last executing test programs: 2m19.275736455s ago: executing program 4 (id=1788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 2m19.149195735s ago: executing program 4 (id=1789): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {{'ecb(arc4)-generic\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000001580)={0x2, 0x0, 0x4, 0x3a4, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000100)=0x1, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000001500)={&(0x7f0000001280), 0xc, &(0x7f00000014c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r6, @ANYBLOB="000226bd7000fddbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$6lowpan_enable(r1, &(0x7f00000015c0)='1', 0x1) futex_waitv(&(0x7f0000000dc0)=[{0x100, &(0x7f0000000100)=0x61, 0x2}, {0x5, &(0x7f0000000180)=0x8, 0x82}, {0x7, &(0x7f00000001c0)=0x10, 0x82}, {0x9, &(0x7f0000000200)=0xc084, 0x82}, {0x7fffffff, &(0x7f0000000300)=0x266, 0x82}, {0x7fffffffffffffff, &(0x7f0000000340)=0x8, 0x80}, {0xe01f, &(0x7f0000000380)=0x3, 0x2}, {0x1eb, &(0x7f00000003c0)=0x3, 0x186}, {0x6, &(0x7f0000000400)=0x5, 0x82}, {0x5, &(0x7f0000000440)=0x9, 0x2}, {0x6992, &(0x7f0000000480)=0x1, 0x2}, {0x9, &(0x7f00000004c0)=0x8000000000000001, 0x2}, {0x86, &(0x7f0000000500), 0x82}, {0x9, &(0x7f0000000540)=0xd, 0x82}, {0xeb, &(0x7f0000000580)=0xfffffffffffffff7, 0x82}, {0x9, &(0x7f00000005c0)=0x401, 0x2}, {0x6, &(0x7f0000000600)=0x100000001, 0x82}, {0x1, &(0x7f0000000640)=0xd, 0x2}, {0x8, &(0x7f0000000680)=0x218e9854, 0x82}, {0x6, &(0x7f00000006c0)=0x7fff, 0x82}, {0x4fae, &(0x7f0000000700)=0x7, 0x2}, {0x8000, &(0x7f0000000740)=0x8, 0x82}, {0x8, &(0x7f0000000780)=0x3, 0x82}, {0x7, &(0x7f00000007c0)=0x6, 0x82}, {0xe, &(0x7f0000000800)=0x7, 0x2}, {0x3, &(0x7f0000000840)=0x5, 0x2}, {0x9, &(0x7f0000000880)=0x7, 0x82}, {0xffffffffffffffff, &(0x7f00000008c0)=0xfffffffffffffff8, 0x2}, {0x2, &(0x7f0000000900)=0x3, 0x82}, {0xfffffffffffffff9, &(0x7f0000000940)=0x100000001, 0x2}, {0x1, &(0x7f0000000980)=0x3, 0x2}, {0x10000, &(0x7f00000009c0)=0x4, 0x2}, {0x3, &(0x7f0000000a00)=0x3}, {0x1, &(0x7f0000000a40)=0xad, 0x82}, {0x4, &(0x7f0000000a80)=0x6, 0x2}, {0xffffffff, &(0x7f0000000ac0)=0x2, 0x2}, {0xffffffffffffffff, &(0x7f0000000b00)=0x3, 0x82}, {0x2, &(0x7f0000000b40)=0x7, 0x2}, {0x7, &(0x7f0000000b80)=0x941, 0x82}, {0xc, &(0x7f0000000bc0)=0x1, 0x82}, {0x7f, &(0x7f0000000c00), 0x2}, {0xb15, &(0x7f0000000c40)=0x5, 0x82}, {0x58, &(0x7f0000000c80)=0x5, 0x82}, {0x99b, &(0x7f0000000cc0)=0xf, 0x82}, {0x7, &(0x7f0000000d00), 0x82}, {0x0, &(0x7f0000000d40)=0x8000000000000001, 0x82}, {0x5, &(0x7f0000000d80)=0x3, 0x2}], 0x2f, 0x0, &(0x7f0000001240), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m17.955339964s ago: executing program 4 (id=1796): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000006c0)={0x3, 0x0, [{0xdddd0000, 0x66, &(0x7f00000001c0)=""/102}, {0xd000, 0x3d, &(0x7f0000000180)=""/61}, {0xdddd0000, 0xad, &(0x7f0000000780)=""/173}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) getpid() ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, 0x0, 0x0, 0x7, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) arch_prctl$ARCH_SHSTK_DISABLE(0x5003, 0x0) 2m12.994781374s ago: executing program 4 (id=1803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x80842, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xd}, 0x1c) clock_gettime(0x0, &(0x7f00000000c0)) setitimer(0x0, 0x0, &(0x7f0000000000)) r4 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r4, 0x15b77000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)) close(0xffffffffffffffff) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m11.123273312s ago: executing program 4 (id=1808): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) mmap(&(0x7f000087d000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x14192000) 2m10.838951952s ago: executing program 4 (id=1811): pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) close(0x3) fcntl$addseals(r4, 0x409, 0x7) (async) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000001c0)={r4, 0x1, 0x0, 0x8000}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 1m55.475597201s ago: executing program 32 (id=1811): pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) (async) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r4, 0xffff) close(0x3) fcntl$addseals(r4, 0x409, 0x7) (async) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000001c0)={r4, 0x1, 0x0, 0x8000}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 15.741334505s ago: executing program 2 (id=2181): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 15.451285019s ago: executing program 2 (id=2184): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x7800, 0x1, 0x8, 0xf1c5, {{0x2c, 0x4, 0x0, 0xd, 0xb0, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010106, {[@ssrr={0x89, 0x3, 0x4f}, @timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x4, [{@multicast1, 0xa699}, {@dev={0xac, 0x14, 0x14, 0x19}, 0xba}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x2d, 0x0}, 0x7}]}, @rr={0x7, 0xf, 0x12, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x38}, @local]}, @lsrr={0x83, 0x7, 0xff, [@broadcast]}, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x1, [0x81, 0x29, 0x8000, 0x100]}, @noop, @cipso={0x86, 0x45, 0x3, [{0x6, 0x4, "134d"}, {0x6, 0x10, "2ce8d9b856f39a1c538174a78c4c"}, {0x0, 0x12, "e2d62d928e1d92d500c0f6ff0000009a"}, {0x5, 0x8, "483d646f1f1d"}, {0x6, 0x4, "4aaa"}, {0x7, 0xd, "215a95435c02329fef9872"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7, 0x7}, {0x3, 0x7}, {0xfff3, 0x6}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000013000500000000000000000000000000ee1c5d95754e9f81b2cc8a04d7138a176ae0c177845c3023a185eeb2ea247caeed0b4b090eaff713ecf2497297091ef124ca98ea710a6cf1050c69cf9d469cfa8b6c8046a6a2a37e5037f0ce6dda6ff6664c1e46027acafc8625f92d41fa247c7caae1e3de66e8e186f790251b860cd01fa27a3b2622abd4a9", @ANYRES32=0x0, @ANYBLOB="000c00000000000014000300776c616e3100000000000000000000000a0001000180c20000000000"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r9, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={0x5, 0x6, 0x8002, {}, {}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "4a4faa7920a000ad"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) 10.839101503s ago: executing program 2 (id=2196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000017f000001000000000000000000000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c000000000000000000000000000000000020000000000000000020000000000200000000000000000000000000000010000000000000000000000000000000000a000000000000feffffffff7f400002000000000220080000000000000000010000000000000044000500fe8000000000000000ea0000000000aa000000003c00000002"], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 10.17921029s ago: executing program 2 (id=2197): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x1dc, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x490) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000440)={0x4}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000280)={0x1, @vbi={0xe, 0x80000000, 0x2, 0x41414270, [0xd], [0x380, 0xf9], 0x13a}}) 8.490944302s ago: executing program 2 (id=2201): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x98) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet6(0xa, 0x4, 0x8000000003c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c20) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000"], 0x0, 0x4b, 0x0, 0x1, 0x22}, 0x28) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg(r0, 0x0, 0x240040c0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioprio_set$uid(0x0, 0x0, 0x2007) sendfile(r1, r1, 0x0, 0x200000) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000003c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="000701000000e8"], 0x0, 0x0}) 7.872911492s ago: executing program 0 (id=2204): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r1, &(0x7f0000000000)="f5665b28b189bdeea9527fac6b26fc81d811943de9c0e673f9be406c9685a2cb234d3795675c5f4292e2c88895da112792d805db0e8763907b5011bd05dc4a25c6a05b520b36d1a34ee3490529a6e8990af62add34ef6decddf15f274ec1dad3bd52f4450860455d9aa1134e1a4159965e61e68494333a801597f74533e8fe27133f3bcabc8811e9d4d0d91ef20b955b3dc897eeb419d190a689e86889d5eef7fc1991af084ba039c524687f889e4c8f61649bd5617b811cbd00997a0e0c32cfdc2732b25263da8f58577ba9ffaf30a0b06264e434ffb9acb9ae12", 0xdb, 0x4004011, &(0x7f0000000100)={0x23, 0x9, 0x2, 0xa}, 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000140), 0x8, 0x101302) ioctl$I2C_SLAVE(r2, 0x703, 0x34) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000001c0)={@any, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendto$packet(r4, &(0x7f0000000240)="f9eec74f56d5bd289e4866f81db2cced7a9eef69cd847f280bb563c0a79a1da6f361c59fb62368", 0x27, 0x40054, &(0x7f0000000300)={0x11, 0xc, r5, 0x1, 0xd, 0x6, @broadcast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "df807953da"}]}, 0x28}, 0x1, 0x0, 0x0, 0x44814}, 0x2000c084) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f00000004c0)={0xffffffff, 0x800, 0x8000000000000000, 0xce, 0x8, 0x6}) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x19d442, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x77359400}, {0x77359400}}, &(0x7f0000000580)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000800)={r9, r10, r11, 0x3, 0x5f, 0x0, 0x81, 0x80000000, 0x2, 0x56, 0x1, 0x8}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000840)={0x13}) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r12, 0x12, 0x2, &(0x7f0000000880)=""/9, &(0x7f00000008c0)=0x9) write$UHID_INPUT(r4, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001940)={0x9, 0x49433553, 0x2, @stepwise={0x9, 0xc, 0x7fffffff, 0x80000000, 0xffffff22, 0x5}}) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r8, 0x8000000) syz_io_uring_complete(r13) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 6.735392829s ago: executing program 0 (id=2206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newpolicy={0x1bc, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x4e24, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x80009}, {0x0, 0x1, 0x3}, 0xfffffffe}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d6, 0x32}, 0xa, @in=@local, 0x3505, 0x3, 0x3, 0x3, 0x9, 0xb4, 0x7}, {{@in=@loopback, 0x4d3, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x9, 0x1, 0x8000, 0x8}, {{@in=@loopback, 0x4d2, 0x33}, 0xa, @in=@remote, 0x3503, 0x0, 0x2, 0xfa, 0x7, 0xa, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4d4, 0x2b}, 0xa, @in=@multicast2, 0x3501, 0x0, 0x3, 0xf7, 0x1, 0xffffffff, 0x10001}]}]}, 0x1bc}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r2) sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x5c}, 0x6e, 0x0}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {0x0}], 0x2}}], 0x2, 0x4048884) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 6.650671909s ago: executing program 3 (id=2207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000810000006a0a00ff000000002e40000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x8, &(0x7f0000000080)=""/177, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1e}, 0x49) 6.222589s ago: executing program 3 (id=2208): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="82000000000000008f"]) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x7e, 0x25}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="203156000000af80f060e636e33159d88023a36162ef1f6ec20288cb03892edea01d16cda40354343f84315e32b565b11efeb2e73a94527c2f254a9d4542aeb0b9130097cf2e03616223932c927ae06ce802257c16356ff346f09447"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x84, 0x2, "e3f6"}, 0x0}) 6.027435218s ago: executing program 5 (id=2210): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$caif_stream(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xe4, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) tkill(0x0, 0xb) 5.55565472s ago: executing program 0 (id=2212): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e1f, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, 0xffff}, &(0x7f0000000080)=0x90) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) 4.867765187s ago: executing program 0 (id=2213): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) r1 = eventfd2(0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) syz_io_uring_setup(0x23e, &(0x7f00000002c0)={0x0, 0x45d8, 0x10100, 0xfffffff9}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0xc}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0xffffffffffffffff}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 4.737259875s ago: executing program 5 (id=2215): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x11, 0x0, 0x1, [@typed={0x4, 0xc}]}, @typed={0x4, 0x19}]}, 0x20}], 0x1}, 0x300) 4.587156987s ago: executing program 1 (id=2216): recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x12003, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x3f00, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.271862729s ago: executing program 5 (id=2217): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040)={0x2010000}, 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 3.431751959s ago: executing program 1 (id=2218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x2000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.385905536s ago: executing program 0 (id=2219): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.327847409s ago: executing program 5 (id=2220): pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) timerfd_create(0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x3, &(0x7f0000000300)={0x0, 0x1a, 0x3, @thr={&(0x7f0000000280)="6d707077a24ca5cd27a6ac31bba683b93b86c55f3e2fd346c400e683b5d5a0259a3e7a0601f7d268465a30a8", &(0x7f00000002c0)="8e553b57d4d42885d5a06d13b0b4ca2b9846831708205c18e5de"}}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f00000001c0)={{r2, r3+10000000}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.325523769s ago: executing program 2 (id=2221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x6, 0x3, 0x0, 0x1, [@generic="9e71"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r4, &(0x7f00000010c0)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ac1414450000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff00000000000000009607000000000000043d000000000000ef0000000000000000000000060000002c00130020010000000000000000000000000002ac141430000000000000000000000000000000000a000000e40006"], 0x3c8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) (async) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x6, 0x3, 0x0, 0x1, [@generic="9e71"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) connect$can_j1939(r4, &(0x7f00000010c0)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000033000000ac1414450000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff00000000000000009607000000000000043d000000000000ef0000000000000000000000060000002c00130020010000000000000000000000000002ac141430000000000000000000000000000000000a000000e40006"], 0x3c8}}, 0x0) (async) 3.000673112s ago: executing program 3 (id=2222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf0900000052000026090600000003e7040000000600000018010000756c6c2700000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.292324652s ago: executing program 0 (id=2223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00140d0000005e6424818327b2369deca65eb2ffc0b94cd7a15e3f9fc44054657964c853181d629f77f12af159416409d8f8fe8d1563dfec77507306a4fbc130745f6a7783061544bbba493da243e4a2affadf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x5, 0xd6, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x1, 0x1, 0xd0, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xc, {{0x8, 0x24, 0x6, 0x0, 0x0, "cbbb05"}, {0x5, 0x24, 0x0, 0x58e}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x1}, [@mdlm_detail={0x4b, 0x24, 0x13, 0x7, "4104a6b43a4707a52ff0433609c7ea4be15ad28889627128ec9dfa71d33ff2c1c20579bdd4b4e2e61bd30ad27da46792d924c1e07d345e18ce129c09fc4b763a8b9364ceaeee75"}, @obex={0x5, 0x24, 0x15, 0x66}, @mdlm={0x15, 0x24, 0x12, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x6, 0x80, 0x7f, 0x1, 0xc5}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x8, 0xe}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x7f, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x2, 0x4f}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfa, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x3, 0x9, 0x0, 0x40, 0x1}, 0x10, &(0x7f0000000200)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x33, 0x0, 0x2, 0x4, 0x2}]}, 0x5, [{0x24, &(0x7f0000000240)=@string={0x24, 0x3, "446d41b460e7489fbff7ec65296279ed570919bdb638c9baec074f9c425d36b708fd"}}, {0xde, &(0x7f0000000280)=@string={0xde, 0x3, "a106a78cd727534c5c0f0f75c6eaf0065b380d5b657dbebdee0c204c9d0d6097d43ba33da7f54c7c37f13f60eac655046c0b64764c54755dbc38007b53d24377428f34359ef572c9c2b29b99710306aa6e00de6f0c276e979151209d57de6ff65192691660411c0f8846879becae1fcfa7215a63ff0f8e75866920a00951adaa82f7c30f4c22d13b03ee1e1c426c23098b2261df12997f11fe7310fc531f88bbf0ce28a5e2a280bf79da12a9c47f01cacc0914d1848fc764d687981c0d04af8ebb94ca864935b1ff5993c5cf8fc726070794642bd984318a92ae77a6"}}, {0x75, &(0x7f0000000400)=ANY=[@ANYBLOB="75039967d05730fe71583b0a153d8268b68ccae655abd4d887c0131f5bd1cbcdb89e657da0f09fdd6e7622092d1fe59871e6efd68e00cc0b4c4d273fc336abe1d52f842934a1a6b947a53acf703e175774bf039567a17607afec86df08c28ae7eff11a9ca77646150076e800b21b8d9000000000"]}, {0x6c, &(0x7f0000000500)=@string={0x6c, 0x3, "2e200289de46382d211fbb3b959629c7b2817508bbc408e914ed141cc858a8908cc43085a2e655de1e5ffc974305e6ce24cb4ddbceb7545afcad04f4abf25761933f428420c5aab1e843c2ae336dfd67e92f6a0e4676ceeeb5bfcc5c9ac973442feb3695dc307d9bf31d"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x20, 0x6, 0xd8, {0xd8, 0x3b, "f9dd41dad6a9e0213403f38dfa9f7ddd2e16c3238faa319ee7e3e55d58506f13a5d496b7d043da669b2bfa47196843a0bdbca0a13994679f6889ba12f2719a0e1bc3e56a7b192389906c72d4609ea5adcf9d485e96218731753b5e218d7d574c2fe416c0cb8869ccc67a3eae1ed3edf51399663e2f7750c8363f885a2c17a11355e6b6bea2c1a6c8259fbe509052c3bea424c77d03916f693b594a29c473e4977a448a5cccc82ea1facc9d8ce23a92a165212346dbdcf523cc551fe82231ba5bdc94f93b4f086624e5c53f4828e3bddce582cd7672d1"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000740)={0x0, 0x17, 0x58, "3f61933cdfbce3217afa1aca28cb8c6691269665b415610c3ec8d6275ccb3ee94cbbd5e6f24a8695f199177218b8561bec806d6023ffd0fda1cc240ca492ec4bbcacb7354d769e7928df99a4c4a42e297c9fd2a28ca2328f"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.191795094s ago: executing program 1 (id=2224): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340), 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000fdffffff0000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016000000000062ad0ca650af8e0cf5dd875e16e7d330cf59fed3455d495c2214d7313cf2c5c7b78efbb5cf0bd1762736cd0a76f2ea7ca230fd5831c59b9397d3c94b9d47c4a387ce5cbfdc74da4b2b21d9dbb786e44b64"], 0x68}, 0x1, 0x7}, 0x0) 2.066332897s ago: executing program 3 (id=2225): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$caif_stream(0x25, 0x1, 0x0) r4 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xe4, 0x0, 0x9, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) tkill(r4, 0xb) 1.305275593s ago: executing program 1 (id=2226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) connect$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r2 = inotify_init1(0x80800) renameat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60004ce) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYBLOB="a0a7281607e156fdbb4039e6729178048c381450f68e40be79146f48c3602920de79385aff8b08f658e3887cd2ff3d4b022199389a4d10cf111aee752f6b4ced9bc0f1bd03a643e9227f4356a3ac2918fd1d6948109a9c735edf321843628dfb66d7b7322ca6f39d074fa8305ff426d5dfc782855176ac1472de5cc46e4752284705d803cd2795f4f977755846", @ANYRESOCT=r0], 0x50) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xc4000103) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40801) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/148, 0x94}], 0x4}, 0x0) unshare(0x22020400) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) fcntl$setstatus(r6, 0x4, 0x40000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x1a1480, 0x0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x40946400, 0x0) process_mrelease(r3, 0x0) 1.183874523s ago: executing program 3 (id=2227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000017f000001000000000000000000000000000000004e2300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c000000000000000000000000000000000020000000000000000020000000000200000000000000000000000000000010000000000000000000000000000000000a000000000000feffffffff7f4000020000000000200880ffffffffffffff010000000000000044000500fe8000000000000000ea0000000000aa000000003c00000002000000e000000100000000000000000000000006000000040377"], 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.137095029s ago: executing program 5 (id=2228): recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x12003, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x4000, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 880.606875ms ago: executing program 3 (id=2229): fsopen(0x0, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x7fffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0) chdir(&(0x7f0000000040)='./file0\x00') ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) syz_usb_connect$cdc_ncm(0x3, 0xee, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003020000402505a1a44000010203010902dc0002010270020904000001020d00000524060001052400ff010d240f010101000006000700b806241a0700205624130112617a37d69d6e1082be915d6ab69c0d6d8a2a2f18eef738bb4fb47b70a59cd2df2c57fd61f09db66fd4b13ec0145ee3b9e64afe54803035a5b833c761d0c66010e0af8316694c3578bdb8a9bfaeaded24491524120600a317a88b045e4f01a607c0ffcb7e392a1524120200a317a88b045e4f01a607c0ffcb7e392a0905810340000988ccdf1000b4590904010000020d00000904010102020d000009058202100005040209050302"], &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x7a, 0x0, 0x0, 0x0, 0x7}, 0x1a, &(0x7f0000000440)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x9, 0xd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x1, 0x1, 0x5, 0x95}]}, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000540)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x820}}, {0x2, &(0x7f0000000740)=@string={0x2}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc01}}]}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) (async) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, 0x0) mount(0x0, &(0x7f0000001540)='./file0\x00', 0x0, 0x912460, 0x0) 823.756053ms ago: executing program 1 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x19, &(0x7f0000000400)=""/25, 0x41100, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x8, 0x2, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000500)=[{0x4, 0x5, 0xc, 0xa}, {0x3, 0x5, 0x5, 0x2}, {0x5, 0x5, 0x7, 0x1}], 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000280)=r2, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 15.247881ms ago: executing program 5 (id=2231): clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x9, 0x5a6c103, 0x0, 0x1}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x9, 0x5a6c103, 0x0, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x18, 0x1, 0x0, 0x0) (async) socketpair(0x18, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x8a, 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) (async) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000540)=0x15, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 0s ago: executing program 1 (id=2232): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000796412000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000ff80000000106608000000001000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) kernel console output (not intermixed with test programs): media [ 580.518586][T10987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1483'. [ 581.282945][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 581.704195][ T9] usb 1-1: device descriptor read/64, error -71 [ 582.227066][T11004] netlink: 'syz.4.1488': attribute type 29 has an invalid length. [ 582.236129][T11004] netlink: 'syz.4.1488': attribute type 29 has an invalid length. [ 582.245292][T11004] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1488'. [ 582.747046][T11004] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 583.405761][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 583.880975][T11011] netlink: 'syz.2.1489': attribute type 10 has an invalid length. [ 584.444686][T11024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1492'. [ 585.399760][T11031] can0: slcan on pty24. [ 585.517513][T11030] can0 (unregistered): slcan off pty24. [ 585.726455][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 585.726913][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 585.978274][T11033] ceph: No mds server is up or the cluster is laggy [ 586.255140][T11038] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 586.272484][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 586.272620][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 587.035450][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'. [ 587.887274][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 589.003847][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 589.055139][T11064] netlink: 'syz.3.1504': attribute type 29 has an invalid length. [ 589.067140][T11064] netlink: 'syz.3.1504': attribute type 29 has an invalid length. [ 589.081852][T11064] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1504'. [ 589.232421][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.438775][T11064] syz.3.1504: attempt to access beyond end of device [ 589.438775][T11064] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 589.510433][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.649878][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 589.905591][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 590.008751][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.009479][T11062] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1505'. [ 590.259712][ T43] usb 1-1: config 0 descriptor?? [ 590.371825][ T43] usb 1-1: can't set config #0, error -71 [ 590.543740][ T43] usb 1-1: USB disconnect, device number 37 [ 591.402910][T11083] binder: BINDER_SET_CONTEXT_MGR already set [ 591.409675][T11083] binder: 11082:11083 ioctl 4018620d 200000000040 returned -16 [ 591.569335][T11089] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 591.639449][T11089] overlayfs: failed to set xattr on upper [ 591.701382][T11089] overlayfs: ...falling back to redirect_dir=nofollow. [ 591.708934][T11089] overlayfs: ...falling back to metacopy=off. [ 591.715552][T11089] overlayfs: ...falling back to index=off. [ 591.721578][T11089] overlayfs: ...falling back to uuid=null. [ 591.733592][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 592.504480][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 592.531779][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.555828][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.585792][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.681938][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.733689][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.784706][ T43] usb 1-1: config 0 descriptor?? [ 593.271776][T11118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.354212][ T5934] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 593.516208][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 593.528265][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 593.618299][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 593.736650][ T5934] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.852029][ T43] usb 1-1: USB disconnect, device number 38 [ 593.878548][ T5934] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 593.901480][T11121] loop2: detected capacity change from 0 to 7 [ 593.962996][ T5934] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 594.034365][ T5934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 594.083715][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.120232][T11121] Dev loop2: unable to read RDB block 7 [ 594.126025][T11121] loop2: unable to read partition table [ 594.143736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.165177][ T5934] usb 5-1: Product: syz [ 594.584964][T11121] loop2: partition table beyond EOD, truncated [ 594.605828][ T5934] usb 5-1: Manufacturer: syz [ 594.898449][T11121] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 594.914580][ T5934] usb 5-1: SerialNumber: syz [ 595.173712][ T5934] cdc_ncm 5-1:1.0: bind() failure [ 595.218819][ T5934] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 595.239846][ T5934] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 595.289469][ T5934] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 595.306838][T11135] loop9: detected capacity change from 0 to 8 [ 595.318606][ T5934] cdc_ncm 5-1:1.1: bind() failure [ 595.355072][T11135] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 595.359944][ T5934] usbtest 5-1:1.1: couldn't get endpoints, -22 [ 595.360599][T11135] loop9: partition table partially beyond EOD, [ 595.383847][ T5934] usbtest 5-1:1.1: probe with driver usbtest failed with error -22 [ 595.388213][T11135] truncated [ 595.436973][ T5934] usb 5-1: USB disconnect, device number 34 [ 595.474008][T11135] loop9: p1 size 81768186 extends beyond EOD, truncated [ 596.604770][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 596.830928][T11148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.546109][T11155] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 597.555169][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 597.565343][T11155] overlayfs: failed to set xattr on upper [ 597.573398][T11155] overlayfs: ...falling back to redirect_dir=nofollow. [ 597.612700][T11155] overlayfs: ...falling back to metacopy=off. [ 597.635233][T11155] overlayfs: ...falling back to index=off. [ 597.661435][T11155] overlayfs: ...falling back to uuid=null. [ 597.679850][T11157] binder: BINDER_SET_CONTEXT_MGR already set [ 597.693595][T11157] binder: 11156:11157 ioctl 4018620d 200000000040 returned -16 [ 598.456604][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1540'. [ 598.782614][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1544'. [ 600.523647][T11194] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1545'. [ 600.688712][T11188] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1542'. [ 600.702279][T11188] tipc: Enabling of bearer rejected, failed to enable media [ 600.710880][T11192] netlink: 'syz.0.1545': attribute type 29 has an invalid length. [ 600.720008][T11193] netlink: 'syz.0.1545': attribute type 29 has an invalid length. [ 600.731387][T11189] syz.0.1545: attempt to access beyond end of device [ 600.731387][T11189] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 600.985870][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'. [ 601.807875][T11223] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1554'. [ 601.913143][T11224] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1556'. [ 601.938630][T11224] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 602.144167][ T5905] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 602.203937][ T5934] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 602.234650][ T5912] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 602.304551][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 602.325925][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 602.334167][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.345351][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.355409][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 602.365020][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.368182][ T5934] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.385455][ T5905] usb 1-1: config 0 descriptor?? [ 602.391032][ T5934] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 602.400858][ T5934] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.408660][ T5905] hub 1-1:0.0: USB hub found [ 602.421686][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 602.436248][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 602.449104][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 602.462857][ T5934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.477329][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.486299][ T9] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 602.486660][ T5934] usb 5-1: Product: syz [ 602.498711][ T5912] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 602.501969][ T5934] usb 5-1: Manufacturer: syz [ 602.512554][ T9] usb 2-1: config 0 has no interface number 0 [ 602.516236][ T5934] usb 5-1: SerialNumber: syz [ 602.519838][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.534840][ T9] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 602.558191][ T5912] usb 3-1: Product: syz [ 602.559626][ T5934] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 602.562431][ T5912] usb 3-1: Manufacturer: syz [ 602.574708][ T9] usb 2-1: config 0 interface 58 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 602.587478][ T5912] usb 3-1: SerialNumber: syz [ 602.588000][ T5934] cdc_ncm 5-1:1.0: bind() failure [ 602.595818][ T9] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 602.614194][ T5905] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 602.625139][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.636321][ T5912] usb 3-1: config 0 descriptor?? [ 602.652294][ T9] usb 2-1: Product: syz [ 602.661852][ T5912] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 602.671619][ T9] usb 2-1: Manufacturer: syz [ 602.677111][ T9] usb 2-1: SerialNumber: syz [ 602.698128][ T9] usb 2-1: config 0 descriptor?? [ 602.714780][T11231] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 603.024337][ T5934] usb 3-1: USB disconnect, device number 32 [ 603.691293][T11231] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1558'. [ 603.711734][T11226] binder: Binderfs stats mode cannot be changed during a remount [ 603.810390][ T9] kaweth 2-1:0.58: Firmware present in device. [ 605.649180][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 605.663342][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 605.937088][ T120] usb 5-1: USB disconnect, device number 35 [ 605.965256][ T9] kaweth 2-1:0.58: Error reading configuration (-71), no net device created [ 605.987421][ T9] kaweth 2-1:0.58: probe with driver kaweth failed with error -5 [ 606.008753][ T5905] usb 1-1: USB disconnect, device number 39 [ 606.024673][ T9] usb 2-1: USB disconnect, device number 30 [ 606.234879][T11261] loop9: detected capacity change from 0 to 8 [ 606.274952][T11261] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 606.301997][T11261] loop9: partition table partially beyond EOD, truncated [ 606.343795][T11261] loop9: p1 size 81768186 extends beyond EOD, truncated [ 607.181007][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 607.590143][T11278] pim6reg1: entered allmulticast mode [ 607.599447][T11278] pim6reg1: left allmulticast mode [ 607.605293][ T5934] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 607.857619][T11280] tipc: Enabling of bearer rejected, failed to enable media [ 608.343701][ T5828] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 608.434667][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 608.455860][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.476280][ T5934] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 608.491737][ T5934] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 608.527050][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 608.532408][ T5934] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 608.552751][ T5828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 608.564613][ T5934] usb 3-1: config 128 has no interface number 0 [ 608.574129][ T5828] usb 1-1: config 2 has an invalid interface number: 120 but max is 0 [ 608.583565][ T5828] usb 1-1: config 2 has no interface number 0 [ 608.604160][ T5934] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 608.616269][ T5828] usb 1-1: config 2 interface 120 has no altsetting 0 [ 608.646785][ T5828] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 608.659386][ T5934] usb 3-1: config 128 interface 127 has no altsetting 0 [ 608.678964][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.703889][ T5828] usb 1-1: Product: syz [ 608.711557][ T5934] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 608.730550][ T5828] usb 1-1: Manufacturer: ꊴ陚扉ꤣᘬë‚츒ഇ봨릕䲱鲔瓌踗ìäžàª¡è–™ê®²î¶žï¥¯ëœ½î‚—쭢獵峀沺쵗关Ꞥᑋ퇮䘳䚤韤ç­â±¾á¹·ã ã˜¿î£“ٲäƒæŒ£âªç¼¹ç½í‡¡ê†€äŠä ©ëŸƒî‰½ï¨â•´â»“â¤í•´â–ªê¡¶éª¼â®¯â¾´ä‚“✳࡮㗻ä Ú‚형穱꨷챈΄á®é‰¨äŠ€î“£â©‹î’ ê‚§âˆ–ò©… [ 608.773664][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.783123][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1577'. [ 608.797731][ T5934] usb 3-1: Product: syz [ 608.803401][ T5934] usb 3-1: Manufacturer: syz [ 608.830695][ T5934] usb 3-1: SerialNumber: syz [ 608.850518][ T5828] usb 1-1: SerialNumber: syz [ 608.860363][T11272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 609.599029][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 609.621845][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 609.802005][ T5934] usb 3-1: USB disconnect, device number 33 [ 609.874404][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 609.909660][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.972098][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.972421][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.047883][T11301] could not allocate digest TFM handle poly1305-generic [ 610.069509][ T5828] i2c-tiny-usb 1-1:2.120: version 68.f3 found at bus 001 address 040 [ 610.085921][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 610.121386][ T5828] (null): failure setting delay to 10us [ 610.135805][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.171711][ T5828] i2c-tiny-usb 1-1:2.120: probe with driver i2c-tiny-usb failed with error -5 [ 610.182787][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.224771][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.245489][ T5828] usb 1-1: USB disconnect, device number 40 [ 610.251648][ T43] usb 4-1: config 1 interface 0 has no altsetting 1 [ 610.266260][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.301528][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.321676][ T43] usb 4-1: Product: syz [ 610.344722][ T43] usb 4-1: Manufacturer: syz [ 610.349488][ T43] usb 4-1: SerialNumber: syz [ 610.375568][ T43] cdc_ncm 4-1:1.0: skipping garbage [ 610.380932][ T43] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 610.394170][ T5905] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 610.403641][ T43] cdc_ncm 4-1:1.0: bind() failure [ 610.557939][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 610.577853][T11329] loop2: detected capacity change from 0 to 7 [ 610.579231][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 610.595894][T11329] Dev loop2: unable to read RDB block 7 [ 610.602591][ T5905] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 610.604636][T11329] loop2: unable to read partition table [ 610.613587][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.768662][ T5905] usb 2-1: config 0 descriptor?? [ 610.775268][T11317] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 610.790463][T11329] loop2: partition table beyond EOD, truncated [ 610.828068][T11329] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.237895][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.327100][T11338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1588'. [ 611.465578][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1588'. [ 611.701142][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.723150][T11326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 611.782370][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.800699][T11326] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 611.810622][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.817740][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.824954][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.834955][ T5905] waltop 0003:172F:0500.000E: unknown main item tag 0x0 [ 611.853271][ T5905] waltop 0003:172F:0500.000E: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0 [ 611.930745][ T5905] usb 2-1: USB disconnect, device number 31 [ 612.038317][T11326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.091689][T11326] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 612.286064][T11326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.310523][T11326] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 612.319303][T11343] fido_id[11343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 613.010317][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 613.151171][T11326] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 613.159823][T11326] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 613.190884][T11326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 613.201693][T11326] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 613.277493][ T43] usb 4-1: USB disconnect, device number 27 [ 614.113682][T11354] Bluetooth: hci1: command 0x0406 tx timeout [ 614.303812][T11354] Bluetooth: hci2: command 0x0406 tx timeout [ 615.024536][T11354] Bluetooth: hci0: command 0x0406 tx timeout [ 615.231654][T11354] Bluetooth: hci4: command 0x0c1a tx timeout [ 615.269368][ T5156] Bluetooth: hci3: command 0x0405 tx timeout [ 616.198934][T11392] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1600'. [ 616.983800][T11354] Bluetooth: hci1: command 0x0406 tx timeout [ 616.990112][ T5156] Bluetooth: hci2: command 0x0406 tx timeout [ 617.766656][T11401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1606'. [ 617.773957][ T5156] Bluetooth: hci3: command 0x0405 tx timeout [ 617.782419][ T5156] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.794197][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1606'. [ 617.835967][ T120] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 618.119792][ T120] usb 5-1: Using ep0 maxpacket: 16 [ 618.345238][ T120] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.889123][ T120] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.397374][ T120] usb 5-1: string descriptor 0 read error: -71 [ 619.413900][ T120] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.435733][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.418507][ T120] usb 5-1: can't set config #1, error -71 [ 620.457234][ T120] usb 5-1: USB disconnect, device number 36 [ 620.854133][ T5905] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 621.416782][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 621.447202][ T5905] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 621.476819][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.493263][ T5905] usb 4-1: config 0 has no interface number 0 [ 621.502102][ T5905] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.525012][ T5905] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 621.538034][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 621.547376][ T5905] usb 4-1: Product: syz [ 621.551762][ T5905] usb 4-1: SerialNumber: syz [ 621.569537][ T5905] usb 4-1: config 0 descriptor?? [ 621.593049][ T5905] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 621.703583][ T5828] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 622.463368][T11441] loop2: detected capacity change from 0 to 7 [ 622.471223][T11441] Dev loop2: unable to read RDB block 7 [ 622.476977][T11441] loop2: unable to read partition table [ 622.482797][T11441] loop2: partition table beyond EOD, truncated [ 622.489048][T11441] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 622.498409][ T5828] usb 1-1: device descriptor read/64, error -71 [ 622.667422][T11443] binder: 11442:11443 ioctl 4008941a 200000000040 returned -22 [ 622.763688][ T5828] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 622.782068][ T5905] usb 4-1: USB disconnect, device number 28 [ 622.915689][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 623.084148][ T5828] usb 1-1: device descriptor read/64, error -71 [ 623.476217][ T5828] usb usb1-port1: attempt power cycle [ 623.603740][ T43] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 624.134571][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 624.153297][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 624.173193][ T43] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 624.176651][ T5905] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 624.182739][ T43] usb 3-1: config 129 has an invalid interface number: 2 but max is 0 [ 624.198300][ T5828] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 624.206694][ T43] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 624.222615][ T43] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 624.244075][ T43] usb 3-1: config 129 has no interface number 0 [ 624.257359][ T43] usb 3-1: config 129 has no interface number 1 [ 624.264636][ T43] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 624.278876][ T43] usb 3-1: too many endpoints for config 129 interface 2 altsetting 156: 254, using maximum allowed: 30 [ 624.291011][ T43] usb 3-1: config 129 interface 2 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 624.311788][ T43] usb 3-1: config 129 interface 135 has no altsetting 0 [ 624.445373][ T5828] usb 1-1: device not accepting address 43, error -71 [ 624.489424][ T43] usb 3-1: config 129 interface 2 has no altsetting 0 [ 624.892873][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 624.905436][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 624.918457][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.942131][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.942507][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 624.965337][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 624.973101][ T43] usb 3-1: Product: syz [ 624.982300][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.984791][ T43] usb 3-1: Manufacturer: syz [ 624.995886][ T5905] usb 2-1: Product: syz [ 625.000284][ T5905] usb 2-1: Manufacturer: syz [ 625.005438][ T5905] usb 2-1: SerialNumber: syz [ 625.247209][T11454] fuse: Bad value for 'user_id' [ 625.252171][T11454] fuse: Bad value for 'user_id' [ 625.260326][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.269334][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.280149][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.289169][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.302761][ T43] usb 3-1: SerialNumber: syz [ 625.717040][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.744926][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.955133][ T43] hub 3-1:129.2: Invalid hub with more than one config or interface [ 625.963220][ T43] hub 3-1:129.2: probe with driver hub failed with error -22 [ 625.988961][ T43] usb 3-1: USB disconnect, device number 34 [ 626.080709][T11481] overlay: ./file1 is not a directory [ 626.352528][ T5905] usb 2-1: 0:2 : does not exist [ 626.660503][ T5905] usb 2-1: USB disconnect, device number 32 [ 626.709561][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 626.858285][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.086765][T11496] trusted_key: syz.3.1636 sent an empty control message without MSG_MORE. [ 627.701997][T11509] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 627.711482][T11509] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 628.293938][ T5905] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 628.656100][ T5828] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 628.874004][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 628.911458][T11519] binfmt_misc: register: failed to install interpreter file ./file0 [ 628.924895][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 628.986426][ T5905] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 629.234087][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 629.247400][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 629.262675][ T5905] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 629.283095][ T5905] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 629.296182][ T5905] usb 1-1: Manufacturer: syz [ 629.318782][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.324407][ T5905] usb 1-1: config 0 descriptor?? [ 629.366779][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 629.424716][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 629.487120][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.533192][ T5828] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 629.713351][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.722701][ T5828] usb 5-1: Product: syz [ 629.727758][ T5828] usb 5-1: Manufacturer: syz [ 629.732418][ T5828] usb 5-1: SerialNumber: syz [ 629.764550][ T5828] usb 5-1: config 0 descriptor?? [ 630.182008][ T5828] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 630.185079][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.202266][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.303283][ T9] usb 1-1: USB disconnect, device number 45 [ 630.394390][ T5156] Bluetooth: hci3: command 0x0405 tx timeout [ 630.438726][T11537] netlink: 'syz.2.1645': attribute type 4 has an invalid length. [ 630.446856][T11537] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1645'. [ 630.477085][ T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 630.491718][T11537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.532575][ T5828] imon:send_packet: packet tx failed (-71) [ 630.565456][ T5905] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 630.567858][ T5828] imon 5-1:0.0: panel buttons/knobs setup failed [ 630.636080][T11524] delete_channel: no stack [ 630.716106][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 630.736792][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.763789][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.814203][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 630.867587][T11533] vlan2: entered promiscuous mode [ 630.895061][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.943655][ T43] usb 2-1: Product: syz [ 630.963725][ T43] usb 2-1: Manufacturer: syz [ 631.265655][ T5828] rc_core: IR keymap rc-imon-pad not found [ 631.271664][ T5828] Registered IR keymap rc-empty [ 631.277997][ T43] usb 2-1: SerialNumber: syz [ 631.288695][ T5828] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 631.506839][T11526] fuse: Bad value for 'user_id' [ 631.511923][T11526] fuse: Bad value for 'user_id' [ 631.522173][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.531695][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.543690][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.552957][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.768784][ T5828] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 632.056329][ T5828] imon:send_packet: packet tx failed (-71) [ 632.954472][ T5828] imon 5-1:0.0: remote input dev register failed [ 632.961772][ T5828] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 633.144368][ T43] usb 2-1: 0:2 : does not exist [ 633.311142][ T43] usb 2-1: USB disconnect, device number 33 [ 634.303195][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 634.324659][ T5905] usb 4-1: no configurations [ 634.331548][ T5905] usb 4-1: can't read configurations, error -22 [ 634.378407][ T5828] imon 5-1:0.0: unable to initialize intf0, err 0 [ 634.418937][ T5828] imon:imon_probe: failed to initialize context! [ 634.470693][ T5828] imon 5-1:0.0: unable to register, err -19 [ 634.512925][ T5828] usb 5-1: USB disconnect, device number 37 [ 634.531706][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.893272][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 635.906147][ T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 637.820506][ T120] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 638.743195][T11562] vlan2: entered promiscuous mode [ 638.773818][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 638.782820][ T120] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.795347][ T120] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.825522][ T120] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.858356][T11598] netlink: 'syz.0.1663': attribute type 12 has an invalid length. [ 638.868057][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.878876][T11598] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1663'. [ 638.902788][ T120] usb 3-1: Product: syz [ 638.908367][ T120] usb 3-1: Manufacturer: syz [ 638.918605][ T120] usb 3-1: SerialNumber: syz [ 639.174948][T11584] fuse: Bad value for 'user_id' [ 639.180049][T11584] fuse: Bad value for 'user_id' [ 639.188332][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.208232][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.247968][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.363844][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.710650][T11603] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1664'. [ 639.730064][T11605] netlink: 'syz.3.1664': attribute type 29 has an invalid length. [ 639.738546][T11606] netlink: 'syz.3.1664': attribute type 29 has an invalid length. [ 639.757745][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 639.767946][T11603] syz.3.1664: attempt to access beyond end of device [ 639.767946][T11603] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 639.785351][ T9] usb 5-1: no configurations [ 639.799864][T11599] netlink: 'syz.0.1663': attribute type 12 has an invalid length. [ 639.811004][ T9] usb 5-1: can't read configurations, error -22 [ 639.827514][T11599] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1663'. [ 640.987623][ T120] usb 3-1: 0:2 : does not exist [ 641.026984][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 641.041192][ T120] usb 3-1: USB disconnect, device number 35 [ 641.106017][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 641.126962][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 641.147010][T11626] ceph: No mds server is up or the cluster is laggy [ 641.157743][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 641.179970][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.210444][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 641.413948][T11637] loop2: detected capacity change from 0 to 7 [ 641.440729][T11637] Dev loop2: unable to read RDB block 7 [ 641.476807][T11637] loop2: unable to read partition table [ 641.525203][T11637] loop2: partition table beyond EOD, truncated [ 641.541872][T11637] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.563962][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 641.588213][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 641.854016][T11654] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 641.866256][T11654] netlink: 'syz.2.1679': attribute type 29 has an invalid length. [ 641.879079][T11654] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1679'. [ 642.441648][T11654] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd2": -EINTR [ 642.450677][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 642.467609][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 642.494354][T11657] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 643.102613][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 643.131668][T11643] ceph: No mds server is up or the cluster is laggy [ 643.142224][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 643.490636][T11666] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1681'. [ 643.933809][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 644.195023][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 644.722436][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 644.979690][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.580504][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 646.057395][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.125281][ T43] usb 3-1: Product: syz [ 648.149846][ T43] usb 3-1: Manufacturer: syz [ 648.161167][ T43] usb 3-1: SerialNumber: syz [ 648.373744][ T43] usb 3-1: can't set config #1, error -71 [ 648.409966][ T43] usb 3-1: USB disconnect, device number 36 [ 648.503369][T11687] could not allocate digest TFM handle poly1305-generic [ 648.822857][T11707] tipc: Enabling of bearer rejected, failed to enable media [ 649.424359][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1692'. [ 649.433383][T11702] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1692'. [ 649.474318][T11702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1692'. [ 650.210161][T11718] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 650.515683][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 650.541297][T11702] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1692'. [ 650.563565][T11702] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1692'. [ 650.613098][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 650.646616][T11709] ceph: No mds server is up or the cluster is laggy [ 651.266846][ T43] libceph: connect (1)[c::]:6789 error -101 [ 651.300697][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 653.576737][T11738] loop2: detected capacity change from 0 to 7 [ 653.610479][T11738] Dev loop2: unable to read RDB block 7 [ 653.637128][T11738] loop2: unable to read partition table [ 653.648878][T11738] loop2: partition table beyond EOD, truncated [ 653.657755][T11738] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 653.673784][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 653.844147][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 653.978774][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.028959][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.107657][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.152512][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.176830][ T9] usb 5-1: Product: syz [ 654.182280][ T9] usb 5-1: Manufacturer: syz [ 654.188140][ T9] usb 5-1: SerialNumber: syz [ 654.419324][T11735] fuse: Bad value for 'user_id' [ 654.424618][T11735] fuse: Bad value for 'user_id' [ 654.431683][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.440791][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.450602][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.459727][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.469172][ T5905] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 654.634378][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 654.667130][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.717496][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.757267][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.779783][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 654.790520][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.827829][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 654.862258][ T5905] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 654.900677][ T5905] usb 2-1: Manufacturer: syz [ 654.936580][ T5905] usb 2-1: config 0 descriptor?? [ 655.065398][T11765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 655.356365][ T5905] rc_core: IR keymap rc-hauppauge not found [ 655.375787][ T5905] Registered IR keymap rc-empty [ 655.380995][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 655.404121][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 655.419543][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 655.430095][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 655.438899][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 655.446705][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 655.463888][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 655.533259][T11776] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 655.701182][ T120] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 655.806955][ T9] usb 5-1: 0:2 : does not exist [ 655.935392][T11777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.156041][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 656.172262][T11777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.224807][ T9] usb 5-1: USB disconnect, device number 40 [ 656.237562][T11772] ceph: No mds server is up or the cluster is laggy [ 656.260519][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.316553][ T120] usb 4-1: Using ep0 maxpacket: 32 [ 656.322211][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.350071][ T120] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 656.355900][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.367299][ T120] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 656.397090][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.443633][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.462984][ T120] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 656.483712][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.503366][ T120] usb 4-1: config 1 has no interface number 0 [ 656.512249][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.535295][ T120] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.574072][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.584737][ T120] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 656.603024][ T120] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 656.615422][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.625031][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.635473][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.661513][ T120] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 656.669378][ T5905] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 656.698381][ T5905] mceusb 2-1:0.0: Registered  with mce emulator interface version 1 [ 656.708226][ T5905] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 656.723326][T11787] gretap0: entered promiscuous mode [ 656.729175][ T5905] usb 2-1: USB disconnect, device number 34 [ 656.748276][T11787] gretap0: left promiscuous mode [ 656.825845][T11789] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 656.833732][T11789] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1717'. [ 656.880950][ T120] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 657.726179][T11795] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 657.739483][T11795] overlayfs: failed to set xattr on upper [ 657.745806][T11795] overlayfs: ...falling back to redirect_dir=nofollow. [ 657.752704][T11795] overlayfs: ...falling back to metacopy=off. [ 657.761250][T11795] overlayfs: ...falling back to index=off. [ 657.774199][T11795] overlayfs: ...falling back to uuid=null. [ 657.907468][ T5905] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 658.606876][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 658.613878][ T5905] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 658.704598][ T5828] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 658.793651][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 658.803808][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.819782][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.836602][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.853009][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.865073][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 658.885249][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 658.904042][ T43] usb 3-1: Product: syz [ 658.919120][ T43] usb 3-1: Manufacturer: syz [ 658.925113][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.943735][ T43] usb 3-1: SerialNumber: syz [ 658.965076][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 659.028923][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 659.041894][ T5947] usb 4-1: USB disconnect, device number 31 [ 659.044581][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 659.056907][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.069357][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.080289][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 659.094913][ T5905] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 659.104253][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.111201][ T5947] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 659.434115][T11818] tipc: Enabling of bearer rejected, failed to enable media [ 659.469446][T11810] fuse: Bad value for 'user_id' [ 659.476177][T11810] fuse: Bad value for 'user_id' [ 659.484095][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.493006][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.498930][ T5905] usb 1-1: config 0 descriptor?? [ 659.504442][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.514783][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.539518][ T5828] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 659.568829][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.577292][ T5828] usb 5-1: Product: syz [ 659.582035][ T5828] usb 5-1: Manufacturer: syz [ 659.594328][ T5828] usb 5-1: SerialNumber: syz [ 659.781746][ T5828] usb 5-1: config 0 descriptor?? [ 660.200942][ T5905] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 660.202277][ T5947] usb 5-1: USB disconnect, device number 41 [ 660.222347][ T5905] microsoft 0003:045E:07DA.000F: no inputs found [ 660.247581][ T5905] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 660.474904][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.518686][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.672268][ T5905] usb 1-1: USB disconnect, device number 46 [ 660.987937][ T43] usb 3-1: 0:2 : does not exist [ 661.089462][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 661.139780][ T43] usb 3-1: USB disconnect, device number 37 [ 662.979219][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 666.032472][T11888] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1750'. [ 666.059610][T11888] tipc: Enabling of bearer rejected, failed to enable media [ 666.139014][T11890] netlink: 'syz.0.1749': attribute type 8 has an invalid length. [ 668.040667][T11911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1755'. [ 669.178734][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 670.344078][T11938] 9pnet_virtio: no channels available for device syz [ 670.812112][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 670.821360][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 674.308156][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 674.822174][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 675.517875][T12028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1778'. [ 675.535101][T12028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'. [ 675.643575][ T5905] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 675.699537][T12033] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1781'. [ 675.711192][T12033] tipc: Enabling of bearer rejected, failed to enable media [ 675.968835][ T5905] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 675.980556][ T5905] usb 5-1: config 1 has no interface number 1 [ 675.987459][ T5905] usb 5-1: too many endpoints for config 1 interface 2 altsetting 251: 232, using maximum allowed: 30 [ 675.998890][ T5905] usb 5-1: config 1 interface 2 altsetting 251 endpoint 0x1 has an invalid bInterval 22, changing to 4 [ 676.003664][ T5828] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 676.012610][ T5905] usb 5-1: config 1 interface 2 altsetting 251 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 676.078910][T12037] netlink: 'syz.0.1782': attribute type 10 has an invalid length. [ 676.086941][T12037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1782'. [ 676.662208][ T5905] usb 5-1: config 1 interface 2 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 676.683251][ T5905] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 676.694316][ T5905] usb 5-1: config 1 interface 2 has no altsetting 2 [ 676.705352][T12037] team0: Port device geneve0 added [ 676.705913][ T5905] usb 5-1: string descriptor 0 read error: -22 [ 676.728761][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 676.749761][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.954085][ T5828] usb 4-1: device descriptor read/64, error -71 [ 677.323599][ T5828] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 677.963821][ T5828] usb 4-1: device descriptor read/64, error -71 [ 678.093656][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 678.094054][ T5828] usb usb4-port1: attempt power cycle [ 678.263649][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 678.272404][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.284732][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.316468][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.327292][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.342374][ T9] usb 2-1: Product: syz [ 678.347924][ T9] usb 2-1: Manufacturer: syz [ 678.355651][ T9] usb 2-1: SerialNumber: syz [ 678.457492][ T43] usb 5-1: USB disconnect, device number 42 [ 678.483688][ T5828] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 678.541553][ T5828] usb 4-1: device descriptor read/8, error -71 [ 678.588907][T12045] fuse: Bad value for 'user_id' [ 678.594217][T12045] fuse: Bad value for 'user_id' [ 678.601446][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.610476][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.620424][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.629447][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.914312][T12052] loop2: detected capacity change from 0 to 7 [ 678.933134][T12052] Dev loop2: unable to read RDB block 7 [ 678.947655][T12052] loop2: unable to read partition table [ 678.969381][T12052] loop2: partition table beyond EOD, truncated [ 679.015949][T12052] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.218749][T12058] cgroup: Invalid name [ 679.381698][T12064] binder: BINDER_SET_CONTEXT_MGR already set [ 679.406533][T12064] binder: 12061:12064 ioctl 4018620d 2000000000c0 returned -16 [ 679.507693][T12062] binder_alloc: binder_alloc_mmap_handler: 12061 200000ffd000-200001000000 already mapped failed -16 [ 679.527006][T12064] binder_alloc: 12061: binder_alloc_buf, no vma [ 680.068250][T12078] netlink: 'syz.0.1793': attribute type 1 has an invalid length. [ 680.947311][ T9] usb 2-1: 0:2 : does not exist [ 681.006913][T12082] bond2: (slave bridge1): making interface the new active one [ 681.015253][T12082] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 681.042452][ T9] usb 2-1: USB disconnect, device number 35 [ 681.138331][T12086] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1795'. [ 681.194070][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1795'. [ 682.267008][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 684.726943][T12103] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1800'. [ 685.294380][T11255] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 685.756901][T12115] syz.4.1803 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 685.782160][T12115] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 12115 comm: syz.4.1803) [ 685.816797][ T30] audit: type=1800 audit(1751943555.102:172): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1803" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=29539 res=0 errno=0 [ 686.171531][T11255] usb 3-1: Using ep0 maxpacket: 16 [ 686.362839][T11255] usb 3-1: descriptor type invalid, skip [ 686.375680][T11255] usb 3-1: descriptor type invalid, skip [ 686.382071][T11255] usb 3-1: descriptor type invalid, skip [ 686.448680][T12118] loop2: detected capacity change from 0 to 7 [ 686.463266][T11255] usb 3-1: config 1 interface 0 altsetting 48 bulk endpoint 0x1 has invalid maxpacket 32 [ 686.474896][T11255] usb 3-1: config 1 interface 0 has no altsetting 0 [ 686.477988][T12118] Dev loop2: unable to read RDB block 7 [ 686.490223][T12118] loop2: unable to read partition table [ 686.502924][T12118] loop2: partition table beyond EOD, truncated [ 686.510483][T12118] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 686.671436][T11255] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 686.700651][T11255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.966920][T11255] usb 3-1: Product: syz [ 686.977720][T11255] usb 3-1: Manufacturer: syz [ 686.996057][T11255] usb 3-1: SerialNumber: syz [ 687.057600][T12105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 687.275883][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 687.624415][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 687.975079][ T9] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 687.991256][T11255] usb 3-1: USB disconnect, device number 38 [ 687.997829][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.033259][ T9] usb 1-1: config 0 has no interface number 0 [ 688.065670][ T9] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 688.096770][ T9] usb 1-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 688.137224][ T9] usb 1-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 688.146810][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.163550][ T9] usb 1-1: Product: syz [ 688.169455][ T9] usb 1-1: Manufacturer: syz [ 688.174942][ T9] usb 1-1: SerialNumber: syz [ 688.194865][ T9] usb 1-1: config 0 descriptor?? [ 688.201271][T12125] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 688.224625][ T9] usb-storage 1-1:0.231: USB Mass Storage device detected [ 688.342927][T12148] loop2: detected capacity change from 0 to 7 [ 688.369796][T12148] Dev loop2: unable to read RDB block 7 [ 688.380554][T12148] loop2: unable to read partition table [ 688.409705][T12148] loop2: partition table beyond EOD, truncated [ 688.466187][T12148] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 688.523686][ T5828] usb 1-1: USB disconnect, device number 47 [ 688.569647][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1815'. [ 688.877779][ T5828] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 689.043749][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 689.059044][ T5828] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 689.080487][ T5828] usb 3-1: config 179 has no interface number 0 [ 689.126965][ T5828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 689.183082][ T5828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 689.238258][ T5828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 689.288478][ T5828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 689.337541][ T5828] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 689.410043][ T5828] usb 3-1: config 179 interface 65 has no altsetting 0 [ 689.439444][ T5828] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 689.459248][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.515246][ T5828] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input30 [ 689.626382][ T5191] input input30: unable to receive magic message: -110 [ 689.678499][ T5191] input input30: unable to receive magic message: -32 [ 689.812467][ T5976] input input30: unable to receive magic message: -32 [ 689.867516][ T5191] input input30: unable to receive magic message: -32 [ 689.899441][ T5191] input input30: unable to receive magic message: -32 [ 689.937622][ T5191] input input30: unable to receive magic message: -32 [ 690.106627][ T5828] usb 3-1: USB disconnect, device number 39 [ 690.112684][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 690.553553][ T5947] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 691.305834][T12194] loop2: detected capacity change from 0 to 7 [ 691.342244][T12194] Dev loop2: unable to read RDB block 7 [ 691.349702][T12194] loop2: unable to read partition table [ 691.356076][T12194] loop2: partition table beyond EOD, truncated [ 691.373906][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 691.381641][T12194] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 691.455031][ T5947] usb 4-1: device descriptor read/64, error -71 [ 691.455532][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.483687][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.548170][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 691.618126][ T43] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 691.710288][ T43] usb 1-1: config 0 has no interface number 0 [ 691.719687][ T5947] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 691.769845][ T43] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 691.861942][ T43] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 691.938827][ T5947] usb 4-1: device descriptor read/64, error -71 [ 691.977633][ T43] usb 1-1: config 0 interface 126 has no altsetting 0 [ 692.016048][T12200] loop9: detected capacity change from 0 to 8 [ 692.017604][ T43] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 692.043982][T12200] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 692.060096][T12200] loop9: partition table partially beyond EOD, truncated [ 692.071207][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.074401][T12200] loop9: p1 size 81768186 extends beyond EOD, [ 692.080534][ T43] usb 1-1: Product: syz [ 692.099849][T12200] truncated [ 692.106581][ T5947] usb usb4-port1: attempt power cycle [ 692.122990][ T43] usb 1-1: Manufacturer: syz [ 692.143127][ T43] usb 1-1: SerialNumber: syz [ 692.156729][ T43] usb 1-1: config 0 descriptor?? [ 692.162997][T12188] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 692.182804][T12188] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 692.222662][ T5976] udevd[5976]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 692.452081][ T43] ir_usb 1-1:0.126: IR Dongle converter detected [ 692.503827][ T5947] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 692.554382][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 692.573747][ T43] usb 1-1: IRDA class descriptor not found, device not bound [ 692.584232][ T5947] usb 4-1: device descriptor read/8, error -71 [ 692.629813][ T43] usb 1-1: USB disconnect, device number 48 [ 692.828269][ T5947] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 692.887658][ T5947] usb 4-1: device descriptor read/8, error -71 [ 693.025638][ T5947] usb usb4-port1: unable to enumerate USB device [ 693.547764][T12226] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 693.556275][T12226] overlayfs: failed to set xattr on upper [ 693.572300][T12226] overlayfs: ...falling back to redirect_dir=nofollow. [ 693.592896][T12226] overlayfs: ...falling back to metacopy=off. [ 693.615281][T12226] overlayfs: ...falling back to index=off. [ 693.632307][T12226] overlayfs: ...falling back to uuid=null. [ 693.636159][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033fd4c00: rx timeout, send abort [ 693.673852][T12223] could not allocate digest TFM handle poly1305-generic [ 694.147714][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033fd4c00: abort rx timeout. Force session deactivation [ 695.666832][T12256] netlink: 'syz.1.1846': attribute type 29 has an invalid length. [ 695.738446][T12256] netlink: 'syz.1.1846': attribute type 29 has an invalid length. [ 695.769168][T12256] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1846'. [ 696.291528][T12256] syz.1.1846: attempt to access beyond end of device [ 696.291528][T12256] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 696.575740][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 696.883393][T12270] loop9: detected capacity change from 0 to 8 [ 696.893816][ T43] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 696.937243][ T5849] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 696.943656][ T5849] loop9: partition table partially beyond EOD, truncated [ 696.952003][ T5849] loop9: p1 size 81768186 extends beyond EOD, truncated [ 697.056073][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 697.080333][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.093262][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 697.109034][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.168920][T12270] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 697.181185][T12270] loop9: partition table partially beyond EOD, truncated [ 697.199220][T12270] loop9: p1 size 81768186 extends beyond EOD, truncated [ 697.269636][ T43] usb 3-1: config 0 descriptor?? [ 697.434904][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 697.582842][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 697.743236][ T43] lenovo 0003:17EF:6047.0010: unknown main item tag 0x0 [ 698.308663][ T43] lenovo 0003:17EF:6047.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 698.402762][ T43] usb 3-1: USB disconnect, device number 40 [ 698.516617][T12282] fido_id[12282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 698.783574][ T5947] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 698.955926][ T5947] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.967865][ T5947] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 698.978095][ T5947] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.987679][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.009612][T12284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 699.031234][ T5947] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.073716][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 699.263730][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 699.275077][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.289349][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.309949][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.320570][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.332312][ T43] usb 2-1: Product: syz [ 699.337600][ T43] usb 2-1: Manufacturer: syz [ 699.342408][ T43] usb 2-1: SerialNumber: syz [ 699.363833][T11255] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 699.536994][T11255] usb 3-1: Using ep0 maxpacket: 32 [ 699.545078][T11255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 699.562309][ T43] usb 2-1: 0:2 : does not exist [ 699.586361][ T43] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 699.587295][T11255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 699.644831][T11255] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 699.662454][T11255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.681010][T11255] usb 3-1: Product: syz [ 699.690491][T11255] usb 3-1: Manufacturer: syz [ 699.696216][T11255] usb 3-1: SerialNumber: syz [ 699.705899][T11255] usb 3-1: config 0 descriptor?? [ 699.728064][ T43] usb 2-1: USB disconnect, device number 36 [ 699.748999][T11255] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 699.801419][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 699.849112][ T5934] usb 4-1: USB disconnect, device number 40 [ 700.048598][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1857'. [ 700.885021][T11988] usb 3-1: Failed to submit usb control message: -110 [ 701.346343][T12323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.570189][T11988] usb 3-1: unable to send the bmi data to the device: -110 [ 701.614889][T11988] usb 3-1: unable to get target info from device [ 701.674276][T11988] usb 3-1: could not get target info (-110) [ 701.714738][T11988] usb 3-1: could not probe fw (-110) [ 702.782116][T12342] 9pnet_virtio: no channels available for device syz [ 704.259266][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.269744][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.278715][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.289833][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.298201][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 705.891501][T12383] loop9: detected capacity change from 0 to 8 [ 705.919588][T12383] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 705.942983][T12361] chnl_net:caif_netlink_parms(): no params data found [ 705.943653][T12383] loop9: partition table partially beyond EOD, truncated [ 705.989490][T12383] loop9: p1 size 81768186 extends beyond EOD, truncated [ 706.006029][T12385] netlink: 'syz.2.1881': attribute type 10 has an invalid length. [ 706.099998][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 706.123889][T11255] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 706.383755][T11354] Bluetooth: hci5: command tx timeout [ 706.451051][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.466315][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.474638][T12361] bridge_slave_0: entered allmulticast mode [ 706.493391][T12361] bridge_slave_0: entered promiscuous mode [ 706.513384][T12382] vlan0: entered promiscuous mode [ 706.683500][ T5934] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 706.728141][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.744638][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.752146][T12361] bridge_slave_1: entered allmulticast mode [ 706.802196][T12361] bridge_slave_1: entered promiscuous mode [ 706.893647][T11255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 706.966909][T11255] usb 2-1: no configurations [ 707.412828][T11255] usb 2-1: can't read configurations, error -22 [ 707.417755][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 707.489534][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 707.632849][ T5934] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 707.756414][ T5934] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 707.906050][ T5934] usb 4-1: Product: syz [ 707.910300][ T5934] usb 4-1: Manufacturer: syz [ 707.955799][ T5934] usb 4-1: SerialNumber: syz [ 708.004595][ T5934] usb 4-1: config 0 descriptor?? [ 708.038500][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 708.139376][T12404] tipc: Enabling of bearer rejected, failed to enable media [ 708.190757][T12361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.290726][T12361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.464806][T11354] Bluetooth: hci5: command tx timeout [ 708.623617][ T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 708.631463][ T5934] gspca_zc3xx: reg_w_i err -110 [ 708.637349][ T5934] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 708.965411][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.981607][ T9] usb 3-1: USB disconnect, device number 41 [ 708.983519][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 709.080317][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.316199][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.607919][ T43] usb 1-1: Product: syz [ 709.612426][ T43] usb 1-1: Manufacturer: syz [ 709.676124][ T43] usb 1-1: SerialNumber: syz [ 709.745772][ T43] usb 1-1: selecting invalid altsetting 1 [ 709.802579][T12361] team0: Port device team_slave_0 added [ 709.873393][T12361] team0: Port device team_slave_1 added [ 709.984027][T11255] usb 4-1: USB disconnect, device number 41 [ 710.543569][T11354] Bluetooth: hci5: command tx timeout [ 711.075416][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 711.086698][T12437] tipc: Cannot configure node identity twice [ 711.095172][T12361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.116323][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.189352][T12361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.211136][T12361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.250987][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.322234][T12361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.734783][T12361] hsr_slave_0: entered promiscuous mode [ 711.742528][T12361] hsr_slave_1: entered promiscuous mode [ 711.751061][T12361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 711.759152][T12361] Cannot create hsr debugfs directory [ 711.916536][T12453] netlink: 'syz.2.1900': attribute type 6 has an invalid length. [ 711.994267][T11354] Bluetooth: hci1: command 0x0406 tx timeout [ 712.460462][ T43] cdc_ncm 1-1:1.0: bind() failure [ 712.490170][ T43] cdc_ncm 1-1:1.1: skipping garbage [ 712.509523][ T43] cdc_ncm 1-1:1.1: invalid descriptor buffer length [ 712.557172][ T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 712.624599][T11354] Bluetooth: hci5: command tx timeout [ 712.727338][ T43] cdc_ncm 1-1:1.1: bind() failure [ 712.742852][ T43] usb 1-1: USB disconnect, device number 49 [ 712.891656][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1903'. [ 713.811386][ T43] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 714.008678][T12468] overlayfs: workdir and upperdir must be separate subtrees [ 714.864484][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 714.879792][ T43] usb 1-1: config 0 has no interfaces? [ 715.446215][ T43] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 715.474271][ T43] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 715.482399][ T43] usb 1-1: Manufacturer: syz [ 715.518902][ T43] usb 1-1: config 0 descriptor?? [ 716.433255][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 716.664056][T12492] x_tables: duplicate underflow at hook 3 [ 716.801909][T12498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 716.808504][T12498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 716.820702][T12498] vhci_hcd vhci_hcd.0: Device attached [ 716.849505][T12498] sctp: [Deprecated]: syz.1.1911 (pid 12498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 716.849505][T12498] Use struct sctp_sack_info instead [ 717.063601][T11255] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 717.112344][T12361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 717.113595][ T9] usb 1-1: USB disconnect, device number 50 [ 717.133662][ T5947] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 717.180208][T12361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 717.199802][T12361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 717.260535][T12361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 717.379574][ T5947] usb 2-1: Invalid ep0 maxpacket: 16 [ 717.796690][ T5947] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 717.987709][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 718.004207][ T5947] usb 2-1: Invalid ep0 maxpacket: 16 [ 718.018843][ T5947] usb usb2-port1: attempt power cycle [ 718.045939][ T43] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 718.214321][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 718.223761][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 718.233113][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.246030][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.259366][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 718.270222][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.280858][ T43] usb 1-1: Product: syz [ 718.289541][ T43] usb 1-1: Manufacturer: syz [ 718.296760][ T43] usb 1-1: SerialNumber: syz [ 718.414636][ T5947] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 718.465275][ T5947] usb 2-1: Invalid ep0 maxpacket: 16 [ 718.512926][T12361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.540049][T12517] fuse: Bad value for 'user_id' [ 718.545181][T12517] fuse: Bad value for 'user_id' [ 718.552856][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.561919][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.572177][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.581463][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.643759][ T5947] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 718.676904][ T5947] usb 2-1: Invalid ep0 maxpacket: 16 [ 718.695400][ T5947] usb usb2-port1: unable to enumerate USB device [ 718.816518][T12361] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.872874][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.875017][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 718.880174][ T7931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.945020][T12523] bridge0: entered promiscuous mode [ 718.995592][T12523] bridge0: port 3(macvlan2) entered blocking state [ 719.006311][T12523] bridge0: port 3(macvlan2) entered disabled state [ 719.016856][T12523] macvlan2: entered allmulticast mode [ 719.022485][T12523] bridge0: entered allmulticast mode [ 719.035742][T12523] macvlan2: left allmulticast mode [ 719.041429][T12523] bridge0: left allmulticast mode [ 719.056459][T12523] bridge0: left promiscuous mode [ 719.191339][T11982] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.198605][T11982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.450377][T12499] vhci_hcd: connection reset by peer [ 720.586777][ T43] usb 1-1: 0:2 : does not exist [ 720.730654][ T13] vhci_hcd: stop threads [ 720.735101][ T13] vhci_hcd: release socket [ 720.762582][ T13] vhci_hcd: disconnect device [ 720.790002][ T43] usb 1-1: USB disconnect, device number 51 [ 722.217936][T11255] vhci_hcd: vhci_device speed not set [ 722.486154][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.264943][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 723.275257][ T9] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 723.288754][ T9] usb 3-1: chopping to 0 config(s) [ 723.311966][ T9] usb 3-1: can't read configurations, error -32 [ 723.354230][T12361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.493906][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 725.183683][ T9] usb 3-1: device descriptor read/64, error -71 [ 725.365916][ T9] usb usb3-port1: attempt power cycle [ 726.045997][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 726.094380][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 726.107023][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.173677][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.205743][T12361] veth0_vlan: entered promiscuous mode [ 726.232787][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.268699][T12361] veth1_vlan: entered promiscuous mode [ 726.293022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.340859][ T9] usb 3-1: Product: syz [ 726.366818][ T9] usb 3-1: Manufacturer: syz [ 726.371503][ T9] usb 3-1: SerialNumber: syz [ 726.377279][T12361] veth0_macvtap: entered promiscuous mode [ 726.428946][T12361] veth1_macvtap: entered promiscuous mode [ 726.585513][T12361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.783251][ T9] usb 3-1: 0:2 : does not exist [ 726.824763][T12361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.885084][ T9] usb 3-1: USB disconnect, device number 44 [ 726.900495][T12361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.903588][T11255] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 726.945827][T12361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.978533][T12361] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.986503][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 727.116426][T12361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.462236][T12592] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1934'. [ 727.580309][T12592] syz.2.1934: attempt to access beyond end of device [ 727.580309][T12592] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 727.781597][T12580] vlan2: entered promiscuous mode [ 727.967128][T12590] netlink: 'syz.2.1934': attribute type 29 has an invalid length. [ 728.130599][T11255] usb 1-1: unable to get BOS descriptor or descriptor too short [ 728.140585][T11255] usb 1-1: no configurations [ 728.165423][T12602] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1936'. [ 728.171758][T11255] usb 1-1: can't read configurations, error -22 [ 728.389722][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.410132][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.455296][T11986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.479198][T11986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.678503][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 728.770481][T12613] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1940'. [ 728.828230][T12613] tipc: Enabling of bearer rejected, failed to enable media [ 732.331636][T11255] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 732.764262][T11255] usb 1-1: Using ep0 maxpacket: 16 [ 734.443928][T11255] usb 1-1: device descriptor read/all, error -71 [ 734.755614][ T5957] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 736.088666][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 736.145765][T12661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1953'. [ 736.311206][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 736.487513][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 736.748333][T12675] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1957'. [ 737.145329][T12680] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1958'. [ 737.563212][ T5957] usb 2-1: device descriptor read/64, error -71 [ 737.805030][ T5957] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 737.953609][ T5957] usb 2-1: device descriptor read/64, error -71 [ 738.094516][ T5957] usb usb2-port1: attempt power cycle [ 738.124165][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 738.743536][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 738.762805][ T43] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 738.779075][ T43] usb 6-1: config 0 has no interface number 0 [ 738.830413][T10339] IPVS: starting estimator thread 0... [ 738.866028][ T43] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 738.903064][ T43] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 738.913081][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.921592][ T43] usb 6-1: Product: syz [ 738.926515][ T43] usb 6-1: Manufacturer: syz [ 738.931574][ T43] usb 6-1: SerialNumber: syz [ 738.958136][T12701] IPVS: using max 29 ests per chain, 69600 per kthread [ 738.966816][ T5957] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 738.996560][ T5957] usb 2-1: device descriptor read/8, error -71 [ 739.144397][ T43] usb 6-1: config 0 descriptor?? [ 739.518433][ T43] usb 6-1: USB disconnect, device number 2 [ 739.656654][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.593633][T10339] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 740.814740][T10339] usb 4-1: Using ep0 maxpacket: 16 [ 741.253264][T12732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.288854][T10339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.358605][T10339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.432496][T10339] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.509690][T10339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.560053][T10339] usb 4-1: Product: syz [ 742.611431][T12736] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 742.622244][T10339] usb 4-1: Manufacturer: syz [ 742.634275][T12736] overlayfs: failed to set xattr on upper [ 742.640067][T12736] overlayfs: ...falling back to redirect_dir=nofollow. [ 742.673071][T10339] usb 4-1: SerialNumber: syz [ 742.699481][T12736] overlayfs: ...falling back to metacopy=off. [ 742.763328][T12736] overlayfs: ...falling back to index=off. [ 742.804651][T12736] overlayfs: ...falling back to uuid=null. [ 742.912465][T12720] fuse: Bad value for 'user_id' [ 742.917564][T12720] fuse: Bad value for 'user_id' [ 742.924778][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.934072][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.945460][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.954624][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.399396][T12748] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.464360][T12747] netlink: 'syz.5.1985': attribute type 3 has an invalid length. [ 743.518626][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.556090][T12747] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.580926][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.605192][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.811581][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.824879][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.850532][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.860731][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 743.870336][T12746] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1985'. [ 744.400778][T10339] usb 4-1: 0:2 : does not exist [ 744.605483][T10339] usb 4-1: USB disconnect, device number 42 [ 750.124069][T11255] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 750.405674][T11255] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.417182][T11255] usb 6-1: config 0 interface 0 has no altsetting 0 [ 750.441246][T11255] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 750.656957][T11255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.666816][T11255] usb 6-1: Product: syz [ 750.671196][T11255] usb 6-1: Manufacturer: syz [ 751.194466][T11255] usb 6-1: SerialNumber: syz [ 751.261474][T11255] usb 6-1: config 0 descriptor?? [ 751.360902][T11255] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 751.397123][T11255] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 751.674453][T11255] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 751.706504][T11255] usb 6-1: media controller created [ 751.798589][T11255] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.982118][T11255] DVB: Unable to find symbol tda10046_attach() [ 752.023489][T11255] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 752.047957][T11255] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 752.060092][T11255] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 752.101145][T11255] usb 6-1: USB disconnect, device number 3 [ 752.257619][T12826] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 752.264213][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 752.287860][T12826] vhci_hcd vhci_hcd.0: Device attached [ 752.344179][T12828] vhci_hcd: connection closed [ 752.527758][ T5957] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 753.279061][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.285704][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.315347][T11988] vhci_hcd: stop threads [ 753.323758][T11988] vhci_hcd: release socket [ 753.328409][T11988] vhci_hcd: disconnect device [ 753.345322][T11255] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 753.353809][ T5957] usb 33-1: enqueue for inactive port 0 [ 753.400451][T12838] __nla_validate_parse: 2 callbacks suppressed [ 753.400472][T12838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2011'. [ 753.461197][T12838] bridge0: entered promiscuous mode [ 753.467147][ T5957] vhci_hcd: vhci_device speed not set [ 753.478917][T12838] bridge0: port 4(macvlan2) entered blocking state [ 753.487066][T12838] bridge0: port 4(macvlan2) entered disabled state [ 753.504642][T12838] macvlan2: entered allmulticast mode [ 753.504667][T12838] bridge0: entered allmulticast mode [ 753.526263][T12838] macvlan2: left allmulticast mode [ 753.526291][T12838] bridge0: left allmulticast mode [ 753.536144][T12838] bridge0: left promiscuous mode [ 753.577069][T11255] usb 6-1: config 2 has an invalid interface number: 78 but max is 0 [ 753.589168][T11255] usb 6-1: config 2 has no interface number 0 [ 753.600552][ T30] audit: type=1326 audit(1751943622.902:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccef8e929 code=0x7ffc0000 [ 753.609371][T11255] usb 6-1: config 2 interface 78 has no altsetting 0 [ 753.673197][T11255] usb 6-1: New USB device found, idVendor=0403, idProduct=937a, bcdDevice=57.69 [ 753.692186][T11255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.700775][ T30] audit: type=1326 audit(1751943622.902:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fcccef8e929 code=0x7ffc0000 [ 753.750342][T11255] usb 6-1: Product: syz [ 753.773838][T11255] usb 6-1: Manufacturer: syz [ 753.778536][T11255] usb 6-1: SerialNumber: syz [ 753.793708][ T30] audit: type=1326 audit(1751943622.902:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcccef8e929 code=0x7ffc0000 [ 753.843734][ T5905] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 753.898327][ T30] audit: type=1326 audit(1751943622.902:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcccef8d290 code=0x7ffc0000 [ 753.989737][ T30] audit: type=1326 audit(1751943622.902:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcccef8e52b code=0x7ffc0000 [ 754.000765][ T5905] usb 4-1: device descriptor read/64, error -71 [ 754.075814][T11255] ftdi_sio 6-1:2.78: FTDI USB Serial Device converter detected [ 754.082779][ T30] audit: type=1326 audit(1751943622.902:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcccef8e52b code=0x7ffc0000 [ 754.105408][T11255] ftdi_sio ttyUSB0: unknown device type: 0x5769 [ 754.141658][T11255] usb 6-1: USB disconnect, device number 4 [ 754.145079][ T30] audit: type=1326 audit(1751943622.942:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcccef8e52b code=0x7ffc0000 [ 754.189976][ T30] audit: type=1326 audit(1751943622.942:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcccef8e52b code=0x7ffc0000 [ 754.197775][ T120] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 754.248034][T11255] ftdi_sio 6-1:2.78: device disconnected [ 754.353939][ T5905] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 754.389042][ T30] audit: type=1326 audit(1751943623.022:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcccef8e52b code=0x7ffc0000 [ 754.426426][ T30] audit: type=1326 audit(1751943623.092:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12839 comm="syz.3.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcccef8e52b code=0x7ffc0000 [ 754.452621][ T120] usb 1-1: Using ep0 maxpacket: 32 [ 754.475285][ T120] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 754.492302][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.510693][ T120] usb 1-1: config 0 descriptor?? [ 754.533835][ T5905] usb 4-1: device descriptor read/64, error -71 [ 754.548918][ T120] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 754.654293][ T5905] usb usb4-port1: attempt power cycle [ 755.043688][ T5905] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 755.107453][ T5905] usb 4-1: device descriptor read/8, error -71 [ 755.424816][ T5905] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 755.469138][ T5905] usb 4-1: device descriptor read/8, error -71 [ 755.543308][T12850] could not allocate digest TFM handle poly1305-generic [ 755.616889][ T5905] usb usb4-port1: unable to enumerate USB device [ 755.792551][ T120] gspca_vc032x: reg_w err -71 [ 755.798362][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.815575][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.821014][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.835795][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.849411][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.861501][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.882092][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.911429][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.918719][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.933730][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.939151][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.952619][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.959382][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.981031][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.987054][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.992453][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 755.995126][ T43] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 755.999724][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 756.011757][ T120] gspca_vc032x: I2c Bus Busy Wait 00 [ 756.019065][ T120] gspca_vc032x: Unknown sensor... [ 756.024515][ T120] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 756.038558][ T120] usb 1-1: USB disconnect, device number 56 [ 756.100925][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 756.250956][T12867] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 756.258515][T12867] PKCS7: Only support pkcs7_signedData type [ 756.828873][T12858] vlan0: entered promiscuous mode [ 756.931585][ T120] libceph: connect (1)[c::]:6789 error -101 [ 756.950808][ T120] libceph: mon0 (1)[c::]:6789 connect error [ 756.998259][T12877] netlink: 'syz.5.2023': attribute type 1 has an invalid length. [ 757.097619][T12879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 757.964344][ T120] libceph: connect (1)[c::]:6789 error -101 [ 757.972386][ T120] libceph: mon0 (1)[c::]:6789 connect error [ 758.723314][T11255] libceph: connect (1)[c::]:6789 error -101 [ 758.733697][T11255] libceph: mon0 (1)[c::]:6789 connect error [ 758.984440][T12870] ceph: No mds server is up or the cluster is laggy [ 759.824579][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 759.854336][ T43] usb 2-1: no configurations [ 759.859009][ T43] usb 2-1: can't read configurations, error -22 [ 761.563777][T12902] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 762.016050][T12903] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 762.211624][T12903] overlayfs: failed to set xattr on upper [ 762.245819][T12903] overlayfs: ...falling back to redirect_dir=nofollow. [ 762.266585][T12903] overlayfs: ...falling back to metacopy=off. [ 762.329703][T12903] overlayfs: ...falling back to index=off. [ 762.373642][T12903] overlayfs: ...falling back to uuid=null. [ 762.387005][T12902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 762.406598][T12903] overlayfs: failed to clone lowerpath [ 762.531135][T12907] bond3: (slave veth15): Enslaving as an active interface with a down link [ 763.260877][T12924] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2036'. [ 763.530546][T12930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2037'. [ 763.566450][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 764.033271][T12938] FAULT_INJECTION: forcing a failure. [ 764.033271][T12938] name failslab, interval 1, probability 0, space 0, times 0 [ 764.094478][T12938] CPU: 1 UID: 0 PID: 12938 Comm: syz.0.2038 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 764.094509][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 764.094522][T12938] Call Trace: [ 764.094531][T12938] [ 764.094540][T12938] dump_stack_lvl+0x189/0x250 [ 764.094571][T12938] ? __pfx____ratelimit+0x10/0x10 [ 764.094603][T12938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.094625][T12938] ? __pfx__printk+0x10/0x10 [ 764.094658][T12938] ? __pfx___might_resched+0x10/0x10 [ 764.094680][T12938] ? fs_reclaim_acquire+0x7d/0x100 [ 764.094706][T12938] should_fail_ex+0x414/0x560 [ 764.094740][T12938] should_failslab+0xa8/0x100 [ 764.094773][T12938] kmem_cache_alloc_noprof+0x73/0x3c0 [ 764.094801][T12938] ? getname_flags+0xb8/0x540 [ 764.094826][T12938] getname_flags+0xb8/0x540 [ 764.094850][T12938] do_sys_openat2+0xbc/0x1c0 [ 764.094876][T12938] ? __pfx_do_sys_openat2+0x10/0x10 [ 764.094899][T12938] ? ksys_write+0x22a/0x250 [ 764.094929][T12938] ? __pfx_ksys_write+0x10/0x10 [ 764.094953][T12938] ? rcu_is_watching+0x15/0xb0 [ 764.094980][T12938] __x64_sys_openat+0x138/0x170 [ 764.095009][T12938] do_syscall_64+0xfa/0x3b0 [ 764.095027][T12938] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.095056][T12938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.095083][T12938] ? clear_bhb_loop+0x60/0xb0 [ 764.095107][T12938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.095127][T12938] RIP: 0033:0x7f7e3eb8e929 [ 764.095146][T12938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.095164][T12938] RSP: 002b:00007f7e3fa4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 764.095185][T12938] RAX: ffffffffffffffda RBX: 00007f7e3edb6080 RCX: 00007f7e3eb8e929 [ 764.095198][T12938] RDX: 0000000000101001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 764.095212][T12938] RBP: 00007f7e3fa4f090 R08: 0000000000000000 R09: 0000000000000000 [ 764.095225][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.095235][T12938] R13: 0000000000000000 R14: 00007f7e3edb6080 R15: 00007ffe7f1bbec8 [ 764.095267][T12938] [ 764.325862][T12940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2040'. [ 764.341859][T12940] macvlan2: entered promiscuous mode [ 764.357917][T12940] macvlan2: entered allmulticast mode [ 764.405401][T12940] bridge0: port 3(macvlan2) entered blocking state [ 764.625923][T12940] bridge0: port 3(macvlan2) entered disabled state [ 765.911486][T12955] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2045'. [ 765.961840][T12953] i2c i2c-0: Invalid block write size 34 [ 768.873086][T12986] loop9: detected capacity change from 0 to 8 [ 768.905832][T12986] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 768.921605][T12986] loop9: partition table partially beyond EOD, truncated [ 768.925277][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 768.957248][T12986] loop9: p1 size 81768186 extends beyond EOD, truncated [ 769.070789][T12991] loop2: detected capacity change from 0 to 7 [ 769.086860][T12991] Dev loop2: unable to read RDB block 7 [ 769.112952][T12991] loop2: unable to read partition table [ 769.125304][T12991] loop2: partition table beyond EOD, truncated [ 769.129219][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 769.151438][T12991] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 769.323805][ T5947] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 769.401202][T13003] FAULT_INJECTION: forcing a failure. [ 769.401202][T13003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.469234][T13003] CPU: 1 UID: 0 PID: 13003 Comm: syz.1.2057 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 769.469266][T13003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.469279][T13003] Call Trace: [ 769.469288][T13003] [ 769.469297][T13003] dump_stack_lvl+0x189/0x250 [ 769.469327][T13003] ? __pfx____ratelimit+0x10/0x10 [ 769.469358][T13003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.469381][T13003] ? __pfx__printk+0x10/0x10 [ 769.469422][T13003] should_fail_ex+0x414/0x560 [ 769.469456][T13003] strncpy_from_user+0x36/0x290 [ 769.469488][T13003] getname_flags+0xf3/0x540 [ 769.469514][T13003] do_sys_openat2+0xbc/0x1c0 [ 769.469540][T13003] ? __pfx_do_sys_openat2+0x10/0x10 [ 769.469564][T13003] ? ksys_write+0x22a/0x250 [ 769.469594][T13003] ? __pfx_ksys_write+0x10/0x10 [ 769.469619][T13003] ? rcu_is_watching+0x15/0xb0 [ 769.469645][T13003] __x64_sys_openat+0x138/0x170 [ 769.469675][T13003] do_syscall_64+0xfa/0x3b0 [ 769.469694][T13003] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.469723][T13003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.469743][T13003] ? clear_bhb_loop+0x60/0xb0 [ 769.469768][T13003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.469787][T13003] RIP: 0033:0x7ff34a98e929 [ 769.469805][T13003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.469824][T13003] RSP: 002b:00007ff3487d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 769.469846][T13003] RAX: ffffffffffffffda RBX: 00007ff34abb6080 RCX: 00007ff34a98e929 [ 769.469861][T13003] RDX: 0000000000101001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 769.469875][T13003] RBP: 00007ff3487d5090 R08: 0000000000000000 R09: 0000000000000000 [ 769.469888][T13003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.469907][T13003] R13: 0000000000000000 R14: 00007ff34abb6080 R15: 00007ffcf732e1b8 [ 769.469939][T13003] [ 769.694156][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 769.701370][ T5947] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 769.710168][ T5947] usb 3-1: config 179 has no interface number 0 [ 769.716566][ T5947] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 769.728245][ T5947] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 769.739778][ T5947] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 769.751313][ T5947] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 769.762797][ T5947] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 769.776367][ T5947] usb 3-1: config 179 interface 65 has no altsetting 0 [ 769.783434][ T5947] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 769.792528][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.830343][ T5947] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input33 [ 769.888711][ T5191] input input33: unable to receive magic message: -110 [ 769.956174][ T5191] input input33: unable to receive magic message: -32 [ 769.963962][T11255] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 770.002156][ T5191] input input33: unable to receive magic message: -32 [ 770.044238][ T5191] input input33: unable to receive magic message: -32 [ 770.081880][T13008] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 770.091875][ T5976] input input33: unable to receive magic message: -32 [ 770.122486][ T5191] input input33: unable to receive magic message: -32 [ 770.139800][T11255] usb 1-1: Using ep0 maxpacket: 8 [ 770.155296][ T5191] input input33: unable to receive magic message: -32 [ 770.165871][T11255] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 770.184033][T11255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.196959][ T5191] input input33: unable to receive magic message: -32 [ 770.470759][T11255] usb 1-1: config 0 descriptor?? [ 770.918039][ T5828] usb 3-1: USB disconnect, device number 45 [ 770.924324][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 771.111614][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2064'. [ 771.180476][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2064'. [ 771.663122][T11255] usb 1-1: string descriptor 0 read error: -71 [ 771.687581][T11255] usb 1-1: Found UVC 0.00 device (2833:0201) [ 771.698276][T11255] usb 1-1: No valid video chain found. [ 771.732279][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2065'. [ 771.773058][T11255] usb 1-1: USB disconnect, device number 57 [ 773.477071][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 775.127322][T13058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2076'. [ 775.177682][T13060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2079'. [ 775.220808][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2077'. [ 775.260448][T13060] bridge0: entered promiscuous mode [ 775.275128][T13060] macvlan2: entered promiscuous mode [ 775.324313][T13060] bridge0: port 3(macvlan2) entered blocking state [ 775.336745][T13060] bridge0: port 3(macvlan2) entered disabled state [ 775.359899][T13060] macvlan2: entered allmulticast mode [ 775.373710][T13060] bridge0: entered allmulticast mode [ 775.450626][T13060] macvlan2: left allmulticast mode [ 775.475442][T13060] bridge0: left allmulticast mode [ 775.514693][T13060] bridge0: left promiscuous mode [ 775.523582][ T5828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 775.673801][ T5828] usb 6-1: Using ep0 maxpacket: 8 [ 775.682405][ T5828] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 775.700572][ T5828] usb 6-1: config 179 has no interface number 0 [ 775.715042][ T5828] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 775.727214][ T5828] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 775.738945][ T5828] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 775.751032][ T5828] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 775.773875][ T5828] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 775.795790][ T5828] usb 6-1: config 179 interface 65 has no altsetting 0 [ 775.816485][ T5828] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 775.848169][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.914557][ T5947] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 775.958159][ T5828] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input34 [ 776.881960][T13077] vlan2: entered promiscuous mode [ 776.954430][ T5191] input input34: unable to receive magic message: -110 [ 777.704119][ T5191] input input34: unable to receive magic message: -32 [ 777.795259][ T5828] hid-generic 0005:16BF:5505.0011: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 777.852247][ T5191] input input34: unable to receive magic message: -32 [ 777.908554][ T5191] input input34: unable to receive magic message: -32 [ 777.973254][ T5191] input input34: unable to receive magic message: -32 [ 777.980564][ T5947] usb 1-1: unable to get BOS descriptor or descriptor too short [ 778.011986][ T5947] usb 1-1: no configurations [ 778.017482][ T5947] usb 1-1: can't read configurations, error -22 [ 778.076922][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2091'. [ 778.088121][T13105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2091'. [ 778.099630][T13104] fido_id[13104]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 779.638757][ T5957] usb 6-1: USB disconnect, device number 5 [ 779.638881][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 781.042156][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 782.457302][T13153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.406174][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 783.614454][ T5947] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 783.792365][T11255] libceph: connect (1)[c::]:6789 error -101 [ 783.800334][T11255] libceph: mon0 (1)[c::]:6789 connect error [ 783.813680][ T5947] usb 2-1: Using ep0 maxpacket: 8 [ 783.824562][ T5947] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 783.839228][ T5947] usb 2-1: config 179 has no interface number 0 [ 783.855067][ T5947] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 783.885241][ T5947] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 783.901699][T13176] netlink: 'syz.5.2112': attribute type 1 has an invalid length. [ 783.927059][T13171] ceph: No mds server is up or the cluster is laggy [ 784.263910][T11255] libceph: connect (1)[c::]:6789 error -101 [ 784.293688][T11255] libceph: mon0 (1)[c::]:6789 connect error [ 784.436585][ T5947] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 784.477999][ T5947] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 784.490885][ T5947] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 784.543028][ T5947] usb 2-1: config 179 interface 65 has no altsetting 0 [ 784.562106][ T5947] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 784.590795][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.663805][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 784.669941][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 784.757598][ T5947] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input35 [ 784.773799][T13184] netlink: 'syz.0.2113': attribute type 1 has an invalid length. [ 784.833133][T13178] ceph: No mds server is up or the cluster is laggy [ 784.880803][ T5191] input input35: unable to receive magic message: -110 [ 784.937060][ T5191] input input35: unable to receive magic message: -32 [ 785.128243][ T5947] usb 2-1: USB disconnect, device number 49 [ 785.134263][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 785.280190][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 785.286678][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 785.309921][ T5957] libceph: connect (1)[c::]:6789 error -101 [ 785.333982][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 785.344457][T13192] netlink: 'syz.5.2115': attribute type 1 has an invalid length. [ 785.522454][T13187] ceph: No mds server is up or the cluster is laggy [ 786.358837][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 787.245516][T13207] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 787.498012][T13216] binder: 13214:13216 ioctl 400c620e 200000000000 returned -22 [ 787.583263][T13216] mkiss: ax0: crc mode is auto. [ 789.007946][T13228] veth0_to_bridge: entered promiscuous mode [ 789.228877][T13227] veth0_to_bridge: left promiscuous mode [ 790.446985][T13223] Invalid logical block size (3) [ 790.620963][T13249] xt_bpf: check failed: parse error [ 791.195648][T13259] gretap0: entered promiscuous mode [ 791.261869][T13259] gretap0: left promiscuous mode [ 793.165999][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 793.198518][T13281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2139'. [ 793.225724][T13281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2139'. [ 793.641508][T13291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2147'. [ 793.680567][T13291] bridge0: entered promiscuous mode [ 793.738134][T13291] macvlan2: entered promiscuous mode [ 793.764690][T13291] macvlan2: entered allmulticast mode [ 793.770147][T13291] bridge0: entered allmulticast mode [ 793.920618][T13291] bridge0: port 4(macvlan2) entered blocking state [ 793.953654][T13291] bridge0: port 4(macvlan2) entered disabled state [ 794.020147][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 794.303559][ T5156] Bluetooth: hci5: command 0x0405 tx timeout [ 794.755720][T13291] bridge0: left promiscuous mode [ 794.796799][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2151'. [ 794.904896][T13304] bridge0: entered promiscuous mode [ 795.022960][T13304] bridge0: port 3(macvlan2) entered blocking state [ 795.109455][T13304] bridge0: port 3(macvlan2) entered disabled state [ 795.221564][T13304] macvlan2: entered allmulticast mode [ 795.335825][T13304] bridge0: entered allmulticast mode [ 795.495097][T13304] macvlan2: left allmulticast mode [ 795.500379][T13304] bridge0: left allmulticast mode [ 795.507814][T13304] bridge0: left promiscuous mode [ 797.899250][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2166'. [ 801.125465][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'. [ 801.146941][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2179'. [ 801.187490][T13396] loop2: detected capacity change from 0 to 7 [ 801.238051][T11255] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 801.265958][T13396] Dev loop2: unable to read RDB block 7 [ 801.271754][T13396] loop2: unable to read partition table [ 801.278412][T13396] loop2: partition table beyond EOD, truncated [ 801.284875][T13396] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 801.774360][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 801.858310][T11255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 802.016596][T11255] usb 2-1: config 0 has no interfaces? [ 802.061270][T11255] usb 2-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 802.081222][T11255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.094074][T13401] could not allocate digest TFM handle poly1305-generic [ 802.248765][T11255] usb 2-1: Product: syz [ 802.253017][T11255] usb 2-1: Manufacturer: syz [ 802.259774][T11255] usb 2-1: SerialNumber: syz [ 802.297909][T11255] usb 2-1: config 0 descriptor?? [ 802.524924][T13394] openvswitch: netlink: Message has 4 unknown bytes. [ 803.115042][T13423] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2184'. [ 803.161882][T13423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2184'. [ 803.696196][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 803.980254][ T120] usb 2-1: USB disconnect, device number 50 [ 805.603527][T11255] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 805.949502][T13437] vlan0: entered promiscuous mode [ 807.039556][T13449] futex_wake_op: syz.5.2192 tries to shift op by 32; fix this program [ 807.318619][T11255] usb 2-1: unable to get BOS descriptor or descriptor too short [ 807.390691][T13455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2193'. [ 807.622352][T11255] usb 2-1: no configurations [ 807.627502][T11255] usb 2-1: can't read configurations, error -22 [ 807.773979][ T120] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 807.970863][ T120] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 808.001419][ T120] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 808.046331][ T120] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.093494][ T120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.101562][ T120] usb 1-1: Product: syz [ 808.148060][ T120] usb 1-1: Manufacturer: syz [ 808.165187][ T120] usb 1-1: SerialNumber: syz [ 809.573747][ T120] cdc_ncm 1-1:1.0: bind() failure [ 809.594135][ T120] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 809.601112][ T120] cdc_ncm 1-1:1.1: bind() failure [ 809.648521][ T120] usb 1-1: USB disconnect, device number 60 [ 809.793502][T11255] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 809.875145][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 809.958372][T11255] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 810.013540][T11255] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 810.073441][T11255] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 810.134334][T11255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.177729][T13465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 810.219908][T11255] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 811.289303][ T43] usb 2-1: USB disconnect, device number 53 [ 811.633596][ T5947] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 811.985790][ T5947] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 812.017527][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.066099][ T5947] usb 3-1: config 0 descriptor?? [ 812.147401][T13495] loop2: detected capacity change from 0 to 7 [ 812.173573][T13495] Dev loop2: unable to read RDB block 7 [ 812.179293][T13495] loop2: unable to read partition table [ 812.222480][T13495] loop2: partition table beyond EOD, truncated [ 812.243814][T13495] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.532332][ T120] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 812.695856][ T120] usb 4-1: device descriptor read/64, error -71 [ 813.163780][ T120] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 813.350447][ T120] usb 4-1: device descriptor read/64, error -71 [ 813.484285][ T120] usb usb4-port1: attempt power cycle [ 813.522447][ T5947] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 813.547893][ T5947] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 813.574411][ T5947] asix 3-1:0.0: probe with driver asix failed with error -71 [ 813.862902][ T5947] usb 3-1: USB disconnect, device number 46 [ 813.873503][ T120] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 814.307972][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.314949][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.583492][ T120] usb 4-1: device descriptor read/8, error -71 [ 814.855669][ T120] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 814.886231][ T120] usb 4-1: device descriptor read/8, error -71 [ 814.942217][T13529] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.951213][T13529] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.002982][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 815.019609][T13529] bridge0: entered allmulticast mode [ 815.036764][ T120] usb usb4-port1: unable to enumerate USB device [ 815.067591][T13531] netlink: 448 bytes leftover after parsing attributes in process `syz.2.2221'. [ 815.252440][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c2ec00: rx timeout, send abort [ 815.987824][T13525] bridge_slave_1: left allmulticast mode [ 816.011824][T13525] bridge_slave_1: left promiscuous mode [ 816.025831][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.109779][T13525] bridge_slave_0: left allmulticast mode [ 816.126283][T13525] bridge_slave_0: left promiscuous mode [ 816.135667][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.301940][ T43] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 816.673833][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 816.691903][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.723264][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.737518][ T43] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 816.750487][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.792002][ T43] usb 1-1: config 0 descriptor?? [ 817.322918][ T43] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 817.551238][ T43] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 817.805725][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.958502][ T5828] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 818.044738][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.161848][ T43] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 818.217639][ T5828] usb 4-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 818.240326][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 923.223344][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 923.223368][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13344/1:b..l [ 923.224073][ C0] rcu: (detected by 0, t=10502 jiffies, g=54949, q=116 ncpus=2) [ 923.224095][ C0] task:syz.2.2163 state:R running task stack:22112 pid:13344 tgid:13344 ppid:5844 task_flags:0x40064c flags:0x00004002 [ 923.224163][ C0] Call Trace: [ 923.224172][ C0] [ 923.224189][ C0] __schedule+0x16a2/0x4cb0 [ 923.224242][ C0] ? __lock_acquire+0xab9/0xd20 [ 923.224266][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 923.224303][ C0] ? __pfx___schedule+0x10/0x10 [ 923.224342][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 923.224372][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 923.224406][ C0] preempt_schedule_irq+0xb5/0x150 [ 923.224438][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 923.224469][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 923.224506][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 923.224533][ C0] irqentry_exit+0x6f/0x90 [ 923.224563][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 923.224586][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 923.224607][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab c1 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 923.224626][ C0] RSP: 0018:ffffc9000e9fed18 EFLAGS: 00000206 [ 923.224646][ C0] RAX: 9541428fc1ab1800 RBX: 0000000000000000 RCX: 9541428fc1ab1800 [ 923.224663][ C0] RDX: 0000000000000001 RSI: ffffffff8db707c4 RDI: ffffffff8be1c200 [ 923.224678][ C0] RBP: ffffffff81729af5 R08: 0000000000000000 R09: ffffffff81729af5 [ 923.224694][ C0] R10: ffffc9000e9feed8 R11: ffffffff81acf220 R12: 0000000000000002 [ 923.224710][ C0] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246 [ 923.224729][ C0] ? unwind_next_frame+0xa5/0x2390 [ 923.224752][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 923.224781][ C0] ? unwind_next_frame+0xa5/0x2390 [ 923.224823][ C0] ? unwind_next_frame+0xa5/0x2390 [ 923.224852][ C0] ? save_stack+0xf7/0x1f0 [ 923.224883][ C0] ? unwind_next_frame+0xa5/0x2390 [ 923.224904][ C0] unwind_next_frame+0xc2/0x2390 [ 923.224927][ C0] ? unwind_next_frame+0xa5/0x2390 [ 923.224955][ C0] ? unwind_next_frame+0xa5/0x2390 [ 923.224979][ C0] ? stack_trace_save+0x9c/0xe0 [ 923.225012][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 923.225040][ C0] arch_stack_walk+0x11c/0x150 [ 923.225073][ C0] ? save_stack+0xf7/0x1f0 [ 923.225107][ C0] stack_trace_save+0x9c/0xe0 [ 923.225134][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 923.225174][ C0] save_stack+0xf7/0x1f0 [ 923.225207][ C0] ? __pfx_save_stack+0x10/0x10 [ 923.225254][ C0] ? page_ext_put+0x97/0xc0 [ 923.225291][ C0] __reset_page_owner+0x71/0x1f0 [ 923.225325][ C0] free_unref_folios+0xcd2/0x1570 [ 923.225378][ C0] folios_put_refs+0x559/0x640 [ 923.225421][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 923.225456][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 923.225494][ C0] shmem_undo_range+0x49e/0x14b0 [ 923.225538][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 923.225590][ C0] ? kernel_text_address+0xa5/0xe0 [ 923.225617][ C0] ? __kernel_text_address+0xd/0x40 [ 923.225683][ C0] ? kasan_save_stack+0x4d/0x60 [ 923.225709][ C0] ? kasan_save_stack+0x3e/0x60 [ 923.225735][ C0] ? call_rcu+0x157/0x9c0 [ 923.225762][ C0] shmem_evict_inode+0x272/0xa70 [ 923.225804][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 923.225829][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 923.225870][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 923.225906][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 923.225939][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 923.225970][ C0] evict+0x504/0x9c0 [ 923.226007][ C0] ? __pfx_evict+0x10/0x10 [ 923.226032][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 923.226065][ C0] ? _raw_spin_unlock+0x28/0x50 [ 923.226093][ C0] ? iput+0x6d8/0x9d0 [ 923.226122][ C0] __dentry_kill+0x209/0x660 [ 923.226144][ C0] ? dput+0x37/0x2b0 [ 923.226165][ C0] dput+0x19f/0x2b0 [ 923.226186][ C0] __fput+0x68e/0xa70 [ 923.226224][ C0] task_work_run+0x1d4/0x260 [ 923.226258][ C0] ? __pfx_task_work_run+0x10/0x10 [ 923.226300][ C0] do_exit+0x6b5/0x22e0 [ 923.226344][ C0] ? __pfx_do_exit+0x10/0x10 [ 923.226374][ C0] ? proc_coredump_connector+0x172/0x4b0 [ 923.226398][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 923.226433][ C0] do_group_exit+0x21c/0x2d0 [ 923.226462][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.226497][ C0] get_signal+0x125e/0x1310 [ 923.226545][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 923.226584][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 923.226615][ C0] ? __bad_area_nosemaphore+0x3fb/0x780 [ 923.226663][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 923.226690][ C0] irqentry_exit_to_user_mode+0x81/0x120 [ 923.226725][ C0] exc_page_fault+0x9f/0xf0 [ 923.226759][ C0] asm_exc_page_fault+0x26/0x30 [ 923.226780][ C0] RIP: 0033:0x7f777b18e931 [ 923.226798][ C0] RSP: 002b:00000000fffffe10 EFLAGS: 00010217 [ 923.226817][ C0] RAX: 0000000000000000 RBX: 00007f777b3b6080 RCX: 00007f777b18e929 [ 923.226839][ C0] RDX: 0000000000000000 RSI: 00000000fffffe10 RDI: 0000000000000000 [ 923.226853][ C0] RBP: 00007f777b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 923.226867][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.226881][ C0] R13: 0000000000000001 R14: 00007f777b3b6080 R15: 00007fff5408f378 [ 923.226916][ C0] [ 923.226933][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g54949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 923.226957][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=49279 [ 923.226971][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g54949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 923.226994][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 923.227006][ C0] rcu: RCU grace-period kthread stack dump: [ 923.227015][ C0] task:rcu_preempt state:I stack:27080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 923.227076][ C0] Call Trace: [ 923.227085][ C0] [ 923.227099][ C0] __schedule+0x16a2/0x4cb0 [ 923.227137][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 923.227174][ C0] ? schedule+0x165/0x360 [ 923.227205][ C0] ? __lock_acquire+0xab9/0xd20 [ 923.227226][ C0] ? __pfx___schedule+0x10/0x10 [ 923.227273][ C0] ? schedule+0x91/0x360 [ 923.227306][ C0] schedule+0x165/0x360 [ 923.227339][ C0] schedule_timeout+0x12b/0x270 [ 923.227365][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 923.227390][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 923.227421][ C0] ? __pfx_process_timeout+0x10/0x10 [ 923.227454][ C0] ? prepare_to_swait_event+0x341/0x380 [ 923.227490][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 923.227525][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.227554][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 923.227576][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 923.227595][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 923.227631][ C0] ? finish_swait+0xcd/0x1f0 [ 923.227663][ C0] rcu_gp_kthread+0x99/0x390 [ 923.227687][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 923.227709][ C0] ? __kthread_parkme+0x7b/0x200 [ 923.227734][ C0] ? __kthread_parkme+0x1a1/0x200 [ 923.227766][ C0] kthread+0x711/0x8a0 [ 923.227798][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 923.227818][ C0] ? __pfx_kthread+0x10/0x10 [ 923.227854][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.227882][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.227911][ C0] ? __pfx_kthread+0x10/0x10 [ 923.227941][ C0] ret_from_fork+0x3fc/0x770 [ 923.227966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 923.227994][ C0] ? __switch_to_asm+0x39/0x70 [ 923.228020][ C0] ? __switch_to_asm+0x33/0x70 [ 923.228045][ C0] ? __pfx_kthread+0x10/0x10 [ 923.228074][ C0] ret_from_fork_asm+0x1a/0x30 [ 923.228118][ C0] [ 923.228127][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 923.228144][ C0] Sending NMI from CPU 0 to CPUs 1: [ 923.228181][ C1] NMI backtrace for cpu 1 [ 923.228199][ C1] CPU: 1 UID: 0 PID: 5828 Comm: kworker/1:3 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 923.228228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 923.228244][ C1] Workqueue: usb_hub_wq hub_event [ 923.228263][ C1] RIP: 0010:match_held_lock+0x2/0xc0 [ 923.228288][ C1] Code: 41 5f c3 cc cc cc cc cc e8 fb f8 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 <53> bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 [ 923.228303][ C1] RSP: 0018:ffffc90000a08ce8 EFLAGS: 00000083 [ 923.228316][ C1] RAX: 0000000000000006 RBX: ffff888025a0e518 RCX: efa34f7cbd91a000 [ 923.228328][ C1] RDX: ffff888025a0da00 RSI: ffff8880b8727ad8 RDI: ffff888025a0e518 [ 923.228341][ C1] RBP: 00000000ffffffff R08: ffff88806a63c357 R09: 0000000000000000 [ 923.228353][ C1] R10: ffff88806a63c340 R11: ffffed100d4c786b R12: 0000000000000046 [ 923.228365][ C1] R13: ffff888025a0da00 R14: ffff8880b8727ad8 R15: 0000000000000001 [ 923.228377][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 923.228391][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.228403][ C1] CR2: 00007ff34a85ef40 CR3: 000000007a570000 CR4: 00000000003526f0 [ 923.228418][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 923.228428][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 923.228439][ C1] Call Trace: [ 923.228446][ C1] [ 923.228452][ C1] lock_is_held_type+0xa8/0x190 [ 923.228489][ C1] __hrtimer_run_queues+0x284/0xc60 [ 923.228528][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 923.228552][ C1] ? read_tsc+0x9/0x20 [ 923.228588][ C1] ? rcu_is_watching+0x15/0xb0 [ 923.228609][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 923.228638][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 923.228659][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 923.228683][ C1] [ 923.228688][ C1] [ 923.228694][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 923.228712][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 923.228734][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 25 f1 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 16 f1 1e 00 eb 06 e8 0f f1 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 48 80 00 48 8b 1b 48 8b 44 24 [ 923.228748][ C1] RSP: 0018:ffffc90003efed00 EFLAGS: 00000283 [ 923.228761][ C1] RAX: 1ffffffff1d345c7 RBX: ffffffff8e9a2e38 RCX: 0000000000100000 [ 923.228773][ C1] RDX: ffffc900196b4000 RSI: 0000000000008675 RDI: 0000000000008676 [ 923.228785][ C1] RBP: ffffc90003efee50 R08: ffffffff8fa0bbf7 R09: 1ffffffff1f4177e [ 923.228797][ C1] R10: dffffc0000000000 R11: fffffbfff1f4177f R12: dffffc0000000000 [ 923.228809][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9a2de0 [ 923.228831][ C1] ? console_flush_all+0x13a/0xc40 [ 923.228856][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 923.228883][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 923.228908][ C1] console_unlock+0xc4/0x270 [ 923.228929][ C1] ? __pfx_console_unlock+0x10/0x10 [ 923.228949][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 923.228975][ C1] vprintk_emit+0x5b7/0x7a0 [ 923.228995][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 923.229015][ C1] ? __pfx_snprintf+0x10/0x10 [ 923.229042][ C1] dev_vprintk_emit+0x337/0x3f0 [ 923.229061][ C1] ? hub_event+0x2941/0x4a00 [ 923.229079][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 923.229106][ C1] dev_printk_emit+0xe0/0x130 [ 923.229130][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 923.229150][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 923.229173][ C1] ? __dev_printk+0x131/0x190 [ 923.229196][ C1] _dev_notice+0x10a/0x160 [ 923.229218][ C1] ? __pfx__dev_notice+0x10/0x10 [ 923.229241][ C1] ? usb_get_descriptor+0xb1/0x3e0 [ 923.229257][ C1] ? usb_get_configuration+0x491/0x52c0 [ 923.229282][ C1] usb_get_configuration+0x4cc7/0x52c0 [ 923.229315][ C1] ? rcu_is_watching+0x15/0xb0 [ 923.229333][ C1] ? trace_rpm_return_int+0x83/0x200 [ 923.229368][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 923.229396][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.229419][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.229444][ C1] usb_new_device+0x146/0x16c0 [ 923.229472][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 923.229490][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 923.229516][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.229538][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.229563][ C1] hub_event+0x2941/0x4a00 [ 923.229610][ C1] ? __pfx_hub_event+0x10/0x10 [ 923.229626][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 923.229647][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 923.229664][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 923.229682][ C1] process_scheduled_works+0xade/0x17b0 [ 923.229712][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 923.229738][ C1] worker_thread+0x8a0/0xda0 [ 923.229768][ C1] kthread+0x711/0x8a0 [ 923.229790][ C1] ? __pfx_worker_thread+0x10/0x10 [ 923.229808][ C1] ? __pfx_kthread+0x10/0x10 [ 923.229830][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.229853][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.229876][ C1] ? __pfx_kthread+0x10/0x10 [ 923.229898][ C1] ret_from_fork+0x3fc/0x770 [ 923.229915][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 923.229933][ C1] ? __switch_to_asm+0x39/0x70 [ 923.229953][ C1] ? __switch_to_asm+0x33/0x70 [ 923.229973][ C1] ? __pfx_kthread+0x10/0x10 [ 923.229996][ C1] ret_from_fork_asm+0x1a/0x30 [ 923.230024][ C1] [ 1059.107540][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 226s! [kworker/u8:17:7935] [ 1059.107585][ C0] Modules linked in: [ 1059.107602][ C0] irq event stamp: 5978492 [ 1059.107610][ C0] hardirqs last enabled at (5978491): [] irqentry_exit+0x74/0x90 [ 1059.107651][ C0] hardirqs last disabled at (5978492): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 1059.107685][ C0] softirqs last enabled at (5978488): [] __irq_exit_rcu+0xca/0x1f0 [ 1059.107711][ C0] softirqs last disabled at (5978473): [] __irq_exit_rcu+0xca/0x1f0 [ 1059.107745][ C0] CPU: 0 UID: 0 PID: 7935 Comm: kworker/u8:17 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1059.107785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1059.107808][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1059.107839][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1059.107868][ C0] Code: 8b 3d 54 6f fa 0b 48 89 de 5b e9 f3 90 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 f0 9c 92 65 8b 15 38 cb dc 10 81 e2 00 01 ff 00 [ 1059.107886][ C0] RSP: 0018:ffffc9000444f698 EFLAGS: 00000202 [ 1059.107902][ C0] RAX: ffffffff81b4b090 RBX: ffff8880b863b040 RCX: ffff888031013c00 [ 1059.107918][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1059.107930][ C0] RBP: ffffc9000444f800 R08: ffffffff8fa0bbf7 R09: 1ffffffff1f4177e [ 1059.107946][ C0] R10: dffffc0000000000 R11: fffffbfff1f4177f R12: 1ffff110170e7f2d [ 1059.107961][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 1059.107975][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1059.107992][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.108006][ C0] CR2: 0000001b2ef5ffff CR3: 000000000df38000 CR4: 00000000003526f0 [ 1059.108023][ C0] Call Trace: [ 1059.108033][ C0] [ 1059.108041][ C0] smp_call_function_many_cond+0xf80/0x12d0 [ 1059.108083][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1059.108103][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1059.108131][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 1059.108162][ C0] ? __pfx___text_poke+0x10/0x10 [ 1059.108185][ C0] ? rcu_is_watching+0x15/0xb0 [ 1059.108208][ C0] ? trace_contention_end+0x39/0x120 [ 1059.108271][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1059.108296][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1059.108321][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 1059.108353][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1059.108373][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1059.108406][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1059.108449][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1059.108479][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 1059.108507][ C0] static_key_disable+0x1a/0x20 [ 1059.108530][ C0] toggle_allocation_gate+0x1a1/0x240 [ 1059.108560][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1059.108590][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1059.108627][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.108649][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.108672][ C0] process_scheduled_works+0xade/0x17b0 [ 1059.108725][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1059.108766][ C0] worker_thread+0x8a0/0xda0 [ 1059.108817][ C0] kthread+0x711/0x8a0 [ 1059.108848][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1059.108870][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.108899][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.108926][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.108954][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.108982][ C0] ret_from_fork+0x3fc/0x770 [ 1059.109005][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.109032][ C0] ? __switch_to_asm+0x39/0x70 [ 1059.109056][ C0] ? __switch_to_asm+0x33/0x70 [ 1059.109079][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.109107][ C0] ret_from_fork_asm+0x1a/0x30 [ 1059.109149][ C0] [ 1059.109158][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1059.109189][ C1] NMI backtrace for cpu 1 [ 1059.109200][ C1] CPU: 1 UID: 0 PID: 5828 Comm: kworker/1:3 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1059.109221][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1059.109232][ C1] Workqueue: usb_hub_wq hub_event [ 1059.109252][ C1] RIP: 0010:match_held_lock+0x15/0xc0 [ 1059.109277][ C1] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 <72> 5f 48 8b 46 08 48 85 c0 75 17 31 db 49 89 fe 48 89 f7 31 f6 e8 [ 1059.109291][ C1] RSP: 0018:ffffc90000a08c10 EFLAGS: 00000083 [ 1059.109305][ C1] RAX: 0000000000000006 RBX: 0000000000000001 RCX: efa34f7cbd91a000 [ 1059.109316][ C1] RDX: ffff888025a0da00 RSI: ffff88806a63c300 RDI: ffff888025a0e568 [ 1059.109329][ C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 1059.109339][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: 0000000000000046 [ 1059.109351][ C1] R13: ffff888025a0da00 R14: ffff88806a63c300 R15: 0000000000000003 [ 1059.109364][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1059.109378][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.109390][ C1] CR2: 00007ff34a85ef40 CR3: 000000007a570000 CR4: 00000000003526f0 [ 1059.109405][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1059.109415][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1059.109427][ C1] Call Trace: [ 1059.109434][ C1] [ 1059.109442][ C1] lock_is_held_type+0xa8/0x190 [ 1059.109480][ C1] advance_sched+0x1d2/0xc90 [ 1059.109503][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1059.109526][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1059.109554][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1059.109575][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1059.109602][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1059.109619][ C1] ? read_tsc+0x9/0x20 [ 1059.109643][ C1] ? rcu_is_watching+0x15/0xb0 [ 1059.109663][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1059.109694][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1059.109715][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1059.109740][ C1] [ 1059.109745][ C1] [ 1059.109752][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1059.109770][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1059.109793][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 25 f1 1e 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 16 f1 1e 00 eb 06 e8 0f f1 1e 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ea 48 80 00 48 8b 1b 48 8b 44 24 [ 1059.109807][ C1] RSP: 0018:ffffc90003efed00 EFLAGS: 00000283 [ 1059.109821][ C1] RAX: 1ffffffff1d345c7 RBX: ffffffff8e9a2e38 RCX: 0000000000100000 [ 1059.109834][ C1] RDX: ffffc900196b4000 RSI: 0000000000008675 RDI: 0000000000008676 [ 1059.109845][ C1] RBP: ffffc90003efee50 R08: ffffffff8fa0bbf7 R09: 1ffffffff1f4177e [ 1059.109858][ C1] R10: dffffc0000000000 R11: fffffbfff1f4177f R12: dffffc0000000000 [ 1059.109870][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9a2de0 [ 1059.109893][ C1] ? console_flush_all+0x13a/0xc40 [ 1059.109917][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1059.109944][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1059.109970][ C1] console_unlock+0xc4/0x270 [ 1059.109990][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1059.110011][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1059.110038][ C1] vprintk_emit+0x5b7/0x7a0 [ 1059.110071][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1059.110092][ C1] ? __pfx_snprintf+0x10/0x10 [ 1059.110119][ C1] dev_vprintk_emit+0x337/0x3f0 [ 1059.110139][ C1] ? hub_event+0x2941/0x4a00 [ 1059.110157][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1059.110184][ C1] dev_printk_emit+0xe0/0x130 [ 1059.110208][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 1059.110230][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 1059.110260][ C1] ? __dev_printk+0x131/0x190 [ 1059.110284][ C1] _dev_notice+0x10a/0x160 [ 1059.110307][ C1] ? __pfx__dev_notice+0x10/0x10 [ 1059.110330][ C1] ? usb_get_descriptor+0xb1/0x3e0 [ 1059.110346][ C1] ? usb_get_configuration+0x491/0x52c0 [ 1059.110372][ C1] usb_get_configuration+0x4cc7/0x52c0 [ 1059.110405][ C1] ? rcu_is_watching+0x15/0xb0 [ 1059.110423][ C1] ? trace_rpm_return_int+0x83/0x200 [ 1059.110458][ C1] ? __pfx_usb_get_configuration+0x10/0x10 [ 1059.110496][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.110518][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.110544][ C1] usb_new_device+0x146/0x16c0 [ 1059.110572][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1059.110590][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 1059.110615][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.110638][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.110663][ C1] hub_event+0x2941/0x4a00 [ 1059.110704][ C1] ? __pfx_hub_event+0x10/0x10 [ 1059.110720][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.110741][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.110758][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.110776][ C1] process_scheduled_works+0xade/0x17b0 [ 1059.110807][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1059.110832][ C1] worker_thread+0x8a0/0xda0 [ 1059.110862][ C1] kthread+0x711/0x8a0 [ 1059.110884][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1059.110902][ C1] ? __pfx_kthread+0x10/0x10 [ 1059.110924][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.110946][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.110970][ C1] ? __pfx_kthread+0x10/0x10 [ 1059.110992][ C1] ret_from_fork+0x3fc/0x770 [ 1059.111008][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.111027][ C1] ? __switch_to_asm+0x39/0x70 [ 1059.111047][ C1] ? __switch_to_asm+0x33/0x70 [ 1059.111067][ C1] ? __pfx_kthread+0x10/0x10 [ 1059.111089][ C1] ret_from_fork_asm+0x1a/0x30 [ 1059.111117][ C1] [ 1059.111193][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 1059.111219][ C0] CPU: 0 UID: 0 PID: 7935 Comm: kworker/u8:17 Tainted: G L 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1059.111249][ C0] Tainted: [L]=SOFTLOCKUP [ 1059.111257][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1059.111271][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1059.111302][ C0] Call Trace: [ 1059.111311][ C0] [ 1059.111320][ C0] dump_stack_lvl+0x99/0x250 [ 1059.111345][ C0] ? __asan_memcpy+0x40/0x70 [ 1059.111371][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1059.111395][ C0] ? __pfx__printk+0x10/0x10 [ 1059.111436][ C0] panic+0x2db/0x790 [ 1059.111465][ C0] ? __pfx_panic+0x10/0x10 [ 1059.111489][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 1059.111532][ C0] watchdog_timer_fn+0x862/0x870 [ 1059.111557][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1059.111579][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1059.111609][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1059.111645][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1059.111666][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 1059.111686][ C0] __hrtimer_run_queues+0x4e0/0xc60 [ 1059.111731][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1059.111752][ C0] ? read_tsc+0x9/0x20 [ 1059.111792][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1059.111844][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1059.111872][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1059.111902][ C0] [ 1059.111909][ C0] [ 1059.111919][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1059.111941][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1059.111969][ C0] Code: 8b 3d 54 6f fa 0b 48 89 de 5b e9 f3 90 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 f0 9c 92 65 8b 15 38 cb dc 10 81 e2 00 01 ff 00 [ 1059.111988][ C0] RSP: 0018:ffffc9000444f698 EFLAGS: 00000202 [ 1059.112006][ C0] RAX: ffffffff81b4b090 RBX: ffff8880b863b040 RCX: ffff888031013c00 [ 1059.112022][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1059.112035][ C0] RBP: ffffc9000444f800 R08: ffffffff8fa0bbf7 R09: 1ffffffff1f4177e [ 1059.112052][ C0] R10: dffffc0000000000 R11: fffffbfff1f4177f R12: 1ffff110170e7f2d [ 1059.112068][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 1059.112093][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 1059.112124][ C0] smp_call_function_many_cond+0xf80/0x12d0 [ 1059.112161][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1059.112182][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1059.112210][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 1059.112312][ C0] ? __pfx___text_poke+0x10/0x10 [ 1059.112337][ C0] ? rcu_is_watching+0x15/0xb0 [ 1059.112360][ C0] ? trace_contention_end+0x39/0x120 [ 1059.112394][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1059.112420][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1059.112445][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 1059.112479][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1059.112500][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1059.112534][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1059.112577][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1059.112609][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 1059.112637][ C0] static_key_disable+0x1a/0x20 [ 1059.112661][ C0] toggle_allocation_gate+0x1a1/0x240 [ 1059.112692][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1059.112724][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1059.112761][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.112783][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1059.112806][ C0] process_scheduled_works+0xade/0x17b0 [ 1059.112861][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1059.112902][ C0] worker_thread+0x8a0/0xda0 [ 1059.112954][ C0] kthread+0x711/0x8a0 [ 1059.112985][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1059.113008][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.113038][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.113067][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1059.113096][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.113125][ C0] ret_from_fork+0x3fc/0x770 [ 1059.113149][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.113177][ C0] ? __switch_to_asm+0x39/0x70 [ 1059.113202][ C0] ? __switch_to_asm+0x33/0x70 [ 1059.113232][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.113262][ C0] ret_from_fork_asm+0x1a/0x30 [ 1059.113305][ C0] [ 1060.255758][ C0] Shutting down cpus with NMI [ 1060.256212][ C0] Kernel Offset: disabled