T11132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 482.238930][ T4912] Bluetooth: hci1: command 0x0406 tx timeout [ 482.434372][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.435036][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.450421][T11132] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1696'. [ 482.526408][ T5771] usbhid 2-1:0.1: can't add hid device: -71 [ 482.526541][ T5771] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 482.575764][ T5771] usb 2-1: USB disconnect, device number 43 [ 482.928735][T11142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1698'. [ 483.423493][T11181] fuse: fd is not a fuse device [ 483.741327][T11188] fuse: Unknown parameter '' [ 483.764282][ T1011] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 483.795975][T11190] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 483.919508][T11193] netlink: 'syz.0.1714': attribute type 21 has an invalid length. [ 483.919578][T11193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1714'. [ 483.934045][ T1011] usb 2-1: Using ep0 maxpacket: 16 [ 483.950002][ T1011] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 483.950031][ T1011] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 483.950052][ T1011] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 483.950072][ T1011] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 483.950092][ T1011] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 483.950113][ T1011] usb 2-1: config 0 has no interface number 0 [ 483.950159][ T1011] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 483.950188][ T1011] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 483.950212][ T1011] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 483.950250][ T1011] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 483.950279][ T1011] usb 2-1: config 0 interface 125 has no altsetting 0 [ 483.950298][ T1011] usb 2-1: config 0 interface 125 has no altsetting 2 [ 483.995761][ T1011] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 483.995797][ T1011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.995818][ T1011] usb 2-1: Product: syz [ 483.995833][ T1011] usb 2-1: Manufacturer: syz [ 483.995848][ T1011] usb 2-1: SerialNumber: syz [ 484.115405][ T1011] usb 2-1: config 0 descriptor?? [ 484.200571][ T1011] usb 2-1: selecting invalid altsetting 2 [ 484.588036][ C1] usb 2-1: async_complete: urb error -71 [ 484.588147][ C1] usb 2-1: async_complete: urb error -71 [ 484.588253][ C1] usb 2-1: async_complete: urb error -71 [ 484.588953][ T1011] get_1284_register: usb error -71 [ 484.661897][ T1011] usb 2-1: USB disconnect, device number 44 [ 485.232277][T11202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1715'. [ 485.649620][T11227] netlink: 'syz.2.1724': attribute type 21 has an invalid length. [ 485.649692][T11227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1724'. [ 486.114117][ T1011] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 486.269099][ T1011] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 486.269131][ T1011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.269152][ T1011] usb 2-1: Product: syz [ 486.269168][ T1011] usb 2-1: Manufacturer: syz [ 486.269183][ T1011] usb 2-1: SerialNumber: syz [ 486.331718][ T32] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 486.740377][ T5771] usb 2-1: USB disconnect, device number 45 [ 487.524631][ T32] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 487.598376][ T32] ath9k_htc: Failed to initialize the device [ 487.617252][ T5771] usb 2-1: ath9k_htc: USB layer deinitialized [ 487.657902][T11309] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1743'. [ 487.971624][T11315] netlink: 'syz.2.1747': attribute type 21 has an invalid length. [ 487.998666][T11315] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1747'. [ 488.336608][T11328] CIFS: Attempting to mount //127.0.0.1/share [ 488.385736][T11328] CIFS: VFS: Error connecting to socket. Aborting operation. [ 488.385792][T11328] CIFS: VFS: cifs_mount failed w/return code = -101 [ 488.672895][T11332] fuse: fd is not a fuse device [ 488.725853][ T5329] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 488.896989][ T5329] usb 2-1: config 0 has an invalid interface number: 127 but max is 1 [ 488.897020][ T5329] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 9 [ 488.897043][ T5329] usb 2-1: config 0 has no interface number 1 [ 488.897101][ T5329] usb 2-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.897142][ T5329] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 488.901034][ T5329] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 488.901062][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.901081][ T5329] usb 2-1: Product: syz [ 488.901100][ T5329] usb 2-1: Manufacturer: syz [ 488.901111][ T5329] usb 2-1: SerialNumber: syz [ 488.945807][ T5329] usb 2-1: config 0 descriptor?? [ 489.030833][ T5329] usb-storage 2-1:0.127: USB Mass Storage device detected [ 489.139844][ T5329] usb-storage 2-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 489.233618][ T5329] usb-storage 2-1:0.0: USB Mass Storage device detected [ 489.262358][ T5329] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 489.357799][ T5329] usb 2-1: USB disconnect, device number 46 [ 489.609222][T11356] overlayfs: failed to clone upperpath [ 489.730489][T11358] netlink: 'syz.0.1758': attribute type 21 has an invalid length. [ 489.730560][T11358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1758'. [ 489.957179][T11363] webusb: landingPage URL 8 bytes too long for given URL scheme [ 490.442174][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1761'. [ 492.013204][T11412] netlink: 'syz.0.1774': attribute type 21 has an invalid length. [ 492.013279][T11412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1774'. [ 492.283293][T11416] tipc: Enabling of bearer rejected, failed to enable media [ 492.534281][ T5771] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 492.686114][ T5771] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 492.686136][ T5771] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 492.686155][ T5771] usb 2-1: config 8 has no interface number 0 [ 492.686185][ T5771] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 492.686205][ T5771] usb 2-1: config 8 interface 177 has no altsetting 0 [ 492.686228][ T5771] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 492.686245][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.741780][ T5771] ir_toy 2-1:8.177: required endpoints not found [ 492.830576][T11423] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 493.470132][ T5329] usb 2-1: USB disconnect, device number 47 [ 493.702030][T11442] netlink: 'syz.3.1786': attribute type 21 has an invalid length. [ 493.702197][T11442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1786'. [ 493.909401][T11451] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1788'. [ 493.926082][ T5329] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 494.104057][ T5329] usb 2-1: Using ep0 maxpacket: 8 [ 494.108380][ T5329] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 494.108410][ T5329] usb 2-1: config 0 has no interface number 0 [ 494.108457][ T5329] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.108482][ T5329] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.108506][ T5329] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.108527][ T5329] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.111728][ T5329] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 494.111757][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.111779][ T5329] usb 2-1: Product: syz [ 494.111794][ T5329] usb 2-1: Manufacturer: syz [ 494.111810][ T5329] usb 2-1: SerialNumber: syz [ 494.216153][ T5329] usb 2-1: config 0 descriptor?? [ 494.233468][ T5329] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 494.504182][ T5828] usb 2-1: USB disconnect, device number 48 [ 495.267797][T11475] tmpfs: Unknown parameter 'subj_user' [ 495.268022][T11476] tmpfs: Unknown parameter 'subj_user' [ 495.929597][T11492] fuse: Bad value for 'fd' [ 496.159945][ T5828] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 496.369711][ T5828] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 496.369746][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.369768][ T5828] usb 2-1: Product: syz [ 496.369783][ T5828] usb 2-1: Manufacturer: syz [ 496.369798][ T5828] usb 2-1: SerialNumber: syz [ 496.427975][ T5828] usb 2-1: config 0 descriptor?? [ 496.605524][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1806'. [ 496.605577][T11513] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 496.837554][ T5828] usb 2-1: f81604_write: reg: 105 data: 9 failed: -EPROTO [ 496.837587][ T5828] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 496.837628][ T5828] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 496.884177][ T5828] usb 2-1: USB disconnect, device number 49 [ 496.940819][T11527] netlink: 'syz.2.1809': attribute type 21 has an invalid length. [ 496.940879][T11527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1809'. [ 497.166140][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1813'. [ 497.257462][T11541] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 497.838137][T11562] netlink: 'syz.3.1819': attribute type 21 has an invalid length. [ 497.838216][T11562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1819'. [ 497.903498][T11565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.451782][T11589] overlayfs: failed to clone upperpath [ 498.482574][T11589] netlink: set zone limit has 4 unknown bytes [ 498.524069][ T10] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 498.676417][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 498.676451][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 498.676475][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 498.676498][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 498.676522][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 498.676547][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 498.679158][ T10] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 498.679188][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 498.679210][ T10] usb 2-1: Product: syz [ 498.679224][ T10] usb 2-1: Manufacturer: syz [ 498.747701][T11582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.759089][T11582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.788955][T11582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.790335][T11582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.790650][T11582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.790735][T11582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 498.825411][ T10] usb 2-1: USB2VGA dongle found at address 50 [ 498.859085][ T10] usb 2-1: Allocated 8 output buffers [ 498.888532][ T10] usb 2-1: Failed to early initialize device [ 499.024986][ T10] usb 2-1: USB disconnect, device number 50 [ 499.101926][T11609] netlink: 'syz.0.1836': attribute type 21 has an invalid length. [ 499.102000][T11609] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1836'. [ 499.282869][ T4912] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 499.364862][T11619] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1839'. [ 499.564328][T11619] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1839'. [ 499.632791][T11628] JFS: discard option not supported on device [ 499.648324][T11628] Mount JFS Failure: -5 [ 499.648336][T11628] jfs_mount failed w/return code = -5 [ 499.984146][ T5828] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 500.134096][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 500.136948][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.136985][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.137007][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.137039][ T5828] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 500.137056][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.158071][ T5828] usb 2-1: config 0 descriptor?? [ 501.010990][ T5828] usbhid 2-1:0.0: can't add hid device: -71 [ 501.011122][ T5828] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 501.077662][ T5828] usb 2-1: USB disconnect, device number 51 [ 501.226278][T11673] dummy0: entered allmulticast mode [ 501.400862][T11673] 9p: Bad value for 'rfdno' [ 501.638588][T11677] dummy0: left allmulticast mode [ 501.700834][T11691] CIFS: Attempting to mount //127.0.0.1/share [ 501.942890][ T4912] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 502.049138][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.049847][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.264108][ T5698] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 502.414134][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 502.431808][ T5698] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 502.431843][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.431867][ T5698] usb 2-1: Product: syz [ 502.431882][ T5698] usb 2-1: Manufacturer: syz [ 502.431897][ T5698] usb 2-1: SerialNumber: syz [ 502.452935][ T5698] usb 2-1: config 0 descriptor?? [ 502.474721][ T5698] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 502.558628][T11691] CIFS: VFS: Error connecting to socket. Aborting operation. [ 502.558695][T11691] CIFS: VFS: cifs_mount failed w/return code = -4 [ 503.075105][T11735] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.075139][T11735] overlayfs: missing 'lowerdir' [ 503.075465][T11736] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 503.075492][T11736] overlayfs: missing 'lowerdir' [ 503.080515][ T5698] gspca_ov534_9: reg_w failed -71 [ 503.256040][T11747] CIFS: Attempting to mount //127.0.0.1/share [ 503.358102][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.360060][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.374320][ T5698] gspca_ov534_9: Unknown sensor 0000 [ 503.374577][ T5698] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 503.407911][ T5698] usb 2-1: USB disconnect, device number 52 [ 504.034080][ T5698] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 504.117871][T11747] CIFS: VFS: Error connecting to socket. Aborting operation. [ 504.117926][T11747] CIFS: VFS: cifs_mount failed w/return code = -4 [ 504.188151][ T5698] usb 2-1: config 1 interface 0 has no altsetting 0 [ 504.219859][ T5698] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 504.219893][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.219915][ T5698] usb 2-1: Product: syz [ 504.219931][ T5698] usb 2-1: Manufacturer: syz [ 504.219946][ T5698] usb 2-1: SerialNumber: syz [ 505.096600][T11751] Set syz1 is full, maxelem 65536 reached [ 505.477489][T11784] CIFS: Attempting to mount //127.0.0.1/share [ 505.500985][T11784] CIFS: VFS: Error connecting to socket. Aborting operation. [ 505.501024][T11784] CIFS: VFS: cifs_mount failed w/return code = -111 [ 505.791210][T11793] fuse: fd is not a fuse device [ 505.872279][T11796] netlink: 'syz.0.1890': attribute type 21 has an invalid length. [ 505.872354][T11796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1890'. [ 506.141301][T11800] fuse: fd is not a fuse device [ 506.141640][T11800] fuse: fd is not a fuse device [ 506.141930][T11800] fuse: fd is not a fuse device [ 506.142294][T11800] fuse: fd is not a fuse device [ 506.148605][T11800] fuse: fd is not a fuse device [ 506.149303][T11800] fuse: fd is not a fuse device [ 506.153329][T11800] fuse: fd is not a fuse device [ 506.158769][T11800] fuse: fd is not a fuse device [ 506.168416][T11800] fuse: fd is not a fuse device [ 506.178285][T11800] fuse: fd is not a fuse device [ 506.180705][T11800] fuse: fd is not a fuse device [ 506.209929][T11800] fuse: fd is not a fuse device [ 506.210346][T11800] fuse: fd is not a fuse device [ 506.210651][T11800] fuse: fd is not a fuse device [ 506.222400][T11800] fuse: fd is not a fuse device [ 506.222779][T11800] fuse: fd is not a fuse device [ 506.223082][T11800] fuse: fd is not a fuse device [ 506.224106][T11800] fuse: fd is not a fuse device [ 506.224431][T11800] fuse: fd is not a fuse device [ 506.236420][T11800] fuse: fd is not a fuse device [ 506.242738][T11800] fuse: fd is not a fuse device [ 506.243168][T11800] fuse: fd is not a fuse device [ 506.243425][T11800] fuse: fd is not a fuse device [ 506.259810][T11800] fuse: fd is not a fuse device [ 506.269541][T11800] fuse: fd is not a fuse device [ 506.270411][T11800] fuse: fd is not a fuse device [ 506.285134][T11800] fuse: fd is not a fuse device [ 506.307897][T11800] fuse: fd is not a fuse device [ 506.308166][T11800] fuse: fd is not a fuse device [ 506.308357][T11800] fuse: fd is not a fuse device [ 506.308659][T11800] fuse: fd is not a fuse device [ 506.308908][T11800] fuse: fd is not a fuse device [ 506.309134][T11800] fuse: fd is not a fuse device [ 506.640613][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.640723][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.792353][ T5698] usb 2-1: USB disconnect, device number 53 [ 507.244186][ T5698] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 507.394137][ T5698] usb 2-1: Using ep0 maxpacket: 16 [ 507.396335][ T5698] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 507.396361][ T5698] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 507.398824][ T5698] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 507.398851][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.398871][ T5698] usb 2-1: Product: syz [ 507.398891][ T5698] usb 2-1: Manufacturer: syz [ 507.398902][ T5698] usb 2-1: SerialNumber: syz [ 507.422049][T11812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 507.705425][T11824] CIFS: Attempting to mount //127.0.0.1/share [ 507.729462][T11826] sctp: [Deprecated]: syz.0.1900 (pid 11826) Use of int in maxseg socket option. [ 507.729462][T11826] Use struct sctp_assoc_value instead [ 507.910626][ T5698] usb 2-1: USB disconnect, device number 54 [ 508.469354][T11838] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.484492][T11838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 508.537762][T11824] CIFS: VFS: Error connecting to socket. Aborting operation. [ 508.537801][T11824] CIFS: VFS: cifs_mount failed w/return code = -4 [ 508.617628][T11841] netlink: 'syz.2.1906': attribute type 21 has an invalid length. [ 508.617689][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1906'. [ 508.921174][ T38] audit: type=1326 audit(1785678695.565:19): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11851 comm="syz.1.1911" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18591ae019 code=0x0 [ 509.053296][T11859] netlink: 'syz.1.1913': attribute type 2 has an invalid length. [ 509.091789][T11861] CIFS: Attempting to mount //127.0.0.1/share [ 509.183073][T11865] netlink: 'syz.3.1915': attribute type 2 has an invalid length. [ 509.374116][ T5329] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 509.524160][ T5329] usb 2-1: device descriptor read/64, error -71 [ 509.584290][T11871] netlink: 'syz.0.1917': attribute type 21 has an invalid length. [ 509.584342][T11871] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1917'. [ 509.764133][ T5329] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 509.813419][T11876] fuse: fd is not a fuse device [ 509.840899][T11876] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1919'. [ 509.840930][T11876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.858279][T11876] tmpfs: Bad value for 'mpol' [ 509.943206][T11861] CIFS: VFS: Error connecting to socket. Aborting operation. [ 509.943244][T11861] CIFS: VFS: cifs_mount failed w/return code = -4 [ 509.944062][ T5329] usb 2-1: device descriptor read/64, error -71 [ 510.045366][ T5329] usb usb2-port1: attempt power cycle [ 510.072918][T11878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.129072][T11878] dvmrp0: entered allmulticast mode [ 510.474080][ T5329] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 510.497239][T11900] netlink: 'syz.0.1927': attribute type 21 has an invalid length. [ 510.497315][T11900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1927'. [ 510.505085][ T5329] usb 2-1: device descriptor read/8, error -71 [ 510.741124][T11906] CIFS: Attempting to mount //127.0.0.1/share [ 510.756540][ T5329] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 510.777702][ T5329] usb 2-1: device descriptor read/8, error -71 [ 510.779166][T11906] CIFS: VFS: Error connecting to socket. Aborting operation. [ 510.779224][T11906] CIFS: VFS: cifs_mount failed w/return code = -111 [ 510.884657][ T5329] usb usb2-port1: unable to enumerate USB device [ 511.327265][T11917] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 511.327306][T11917] netlink: 'syz.2.1932': attribute type 1 has an invalid length. [ 511.534775][T11920] overlayfs: failed to clone lowerpath [ 511.778837][T11928] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 511.783036][T11928] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 511.823404][T11930] No source specified [ 512.086885][T11943] CIFS: Attempting to mount //127.0.0.1/share [ 512.087711][T11943] CIFS: VFS: Error connecting to socket. Aborting operation. [ 512.087798][T11943] CIFS: VFS: cifs_mount failed w/return code = -101 [ 512.277291][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1941'. [ 512.473058][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'. [ 512.589253][T11957] 9p: Bad value for 'rfdno' [ 513.141905][T11971] CIFS: Attempting to mount //127.0.0.1/share [ 513.436846][T11987] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1952'. [ 513.854139][ T5771] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 514.011359][ T5771] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 514.011396][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.049553][ T5771] usb 2-1: config 0 descriptor?? [ 514.063844][T11971] CIFS: VFS: Error connecting to socket. Aborting operation. [ 514.064752][T11971] CIFS: VFS: cifs_mount failed w/return code = -4 [ 514.257775][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.258442][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.385756][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.390393][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.794386][ T5771] ath6kl: Failed to submit usb control message: -71 [ 514.794441][ T5771] ath6kl: unable to send the bmi data to the device: -71 [ 514.794459][ T5771] ath6kl: Unable to send get target info: -71 [ 514.843104][ T5771] ath6kl: Failed to init ath6kl core: -71 [ 514.851902][ T5771] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 514.879870][ T5771] usb 2-1: USB disconnect, device number 59 [ 515.058968][T12024] CIFS: Attempting to mount //127.0.0.1/share [ 515.479181][ T38] audit: type=1800 audit(1785678702.125:20): pid=12043 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.1968" name="file0" dev="overlay" ino=1748 res=0 errno=0 [ 515.483482][T12021] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5606] was attempted by " [ 515.547968][T12043] overlay: filesystem on ./file1 not supported as upperdir [ 515.599169][ T38] audit: type=1800 audit(1785678702.215:21): pid=12047 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.1.1968" name="file0" dev="overlay" ino=1751 res=0 errno=0 [ 515.906452][T12024] CIFS: VFS: Error connecting to socket. Aborting operation. [ 515.906518][T12024] CIFS: VFS: cifs_mount failed w/return code = -4 [ 517.086356][T12092] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1985'. [ 517.614090][ T5698] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 517.777256][ T5698] usb 2-1: unable to get BOS descriptor or descriptor too short [ 517.778634][ T5698] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 517.778660][ T5698] usb 2-1: config 1 has an invalid interface association descriptor of length 3, skipping [ 517.778680][ T5698] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.778706][ T5698] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 517.778722][ T5698] usb 2-1: config 1 has no interface number 1 [ 517.778920][ T5698] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.781683][ T5698] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 517.781711][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.781737][ T5698] usb 2-1: Product: syz [ 517.781748][ T5698] usb 2-1: Manufacturer: syz [ 517.781758][ T5698] usb 2-1: SerialNumber: syz [ 518.061133][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.264576][ T5698] usb 2-1: USB disconnect, device number 60 [ 518.399858][T12109] udevd[12109]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.926509][T12118] hfs: unable to load iocharset "io#harset" [ 519.116555][T12122] tmpfs: Bad value for 'mpol' [ 520.206365][ T5771] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 520.374204][ T5771] usb 2-1: Using ep0 maxpacket: 8 [ 520.376707][ T5771] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 520.376760][ T5771] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 520.376794][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.761932][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.917711][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.027954][ T5771] usb 2-1: string descriptor 0 read error: -71 [ 521.139841][ T5771] hub 2-1:32.0: USB hub found [ 521.160664][ T5771] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 521.441518][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.488559][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.530855][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.538994][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.587940][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.600473][ T5771] usb 2-1: USB disconnect, device number 61 [ 524.075030][ T4912] Bluetooth: hci4: command tx timeout [ 524.716175][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.716629][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.717197][T12158] bridge_slave_0: entered allmulticast mode [ 524.721072][T12158] bridge_slave_0: entered promiscuous mode [ 524.766255][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.766612][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.766949][T12158] bridge_slave_1: entered allmulticast mode [ 524.770783][T12158] bridge_slave_1: entered promiscuous mode [ 524.873527][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.893832][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.971652][T12158] team0: Port device team_slave_0 added [ 524.983359][T12158] team0: Port device team_slave_1 added [ 525.102270][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.102290][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.102322][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.150716][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.150734][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.150767][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.389441][T12268] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 525.389465][T12268] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2037'. [ 525.389483][T12268] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 525.548539][T12158] hsr_slave_0: entered promiscuous mode [ 525.587455][T12158] hsr_slave_1: entered promiscuous mode [ 525.589561][T12158] debugfs: 'hsr0' already exists in 'hsr' [ 525.589588][T12158] Cannot create hsr debugfs directory [ 525.744043][ T5771] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 525.900603][ T5771] usb 2-1: Using ep0 maxpacket: 8 [ 525.903657][ T5771] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 525.903731][ T5771] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 525.903778][ T5771] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 525.903805][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.993241][ T5771] usb 2-1: config 0 descriptor?? [ 526.154979][ T4912] Bluetooth: hci4: command tx timeout [ 526.226554][ T5771] usb 2-1: string descriptor 0 read error: -71 [ 526.257259][ T5771] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 526.287827][ T5771] usb 2-1: USB disconnect, device number 62 [ 526.542768][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2040'. [ 526.827930][T12277] fuse: fd is not a fuse device [ 526.922115][T12293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.527931][T12303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.527951][T12303] IPv6: NLM_F_CREATE should be set when creating new route [ 527.528161][T12303] IPv6: NLM_F_CREATE should be set when creating new route [ 527.528192][T12303] IPv6: NLM_F_CREATE should be set when creating new route [ 527.737282][T12158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.251299][ T4912] Bluetooth: hci4: command tx timeout [ 528.340403][T12158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.440157][T12315] openvswitch: netlink: IP tunnel dst address not specified [ 528.790154][T12158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.064191][T12323] 9p: Bad value for 'rfdno' [ 529.170665][T12158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.934629][T12335] fuse: fd is not a fuse device [ 530.119895][T12158] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.207845][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.213109][T12158] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.283313][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.298228][T12158] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 530.314512][ T4912] Bluetooth: hci4: command tx timeout [ 530.353174][T12340] netlink: 'syz.0.2055': attribute type 1 has an invalid length. [ 530.353198][T12340] netlink: 'syz.0.2055': attribute type 1 has an invalid length. [ 530.422768][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.443557][T12158] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 530.472247][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2055'. [ 530.557977][T12158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.656482][T12348] netlink: 'syz.0.2058': attribute type 21 has an invalid length. [ 530.660624][T12348] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2058'. [ 530.950951][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.031028][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.059781][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.060011][ T5802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.132473][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.132647][ T5805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.854085][ T5329] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 532.021353][ T5329] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 532.021384][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.021405][ T5329] usb 2-1: Product: syz [ 532.021418][ T5329] usb 2-1: Manufacturer: syz [ 532.021433][ T5329] usb 2-1: SerialNumber: syz [ 532.062028][ T5329] usb 2-1: config 0 descriptor?? [ 532.120311][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.273152][ T5329] usb 2-1: Firmware version (0.0) predates our first public release. [ 532.273180][ T5329] usb 2-1: Please update to version 0.2 or newer [ 532.608142][ T5329] usb 2-1: USB disconnect, device number 63 [ 532.792983][T12394] netlink: 'syz.3.2067': attribute type 21 has an invalid length. [ 532.960785][T12394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2067'. [ 533.199713][T12158] veth0_vlan: entered promiscuous mode [ 533.276801][T12158] veth1_vlan: entered promiscuous mode [ 533.470218][ T4912] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 533.568750][T12158] veth0_macvtap: entered promiscuous mode [ 533.619127][T12158] veth1_macvtap: entered promiscuous mode [ 533.713678][T12158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.842898][T12158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.882139][ T8360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.882523][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.882568][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.882609][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.020182][T12415] trusted_key: encrypted_key: master key parameter ' [ 534.020182][T12415] îŽØf8²Ö5.Ùÿf8‚ÏÇ-&&e.ÊÇ8f5' is invalid [ 534.289346][T12411] hub 1-0:1.0: USB hub found [ 534.296798][T12411] hub 1-0:1.0: 1 port detected [ 534.689651][T12423] netlink: 'syz.0.2075': attribute type 21 has an invalid length. [ 535.021338][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2075'. [ 535.546459][T12426] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2074'. [ 535.735193][T12434] netlink: 'syz.1.2076': attribute type 5 has an invalid length. [ 535.735216][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2076'. [ 536.454905][T12441] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 536.487396][T12440] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 536.578643][ T5802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.578665][ T5802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.864034][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 536.975306][ T5817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.975328][ T5817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.979146][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'. [ 537.037293][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.076675][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 537.076718][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.076739][ T10] usb 2-1: Product: syz [ 537.076754][ T10] usb 2-1: Manufacturer: syz [ 537.076767][ T10] usb 2-1: SerialNumber: syz [ 537.183128][ T10] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 537.183709][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 87 [ 537.183789][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 537.219361][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 537.219460][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 537.219548][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 537.219716][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 537.219805][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 85 [ 537.219913][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 537.247357][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 537.259116][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 537.259413][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 537.259629][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 537.259864][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 537.260105][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 86 [ 537.260299][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 537.383734][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 537.444166][ T4912] Bluetooth: hci2: command 0x2016 tx timeout [ 537.505701][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.510556][T12440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.541689][ T4912] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 537.541996][ T4912] Bluetooth: hci3: Injecting HCI hardware error event [ 537.545080][ T4912] Bluetooth: hci3: hardware error 0x00 [ 537.576961][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.582982][T12440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.041918][ T10] usb 2-1: USB disconnect, device number 64 [ 538.091301][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 538.142499][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 538.161993][ T10] keyspan 2-1:1.0: device disconnected [ 538.710372][T12431] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.833275][T12431] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.846815][T12431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.871493][T12431] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.875300][T12431] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 539.355833][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 539.554751][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 539.560268][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 539.560307][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.560328][ T9] usb 2-1: Product: syz [ 539.560343][ T9] usb 2-1: Manufacturer: syz [ 539.560359][ T9] usb 2-1: SerialNumber: syz [ 539.588385][ T9] usb 2-1: config 0 descriptor?? [ 539.661156][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 539.678357][ T4912] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 539.857237][T12499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.858770][T12499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.165484][ T9] gspca_ov534_9: reg_w failed -110 [ 540.480499][ T5817] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.565496][ T9] gspca_ov534_9: Unknown sensor 0000 [ 540.565599][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 540.572466][ T9] usb 2-1: USB disconnect, device number 65 [ 540.678203][ T5699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 540.834023][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 540.837094][ T5699] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 540.837123][ T5699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.837142][ T5699] usb 3-1: config 0 has no interface number 0 [ 540.880016][ T5699] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 540.880052][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.880073][ T5699] usb 3-1: Product: syz [ 540.880089][ T5699] usb 3-1: Manufacturer: syz [ 540.880105][ T5699] usb 3-1: SerialNumber: syz [ 540.926528][ T5699] usb 3-1: config 0 descriptor?? [ 541.011878][ T5817] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.120468][ T4912] Bluetooth: hci1: command tx timeout [ 541.168548][ T5699] imon 3-1:0.219: unable to register, err -19 [ 541.197833][ T5699] usb 3-1: USB disconnect, device number 3 [ 541.373286][ T5817] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.390724][ T38] audit: type=1326 audit(1785678728.015:22): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12543 comm="syz.0.2106" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabe69ce019 code=0x0 [ 541.394685][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 541.584263][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 541.587086][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 541.587115][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 541.587138][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 541.587161][ T9] usb 2-1: config 1 has no interface number 0 [ 541.587210][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.587237][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 541.587283][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 541.587301][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.648285][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 541.705492][ T5817] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.248176][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 542.517019][ T32] usb 2-1: USB disconnect, device number 66 [ 542.531139][ T32] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 542.635051][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 542.636266][T12566] netlink: 730 bytes leftover after parsing attributes in process `syz.0.2111'. [ 542.787787][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 542.792940][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 542.792970][ T9] usb 3-1: config 0 has no interface number 0 [ 542.793017][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 542.793047][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 542.841426][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 542.841465][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 542.841497][ T9] usb 3-1: Product: syz [ 542.841514][ T9] usb 3-1: SerialNumber: syz [ 542.886015][ T9] usb 3-1: config 0 descriptor?? [ 542.922378][ T9] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 543.091281][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12 [ 543.194123][ T4912] Bluetooth: hci1: command tx timeout [ 543.231938][T12574] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 545.277530][ T4912] Bluetooth: hci1: command tx timeout [ 546.038064][ T32] usb 3-1: USB disconnect, device number 4 [ 546.039302][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 546.039557][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 546.183981][T12606] netlink: 'syz.1.2118': attribute type 5 has an invalid length. [ 546.184004][T12606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'. [ 546.248065][ T32] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 546.599516][ T5817] dvmrp0: left allmulticast mode [ 546.915911][ T32] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 547.084017][ T32] usb 3-1: device descriptor read/64, error -71 [ 547.360256][ T4912] Bluetooth: hci1: command tx timeout [ 547.365382][ T32] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 547.532320][ T32] usb 3-1: device descriptor read/64, error -71 [ 547.634479][ T32] usb usb3-port1: attempt power cycle [ 548.039484][ T32] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 548.118322][ T32] usb 3-1: device descriptor read/8, error -71 [ 548.304911][ T5817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.364663][ T5817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.406561][ T5817] bond0 (unregistering): Released all slaves [ 548.414156][ T32] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 548.445720][ T32] usb 3-1: device descriptor read/8, error -71 [ 548.465475][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.465870][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.466109][T12489] bridge_slave_0: entered allmulticast mode [ 548.469872][T12489] bridge_slave_0: entered promiscuous mode [ 548.531965][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 548.564523][ T32] usb usb3-port1: unable to enumerate USB device [ 548.678549][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.678891][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.679180][T12489] bridge_slave_1: entered allmulticast mode [ 548.682877][T12489] bridge_slave_1: entered promiscuous mode [ 548.805596][T12631] netlink: 'syz.0.2127': attribute type 5 has an invalid length. [ 548.805620][T12631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2127'. [ 548.964284][ T5817] tipc: Left network mode [ 548.972909][T12489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.031813][T12489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.159252][T12489] team0: Port device team_slave_0 added [ 549.168120][T12489] team0: Port device team_slave_1 added [ 549.310600][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.310616][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.310640][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.316386][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.316428][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.316512][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.745289][ T5817] rxrpc: Assertion failed [ 549.746229][ T5817] ------------[ cut here ]------------ [ 549.746238][ T5817] kernel BUG at net/rxrpc/conn_object.c:488! [ 549.746285][ T5817] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 549.746311][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: kworker/u8:46 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 549.746332][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.746344][ T5817] Workqueue: netns cleanup_net [ 549.746375][ T5817] RIP: 0010:rxrpc_destroy_all_connections+0x426/0x430 [ 549.746401][ T5817] Code: 80 c1 03 38 c1 0f 8c 2e fe ff ff 48 89 df e8 c1 5a be f7 e9 21 fe ff ff e8 07 04 52 f7 48 c7 c7 60 96 8e 8c e8 bb c7 b3 f6 90 <0f> 0b 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 549.746417][ T5817] RSP: 0018:ffffc90006117880 EFLAGS: 00010246 [ 549.746431][ T5817] RAX: 0000000000000017 RBX: ffff88805c7140a4 RCX: d8b7aabda4a57600 [ 549.746444][ T5817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.746455][ T5817] RBP: ffffc90006117970 R08: 0000000000000000 R09: 0000000000000000 [ 549.746466][ T5817] R10: dffffc0000000000 R11: fffff52000c22ec1 R12: dffffc0000000000 [ 549.746479][ T5817] R13: ffff88805c7140c8 R14: ffff88805c7140b8 R15: ffff88805c7140d8 [ 549.746492][ T5817] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 549.746506][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.746517][ T5817] CR2: 00007f480183c368 CR3: 000000003a4b2000 CR4: 00000000003526f0 [ 549.746533][ T5817] Call Trace: [ 549.746540][ T5817] [ 549.746549][ T5817] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 549.746572][ T5817] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.746590][ T5817] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.746606][ T5817] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 549.746622][ T5817] ? __timer_delete_sync+0x538/0x600 [ 549.746655][ T5817] rxrpc_exit_net+0x77/0xc0 [ 549.746686][ T5817] ops_undo_list+0x43d/0x8d0 [ 549.746711][ T5817] ? __pfx_ops_undo_list+0x10/0x10 [ 549.746733][ T5817] ? rt_spin_unlock+0x157/0x200 [ 549.746758][ T5817] ? idr_destroy+0x21b/0x2a0 [ 549.746785][ T5817] ? rt_spin_unlock+0x163/0x200 [ 549.746808][ T5817] cleanup_net+0x575/0x810 [ 549.746832][ T5817] ? __pfx_cleanup_net+0x10/0x10 [ 549.746856][ T5817] ? rcu_is_watching+0x15/0xb0 [ 549.746877][ T5817] ? process_one_work+0x7fd/0x1480 [ 549.746895][ T5817] process_one_work+0xaaf/0x1480 [ 549.746920][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 549.746937][ T5817] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.746977][ T5817] ? assign_work+0x3cf/0x5d0 [ 549.747001][ T5817] worker_thread+0xb05/0x10d0 [ 549.747028][ T5817] kthread+0x388/0x470 [ 549.747052][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 549.747070][ T5817] ? __pfx_kthread+0x10/0x10 [ 549.747094][ T5817] ret_from_fork+0x514/0xb70 [ 549.747120][ T5817] ? __pfx_ret_from_fork+0x10/0x10 [ 549.747150][ T5817] ? __switch_to+0xc89/0x1420 [ 549.747173][ T5817] ? __pfx_kthread+0x10/0x10 [ 549.747197][ T5817] ret_from_fork_asm+0x1a/0x30 [ 549.747230][ T5817] [ 549.747243][ T5817] Modules linked in: [ 549.747284][ T5817] ---[ end trace 0000000000000000 ]--- [ 549.747428][ T5817] RIP: 0010:rxrpc_destroy_all_connections+0x426/0x430 [ 549.747458][ T5817] Code: 80 c1 03 38 c1 0f 8c 2e fe ff ff 48 89 df e8 c1 5a be f7 e9 21 fe ff ff e8 07 04 52 f7 48 c7 c7 60 96 8e 8c e8 bb c7 b3 f6 90 <0f> 0b 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 549.747475][ T5817] RSP: 0018:ffffc90006117880 EFLAGS: 00010246 [ 549.747492][ T5817] RAX: 0000000000000017 RBX: ffff88805c7140a4 RCX: d8b7aabda4a57600 [ 549.747519][ T5817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 549.747532][ T5817] RBP: ffffc90006117970 R08: 0000000000000000 R09: 0000000000000000 [ 549.747545][ T5817] R10: dffffc0000000000 R11: fffff52000c22ec1 R12: dffffc0000000000 [ 549.747560][ T5817] R13: ffff88805c7140c8 R14: ffff88805c7140b8 R15: ffff88805c7140d8 [ 549.747577][ T5817] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 549.747601][ T5817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.747615][ T5817] CR2: 00007f480183c368 CR3: 000000003a4b2000 CR4: 00000000003526f0 [ 549.747664][ T5817] Kernel panic - not syncing: Fatal exception [ 549.748269][ T5817] Kernel Offset: disabled