last executing test programs: 4m16.850987641s ago: executing program 0 (id=330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffd, 0xfffffff9, 0xf, 0xf, "000000600000002b2400a14a5ea24f999600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x28, 0x0, 0x9, 0x2, 0x1a, "4b645d679d40126aef7b0ecd7e0876b952c47d"}) 4m16.496213268s ago: executing program 0 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x25) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x10004, &(0x7f0000000240)={[{@noprefix}]}) 4m16.400721635s ago: executing program 0 (id=336): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0xa) dup(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) ptrace(0x10, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='s', 0x1}], 0x1, 0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m16.127461246s ago: executing program 0 (id=340): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x53b, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4c21, 0x8, @empty, 0x99cf}, 0x1c, 0x0}}], 0x1, 0x8c0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) 4m15.906053695s ago: executing program 0 (id=341): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x10}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 4m15.565789769s ago: executing program 0 (id=345): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x7fff}, 0x8) 4m0.118461448s ago: executing program 32 (id=345): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000400), 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x7fff}, 0x8) 3m34.807841053s ago: executing program 4 (id=580): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="9f336d70bf41f19e47e98b40", 0xc}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x48000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m33.509970445s ago: executing program 4 (id=589): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ppoll(&(0x7f00000000c0)=[{r0, 0x1c0}], 0x1, 0x0, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) 3m32.516187443s ago: executing program 3 (id=598): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xd95, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="9f336d70bf41f19e47e98b40", 0xc}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x48000) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m32.448879336s ago: executing program 4 (id=599): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) 3m32.20273764s ago: executing program 4 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 3m31.998148102s ago: executing program 4 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) close(0x3) 3m31.255963303s ago: executing program 3 (id=606): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m30.983412454s ago: executing program 3 (id=609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) 3m30.722233194s ago: executing program 3 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) 3m30.546316425s ago: executing program 3 (id=611): syz_clone3(&(0x7f000000dd80)={0x4100400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/233, 0xe9}], 0x1}, 0x7}], 0x2, 0x8020, 0x0) 3m30.072597555s ago: executing program 4 (id=612): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0x2) 3m29.66220191s ago: executing program 33 (id=612): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0x2) 3m29.479496147s ago: executing program 3 (id=618): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m29.154150409s ago: executing program 34 (id=618): openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26.304482964s ago: executing program 2 (id=1375): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200010000000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 20.03707067s ago: executing program 5 (id=1387): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_GET_GS(0x1e, r3, 0x0, 0x1004) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x70, 0x103301) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e) 18.606810322s ago: executing program 5 (id=1388): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 18.510161684s ago: executing program 2 (id=1390): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0xf7f6f000}) ppoll(&(0x7f0000000400)=[{r3, 0x80}, {r4}, {r5, 0x222}, {r4, 0x83}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2228}, {r3, 0x8001}, {r3, 0x42}, {r5, 0x16c8}, {r4, 0x200}], 0xa, 0x0, &(0x7f0000000380)={[0xfd00]}, 0x8) 15.278434672s ago: executing program 2 (id=1393): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x27fffff, 0x110, r1, 0x3000) 13.815349294s ago: executing program 1 (id=1397): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.490864951s ago: executing program 1 (id=1399): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xc}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 13.145828795s ago: executing program 7 (id=1400): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ab1a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x3, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x3516, 0xc2de, 0x29, 0x0, 0x0) 12.822187065s ago: executing program 5 (id=1401): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0xf7f6f000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001600)={0x3, 0x0, [{0x5695c0a542b2d37a, 0x6, &(0x7f00000000c0)=""/6}, {0x10000, 0x93, &(0x7f0000000480)=""/147}, {0xfec00000, 0x1000, &(0x7f0000000580)=""/4096}]}) r6 = dup(r5) syz_open_dev$sndmidi(0x0, 0x17, 0x120802) ppoll(&(0x7f0000000400)=[{r3, 0x80}, {r4}, {r5, 0x222}, {r4, 0x83}, {r6, 0x400}, {r6, 0x2228}, {r3, 0x8001}, {r3, 0x42}, {r5, 0x16c8}, {r4, 0x200}], 0xa, 0x0, &(0x7f0000000380)={[0xfd00]}, 0x8) socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x22) 11.768724041s ago: executing program 7 (id=1402): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 10.222584916s ago: executing program 5 (id=1403): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) mq_open(0x0, 0x2, 0x1b6, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1085408, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x11) 10.169903178s ago: executing program 1 (id=1404): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) mq_open(0x0, 0x2, 0x1b6, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1085408, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x11) 9.506588964s ago: executing program 1 (id=1405): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ppoll(&(0x7f0000000400)=[{r3, 0x80}, {r4}, {r5, 0x222}, {r4, 0x83}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x2228}, {r3, 0x8001}, {r3, 0x42}, {r5, 0x16c8}, {r4, 0x200}], 0xa, 0x0, &(0x7f0000000380)={[0xfd00]}, 0x8) 7.461010155s ago: executing program 1 (id=1406): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7.102213456s ago: executing program 7 (id=1409): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x26) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.091514406s ago: executing program 2 (id=1410): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}], 0x10, 0x80}}], 0x1, 0x8004) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2208, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x225d, 0x7721, 0x77, 0x0, 0x0) 6.949809415s ago: executing program 2 (id=1411): socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f00000000c0)=[{r2, 0xe7d4c009da6c1985}], 0x1, 0x6) 6.554285127s ago: executing program 7 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x4048010) 6.259178073s ago: executing program 6 (id=1413): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.587398227s ago: executing program 7 (id=1414): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xc}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.743689695s ago: executing program 6 (id=1415): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.723808529s ago: executing program 5 (id=1416): r0 = getpgrp(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x18f, 0xfb50}, 0xa, 0x0, 0x5c, 0xa, r0, r1, 0x7276}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) mmap(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0xc080) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000041000010025b97000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="0080000023b201001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000) 3.478381972s ago: executing program 6 (id=1417): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2.717098302s ago: executing program 5 (id=1418): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r2) 2.716163071s ago: executing program 2 (id=1419): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.456271643s ago: executing program 6 (id=1420): syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e", 0x9}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.321701302s ago: executing program 1 (id=1421): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x24c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) connect(r1, &(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="100016800c00038000000100", @ANYRES32, @ANYBLOB="0600150004"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40c0080) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xd179, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f37, 0xf, 0x3, 0x80008, 0x3, 0xb, 0x4, 0x7, 0xa, 0x5, 0x401, 0xfffffffb, 0x200001, 0x23, 0x10006, 0x101, 0xffffffff, 0x2, 0x1, 0x40000006, 0x89, 0xcaa7, 0x9, 0x92d1, 0x3ff, 0xe68, 0x3d, 0x9, 0x6, 0x0, 0xfffffff9]}) 1.201865183s ago: executing program 6 (id=1422): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x24c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) connect(r1, &(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="100016800c00038000000100", @ANYRES32, @ANYBLOB="0600150004"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40c0080) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0xd179, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f37, 0xf, 0x3, 0x80008, 0x3, 0xb, 0x4, 0x7, 0xa, 0x5, 0x401, 0xfffffffb, 0x200001, 0x23, 0x10006, 0x101, 0xffffffff, 0x2, 0x1, 0x40000006, 0x89, 0xcaa7, 0x9, 0x92d1, 0x3ff, 0xe68, 0x3d, 0x9, 0x6, 0x0, 0xfffffff9]}) 1.12999526s ago: executing program 7 (id=1423): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001ac0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffe}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 6 (id=1424): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) mq_open(0x0, 0x2, 0x1b6, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1085408, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x11) kernel console output (not intermixed with test programs): Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0003/input/input8 [ 96.298291][ T9] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0003/input/input9 [ 96.456745][ T9] playstation 0003:054C:05C4.0003: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 96.490766][ T9] usb 3-1: USB disconnect, device number 2 [ 97.152514][ T6275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.144'. [ 97.153404][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 97.296635][ T6282] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 97.463244][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.146'. [ 97.688869][ T6282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.715448][ T6282] bond1: (slave bond2): Enslaving as an active interface with an up link [ 97.718813][ T6293] bond1: entered promiscuous mode [ 97.718834][ T6293] bond2: entered promiscuous mode [ 97.719025][ T6293] bond1: entered allmulticast mode [ 97.719045][ T6293] bond2: entered allmulticast mode [ 97.719712][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.947637][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.155'. [ 98.101232][ T5884] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.265350][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.265382][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.265403][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.265442][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.265464][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.286040][ T5884] usb 2-1: config 0 descriptor?? [ 98.711407][ T5884] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 98.752403][ T5884] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 98.975737][ T10] usb 2-1: USB disconnect, device number 4 [ 99.053329][ T6328] fido_id[6328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.117323][ T6332] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 99.397187][ T6343] cgroup: Unknown subsys name 'cpuset' [ 99.577218][ T6345] input: syz1 as /devices/virtual/input/input11 [ 100.380831][ T5867] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.546330][ T5867] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 100.546358][ T5867] usb 1-1: config 0 has no interface number 0 [ 100.546402][ T5867] usb 1-1: config 0 interface 41 has no altsetting 0 [ 100.550100][ T5867] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 100.550127][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.550145][ T5867] usb 1-1: Product: syz [ 100.550158][ T5867] usb 1-1: Manufacturer: syz [ 100.550171][ T5867] usb 1-1: SerialNumber: syz [ 100.561466][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.574715][ T5867] usb 1-1: config 0 descriptor?? [ 100.750862][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 100.757680][ T44] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 100.757705][ T44] usb 5-1: config 0 has no interface number 0 [ 100.757797][ T44] usb 5-1: config 0 interface 230 has no altsetting 0 [ 100.838506][ T44] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 100.839238][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.839260][ T44] usb 5-1: Product: syz [ 100.839273][ T44] usb 5-1: Manufacturer: syz [ 100.839286][ T44] usb 5-1: SerialNumber: syz [ 100.914763][ T44] usb 5-1: config 0 descriptor?? [ 100.977979][ T44] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 101.018877][ T44] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 101.349432][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.421931][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 101.513543][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.513574][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.513595][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.513635][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.513647][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.580453][ T10] usb 2-1: config 0 descriptor?? [ 101.696287][ T5867] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 101.738715][ T5867] usb 1-1: USB disconnect, device number 2 [ 102.025152][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 102.140819][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.265843][ T10] usb 2-1: USB disconnect, device number 5 [ 102.290763][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 102.295276][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.295315][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 90: 217, using maximum allowed: 30 [ 102.295351][ T9] usb 3-1: config 0 interface 0 altsetting 90 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 102.295377][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.295409][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.295430][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.388186][ T9] usb 3-1: config 0 descriptor?? [ 102.404208][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 102.404243][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 103.091836][ T10] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 103.112583][ T6434] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.226956][ T6432] kvm: pic: level sensitive irq not supported [ 103.239164][ T6432] kvm: pic: non byte read [ 103.239536][ T6432] kvm: pic: level sensitive irq not supported [ 103.239591][ T6432] kvm: pic: non byte read [ 103.240342][ T6432] kvm: pic: level sensitive irq not supported [ 103.240395][ T6432] kvm: pic: non byte read [ 103.477065][ T44] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 103.506096][ T44] usb 5-1: USB disconnect, device number 3 [ 103.537927][ T10] usb 3-1: failed to restore interface 0 altsetting 90 (error=-71) [ 103.573371][ T10] usb 3-1: USB disconnect, device number 3 [ 103.933585][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 104.110782][ T5802] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.172160][ T6454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.290900][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 104.293733][ T5802] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.293758][ T5802] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 104.293770][ T5802] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.293783][ T5802] usb 4-1: config 1 interface 0 has no altsetting 0 [ 104.295876][ T5802] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.295896][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.295905][ T5802] usb 4-1: Product: syz [ 104.295912][ T5802] usb 4-1: Manufacturer: syz [ 104.295919][ T5802] usb 4-1: SerialNumber: syz [ 104.520845][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.568431][ T5802] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 104.670735][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 104.672448][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.672476][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.672489][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.672508][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 104.672519][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.679559][ T9] usb 1-1: config 0 descriptor?? [ 104.714338][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.861533][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 104.863318][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.863339][ T44] usb 3-1: config 0 has no interfaces? [ 104.863364][ T44] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 104.863382][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.878305][ T44] usb 3-1: config 0 descriptor?? [ 105.104917][ T9] kye 0003:0458:5012.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 105.133253][ T9] kye 0003:0458:5012.0006: hidraw0: USB HID v0.08 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 105.133299][ T9] kye 0003:0458:5012.0006: tablet-enabling feature report not found [ 105.133313][ T9] kye 0003:0458:5012.0006: tablet enabling failed [ 105.266486][ T44] usb 3-1: USB disconnect, device number 4 [ 105.307967][ T5867] usb 1-1: USB disconnect, device number 3 [ 106.924156][ T31] usb 4-1: USB disconnect, device number 2 [ 106.933340][ T31] usblp0: removed [ 107.199990][ T6516] can0: slcan on ptm0. [ 107.212106][ T37] audit: type=1326 audit(1769819337.684:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6510 comm="syz.2.231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3639cbaeb9 code=0x0 [ 107.389838][ T6523] 9p: Bad value for 'rfdno' [ 108.001192][ T6511] can0 (unregistered): slcan off ptm0. [ 108.160739][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 108.318329][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.319981][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 108.324576][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.324598][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.336276][ T31] usb 2-1: string descriptor 0 read error: -22 [ 108.336416][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.336437][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.477531][ T31] usb 2-1: 0:2 : does not exist [ 109.060914][ T932] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.221514][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 109.226087][ T932] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 109.226113][ T932] usb 3-1: config 0 has no interface number 0 [ 109.226158][ T932] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.232874][ T932] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 109.232900][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.232918][ T932] usb 3-1: Product: syz [ 109.232931][ T932] usb 3-1: Manufacturer: syz [ 109.232950][ T932] usb 3-1: SerialNumber: syz [ 109.300454][ T932] usb 3-1: config 0 descriptor?? [ 109.314453][ T6571] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.377359][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.394921][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.541482][ T6571] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.635521][ T37] audit: type=1326 audit(1769819340.114:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6567 comm="syz.4.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff745cfaeb9 code=0x7fc00000 [ 110.145638][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 110.161571][ T31] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 110.276658][ T31] usb 2-1: USB disconnect, device number 6 [ 110.772343][ T6598] 9p: Bad value for 'rfdno' [ 111.177583][ T6609] random: crng reseeded on system resumption [ 111.352943][ T5803] Bluetooth: hci5: command 0x1003 tx timeout [ 111.352997][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.410837][ T932] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 112.410867][ T932] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 112.411139][ T932] asix 3-1:0.188: probe with driver asix failed with error -71 [ 112.446867][ T932] usb 3-1: USB disconnect, device number 5 [ 112.511576][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.572758][ T6634] netlink: 'syz.4.267': attribute type 13 has an invalid length. [ 112.660750][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 112.662258][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.662274][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 112.667010][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.667031][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.667041][ T10] usb 2-1: Product: syz [ 112.667048][ T10] usb 2-1: Manufacturer: syz [ 112.667055][ T10] usb 2-1: SerialNumber: syz [ 112.947389][ T10] cdc_ncm 2-1:1.0: bind() failure [ 112.960248][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 112.960293][ T10] cdc_ncm 2-1:1.1: bind() failure [ 112.986049][ T10] usb 2-1: USB disconnect, device number 7 [ 113.515481][ T37] audit: type=1326 audit(1769819343.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.2.277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3639cbaeb9 code=0x0 [ 113.816090][ T6670] can0: slcan on ptm0. [ 114.680799][ T6668] can0 (unregistered): slcan off ptm0. [ 115.595581][ T37] audit: type=1326 audit(1769819346.080:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6737 comm="syz.2.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3639cbaeb9 code=0x0 [ 115.720910][ T5867] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.871497][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 115.876114][ T5867] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 115.876176][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.876201][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.876219][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 115.876333][ T5867] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 115.876354][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.896493][ T6745] input: syz0 as /devices/virtual/input/input13 [ 115.961486][ T5867] usb 4-1: config 0 descriptor?? [ 116.415736][ T5867] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0007/input/input14 [ 116.523359][ T5867] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0007/input/input15 [ 116.575657][ T5867] kye 0003:0458:5013.0007: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 116.738739][ T5867] usb 4-1: USB disconnect, device number 3 [ 116.840755][ T5802] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.960890][ T6763] fido_id[6763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 117.015811][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.015844][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.015865][ T5802] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.015905][ T5802] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.015927][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.029869][ T5802] usb 3-1: config 0 descriptor?? [ 117.171633][ T5807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.282279][ T6770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.320820][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 117.335177][ T5807] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.335254][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.335273][ T5807] usb 5-1: Product: syz [ 117.335286][ T5807] usb 5-1: Manufacturer: syz [ 117.335299][ T5807] usb 5-1: SerialNumber: syz [ 117.352078][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.473963][ T5807] r8152-cfgselector 5-1: Unknown version 0x0000 [ 117.473999][ T5807] r8152-cfgselector 5-1: config 0 descriptor?? [ 117.521510][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.521526][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.525103][ T44] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.525124][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.525170][ T44] usb 1-1: SerialNumber: syz [ 117.615380][ T5802] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.691745][ T5807] r8152-cfgselector 5-1: Needed 1 retries to read version [ 117.691848][ T5807] r8152-cfgselector 5-1: Unknown version 0x0840 [ 117.696822][ T5807] r8152-cfgselector 5-1: bad CDC descriptors [ 117.760885][ T6770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.822845][ T5867] usb 3-1: USB disconnect, device number 6 [ 117.862467][ T44] usb 1-1: 0:2 : does not exist [ 117.862552][ T44] usb 1-1: usbmixer: too many channels (61) in unit 5 [ 117.888469][ T6775] fido_id[6775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 117.930232][ T932] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 117.982066][ T44] usb 1-1: USB disconnect, device number 4 [ 118.059809][ T6280] udevd[6280]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.474727][ T37] audit: type=1326 audit(1769819348.950:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.0.309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf3cadaeb9 code=0x0 [ 118.846073][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.313'. [ 118.846091][ T6800] netlink: 'syz.4.313': attribute type 6 has an invalid length. [ 118.846098][ T6800] netlink: 140 bytes leftover after parsing attributes in process `syz.4.313'. [ 119.043428][ T6806] netlink: 'syz.1.316': attribute type 30 has an invalid length. [ 119.960848][ T6840] netlink: 'syz.4.329': attribute type 13 has an invalid length. [ 120.058422][ T37] audit: type=1326 audit(1769819350.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6842 comm="syz.1.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b9d34aeb9 code=0x0 [ 120.216512][ T6851] cgroup: noprefix used incorrectly [ 121.160884][ T932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.313368][ T932] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.313396][ T932] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 121.313415][ T932] usb 2-1: config 220 has no interface number 2 [ 121.313487][ T932] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 121.313512][ T932] usb 2-1: config 220 interface 0 has no altsetting 0 [ 121.313528][ T932] usb 2-1: config 220 interface 76 has no altsetting 0 [ 121.313545][ T932] usb 2-1: config 220 interface 1 has no altsetting 0 [ 121.318568][ T932] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.318597][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.318615][ T932] usb 2-1: Product: syz [ 121.318628][ T932] usb 2-1: Manufacturer: syz [ 121.318641][ T932] usb 2-1: SerialNumber: syz [ 121.329771][ T6881] netlink: 'syz.3.346': attribute type 13 has an invalid length. [ 121.679257][ T932] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 121.679300][ T932] uvcvideo 2-1:220.0: No valid video chain found. [ 121.679449][ T932] usb 2-1: selecting invalid altsetting 0 [ 121.716530][ T932] usb 2-1: selecting invalid altsetting 0 [ 121.716569][ T932] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 121.718153][ T6883] capability: warning: `syz.3.347' uses deprecated v2 capabilities in a way that may be insecure [ 121.753394][ T932] usb 2-1: USB disconnect, device number 8 [ 121.778987][ T6884] overlay: filesystem on ./file0 not supported as upperdir [ 122.944615][ T37] audit: type=1326 audit(1769819353.410:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6900 comm="syz.4.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff745cfaeb9 code=0x0 [ 124.885353][ T6942] sctp: [Deprecated]: syz.3.366 (pid 6942) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.885353][ T6942] Use struct sctp_sack_info instead [ 125.368604][ T6955] fuse: Bad value for 'fd' [ 125.473994][ T6957] loop7: detected capacity change from 0 to 7 [ 125.552703][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.552830][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.581600][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.581636][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.612773][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.612808][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.615938][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.615969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.616213][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.616239][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.618100][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.618131][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.619130][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.619159][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.619241][ T6280] ldm_validate_partition_table(): Disk read failed. [ 125.620123][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.620153][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.623641][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.623672][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.628666][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.628697][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.635387][ T6280] Dev loop7: unable to read RDB block 0 [ 125.663666][ T6280] loop7: unable to read partition table [ 125.663916][ T6280] loop7: partition table beyond EOD, truncated [ 125.799967][ T6957] ldm_validate_partition_table(): Disk read failed. [ 125.821078][ T6957] Dev loop7: unable to read RDB block 0 [ 125.823840][ T6957] loop7: unable to read partition table [ 125.824082][ T6957] loop7: partition table beyond EOD, truncated [ 125.824114][ T6957] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œë) failed (rc=-5) [ 125.861669][ T6949] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.908209][ T6960] ldm_validate_partition_table(): Disk read failed. [ 125.910294][ T6960] Dev loop7: unable to read RDB block 0 [ 125.911752][ T6960] loop7: unable to read partition table [ 125.911972][ T6960] loop7: partition table beyond EOD, truncated [ 126.318123][ T6973] 9p: Could not find request transport: fd0x0000000000000003 [ 126.433763][ T6984] fuse: Bad value for 'fd' [ 127.603292][ T7023] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 127.603383][ T7023] bridge1: entered allmulticast mode [ 128.478438][ T7034] 9p: Could not find request transport: fd0x0000000000000003 [ 129.327607][ T7060] fuse: Bad value for 'fd' [ 130.713385][ T7083] 9p: Could not find request transport: fd0x0000000000000003 [ 132.798274][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.798370][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.719069][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.734924][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.749064][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.760773][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.764467][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.147171][ T7103] 9p: Bad value for 'rfdno' [ 139.235878][ T5803] Bluetooth: hci5: command tx timeout [ 139.627962][ T7121] 9pnet_fd: Insufficient options for proto=fd [ 140.050125][ T7134] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 140.161200][ T7136] ucma_write: process 201 (syz.2.443) changed security contexts after opening file descriptor, this is not allowed. [ 140.409382][ T1203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.003901][ T1203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.249525][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 141.271272][ T5803] Bluetooth: hci5: command tx timeout [ 141.436334][ T1203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.553591][ T1203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.360775][ T5803] Bluetooth: hci5: command tx timeout [ 143.522974][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 143.549003][ T7226] 9pnet_fd: Insufficient options for proto=fd [ 143.746546][ T1203] bridge_slave_1: left allmulticast mode [ 143.746768][ T1203] bridge_slave_1: left promiscuous mode [ 143.764653][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.897279][ T1203] bridge_slave_0: left allmulticast mode [ 143.897308][ T1203] bridge_slave_0: left promiscuous mode [ 143.897545][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.440930][ T5803] Bluetooth: hci5: command tx timeout [ 145.501346][ T1203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.581284][ T1203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.613251][ T1203] bond0 (unregistering): Released all slaves [ 146.381435][ T1203] bond1 (unregistering): (slave bond2): Releasing backup interface [ 146.421323][ T1203] bond2 (unregistering): left promiscuous mode [ 146.421352][ T1203] bond2 (unregistering): left allmulticast mode [ 146.421683][ T1203] bond1 (unregistering): Released all slaves [ 147.255190][ T1203] bond2 (unregistering): Released all slaves [ 147.532838][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.533133][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.533350][ T7091] bridge_slave_0: entered allmulticast mode [ 147.536328][ T7091] bridge_slave_0: entered promiscuous mode [ 147.539987][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.540152][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.540327][ T7091] bridge_slave_1: entered allmulticast mode [ 147.592690][ T7091] bridge_slave_1: entered promiscuous mode [ 147.722609][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 148.226866][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.253260][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.993873][ T7091] team0: Port device team_slave_0 added [ 149.086791][ T7091] team0: Port device team_slave_1 added [ 149.186977][ T7330] 9pnet_fd: Insufficient options for proto=fd [ 149.289670][ T7335] ======================================================= [ 149.289670][ T7335] WARNING: The mand mount option has been deprecated and [ 149.289670][ T7335] and is ignored by this kernel. Remove the mand [ 149.289670][ T7335] option from the mount to silence this warning. [ 149.289670][ T7335] ======================================================= [ 149.917056][ T1203] hsr_slave_0: left promiscuous mode [ 149.950787][ T1203] hsr_slave_1: left promiscuous mode [ 149.951691][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.951820][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.011884][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.011905][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.199347][ T1203] veth1_macvtap: left promiscuous mode [ 150.220933][ T1203] veth0_macvtap: left promiscuous mode [ 150.221254][ T1203] veth1_vlan: left promiscuous mode [ 150.221641][ T1203] veth0_vlan: left promiscuous mode [ 150.643420][ T7372] mmap: syz.1.531 (7372) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.668818][ T7383] 9pnet_fd: Insufficient options for proto=fd [ 154.845243][ T7434] fuse: Unknown parameter 'group_id00000000000000000000' [ 154.972751][ T7437] netlink: 'syz.3.555': attribute type 13 has an invalid length. [ 154.972764][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 155.642011][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 155.931360][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 158.210821][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.210837][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.210860][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.364104][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.364121][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.364146][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.380815][ T932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 158.560787][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 158.572705][ T932] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 158.572729][ T932] usb 2-1: config 0 has no interface number 0 [ 158.582865][ T932] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.582892][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.582910][ T932] usb 2-1: Product: syz [ 158.582922][ T932] usb 2-1: Manufacturer: syz [ 158.582936][ T932] usb 2-1: SerialNumber: syz [ 158.625908][ T932] usb 2-1: config 0 descriptor?? [ 158.637904][ T932] smsc95xx v2.0.0 [ 159.043660][ T932] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 159.043688][ T932] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.047194][ T7091] hsr_slave_0: entered promiscuous mode [ 159.048601][ T7091] hsr_slave_1: entered promiscuous mode [ 159.049445][ T7091] debugfs: 'hsr0' already exists in 'hsr' [ 159.049466][ T7091] Cannot create hsr debugfs directory [ 160.101077][ T7494] fuse: Unknown parameter 'group_id00000000000000000000' [ 160.865509][ T7091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.971742][ T932] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 160.972040][ T932] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 161.041451][ T7091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.135528][ T7091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.213938][ T7091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.447483][ T7527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.596204][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.655177][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.673541][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.675435][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.756241][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.756378][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.099231][ T932] usb 2-1: USB disconnect, device number 9 [ 163.108175][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.215107][ T7571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 163.215162][ T7571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 163.361287][ T7547] syz.3.583 (7547) used greatest stack depth: 18776 bytes left [ 163.705215][ T7592] 9pnet_fd: Insufficient options for proto=fd [ 163.780909][ T932] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.930751][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 163.932984][ T932] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 163.933007][ T932] usb 3-1: config 0 has no interface number 0 [ 163.935364][ T932] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 163.935387][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.935403][ T932] usb 3-1: Product: syz [ 163.935414][ T932] usb 3-1: Manufacturer: syz [ 163.935424][ T932] usb 3-1: SerialNumber: syz [ 163.970981][ T7600] fuse: Bad value for 'rootmode' [ 163.994010][ T7091] veth0_vlan: entered promiscuous mode [ 164.009028][ T932] usb 3-1: config 0 descriptor?? [ 164.024382][ T932] smsc95xx v2.0.0 [ 164.059284][ T7091] veth1_vlan: entered promiscuous mode [ 164.291345][ T7091] veth0_macvtap: entered promiscuous mode [ 164.332588][ T7091] veth1_macvtap: entered promiscuous mode [ 164.417880][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.461341][ T932] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 164.461370][ T932] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 164.509782][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.610025][ T1229] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.615828][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.620967][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.624230][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.742692][ T7620] capability: warning: `syz.1.602' uses 32-bit capabilities (legacy support in use) [ 164.771086][ T7620] program syz.1.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.254794][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.254814][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.669085][ T932] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 165.669377][ T932] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 165.767543][ T7640] 9pnet_fd: Insufficient options for proto=fd [ 166.493392][ T1203] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.565421][ T6228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.565439][ T6228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.772398][ T6007] usb 3-1: USB disconnect, device number 7 [ 167.288396][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.308349][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.310047][ T1203] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.310178][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.328775][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.329493][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.625441][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 167.711195][ T1203] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.762497][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.766205][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.768784][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.786874][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.794052][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.884986][ T1203] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.160728][ T6007] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 169.313896][ T6007] usb 6-1: Using ep0 maxpacket: 32 [ 169.341063][ T6007] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 169.341090][ T6007] usb 6-1: config 0 has no interface number 0 [ 169.344069][ T6007] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.344096][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.344114][ T6007] usb 6-1: Product: syz [ 169.344128][ T6007] usb 6-1: Manufacturer: syz [ 169.344141][ T6007] usb 6-1: SerialNumber: syz [ 169.414554][ T6007] usb 6-1: config 0 descriptor?? [ 169.423220][ T6007] smsc95xx v2.0.0 [ 169.430882][ T5803] Bluetooth: hci0: command tx timeout [ 169.622032][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 169.836288][ T6007] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 169.836319][ T6007] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 169.913968][ T5803] Bluetooth: hci2: command tx timeout [ 170.031346][ T7667] chnl_net:caif_netlink_parms(): no params data found [ 170.511648][ T1203] bridge_slave_1: left allmulticast mode [ 170.511676][ T1203] bridge_slave_1: left promiscuous mode [ 170.511933][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.595651][ T1203] bridge_slave_0: left allmulticast mode [ 170.595677][ T1203] bridge_slave_0: left promiscuous mode [ 170.595873][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.459353][ T6007] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 171.459662][ T6007] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 171.520937][ T5803] Bluetooth: hci0: command tx timeout [ 171.596868][ T7766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.644'. [ 171.990732][ T5803] Bluetooth: hci2: command tx timeout [ 172.381398][ T1203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.469185][ T1203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.495765][ T44] usb 6-1: USB disconnect, device number 2 [ 172.513261][ T1203] bond0 (unregistering): Released all slaves [ 172.811809][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.812000][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.812228][ T7667] bridge_slave_0: entered allmulticast mode [ 172.814860][ T7667] bridge_slave_0: entered promiscuous mode [ 172.848335][ T7779] fuse: Bad value for 'fd' [ 172.897670][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.897802][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.898022][ T7667] bridge_slave_1: entered allmulticast mode [ 172.900522][ T7667] bridge_slave_1: entered promiscuous mode [ 173.073427][ T7784] loop2: detected capacity change from 0 to 7 [ 173.089080][ T7784] Dev loop2: unable to read RDB block 7 [ 173.089124][ T7784] loop2: AHDI p2 p3 [ 173.089162][ T7784] loop2: partition table partially beyond EOD, truncated [ 173.131670][ T7784] loop2: p3 start 335544320 is beyond EOD, truncated [ 173.500820][ T6007] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.531236][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.544702][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.599006][ T5803] Bluetooth: hci0: command tx timeout [ 173.644307][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.656'. [ 173.650856][ T6007] usb 3-1: Using ep0 maxpacket: 32 [ 173.653082][ T6007] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 173.653105][ T6007] usb 3-1: config 0 has no interface number 0 [ 173.655876][ T6007] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 173.655900][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.655918][ T6007] usb 3-1: Product: syz [ 173.655931][ T6007] usb 3-1: Manufacturer: syz [ 173.655944][ T6007] usb 3-1: SerialNumber: syz [ 173.670904][ T6007] usb 3-1: config 0 descriptor?? [ 173.674947][ T6007] smsc95xx v2.0.0 [ 174.071982][ T5803] Bluetooth: hci2: command tx timeout [ 174.085358][ T6007] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 174.085389][ T6007] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 174.122088][ T7805] fuse: Bad value for 'fd' [ 174.352204][ T7809] fuse: Unknown parameter 'group_i00000000000000000000' [ 174.378927][ T7667] team0: Port device team_slave_0 added [ 174.477917][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 174.507700][ T7667] team0: Port device team_slave_1 added [ 175.556224][ T7822] program syz.1.663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.575742][ T7825] program syz.5.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.653852][ T7827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.665'. [ 175.676504][ T5803] Bluetooth: hci0: command tx timeout [ 175.721635][ T1203] hsr_slave_0: left promiscuous mode [ 175.760781][ T1203] hsr_slave_1: left promiscuous mode [ 175.762178][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.762210][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.827086][ T1203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.827142][ T1203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.153389][ T5803] Bluetooth: hci2: command tx timeout [ 176.180259][ T1203] veth1_macvtap: left promiscuous mode [ 176.182248][ T1203] veth0_macvtap: left promiscuous mode [ 176.197160][ T1203] veth1_vlan: left promiscuous mode [ 176.197810][ T1203] veth0_vlan: left promiscuous mode [ 176.669452][ T6007] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 176.669629][ T6007] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 176.698913][ T6007] usb 3-1: USB disconnect, device number 8 [ 177.208602][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 177.598741][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 178.347957][ T7861] program syz.1.674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.131184][ T1203] team0 (unregistering): Port device team_slave_1 removed [ 180.361241][ T1203] team0 (unregistering): Port device team_slave_0 removed [ 182.389781][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.389798][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.389823][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.460101][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.460117][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.460142][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.870855][ T932] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.950318][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.950567][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.950900][ T7678] bridge_slave_0: entered allmulticast mode [ 182.955095][ T7678] bridge_slave_0: entered promiscuous mode [ 182.972000][ T7667] hsr_slave_0: entered promiscuous mode [ 182.973535][ T7667] hsr_slave_1: entered promiscuous mode [ 182.974575][ T7667] debugfs: 'hsr0' already exists in 'hsr' [ 182.974597][ T7667] Cannot create hsr debugfs directory [ 182.975414][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.975673][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.976146][ T7678] bridge_slave_1: entered allmulticast mode [ 182.979640][ T7678] bridge_slave_1: entered promiscuous mode [ 183.090764][ T932] usb 6-1: Using ep0 maxpacket: 32 [ 183.105935][ T932] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.105961][ T932] usb 6-1: config 0 has no interface number 0 [ 183.131019][ T932] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.131045][ T932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.131060][ T932] usb 6-1: Product: syz [ 183.131072][ T932] usb 6-1: Manufacturer: syz [ 183.131083][ T932] usb 6-1: SerialNumber: syz [ 183.203236][ T932] usb 6-1: config 0 descriptor?? [ 183.212210][ T932] smsc95xx v2.0.0 [ 183.317282][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.362422][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.640689][ T932] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 183.640719][ T932] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 183.719341][ T7897] program syz.1.683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.742436][ T7678] team0: Port device team_slave_0 added [ 183.824338][ T7678] team0: Port device team_slave_1 added [ 184.129924][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'. [ 184.162767][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.162830][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.162855][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.218459][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.218607][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.218679][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.462783][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 184.515017][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 184.697905][ T7678] hsr_slave_0: entered promiscuous mode [ 184.703483][ T7678] hsr_slave_1: entered promiscuous mode [ 184.704426][ T7678] debugfs: 'hsr0' already exists in 'hsr' [ 184.704450][ T7678] Cannot create hsr debugfs directory [ 185.280436][ T932] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 185.283451][ T932] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 185.379214][ T7667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.425576][ T7667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.555023][ T7667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.750144][ T7667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.047021][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 186.101181][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 186.328336][ T994] usb 6-1: USB disconnect, device number 3 [ 186.411065][ T7678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 186.508330][ T7678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 186.608075][ T7678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 186.705428][ T7678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 187.090686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.091336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.094721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.095864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.096991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.098125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.099257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.100394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.440670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.441495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.643027][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.115974][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.149018][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.150197][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.187857][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.188209][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.775369][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.913972][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.963924][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.978360][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.980187][ T1229] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.980258][ T1229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.375673][ T994] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 189.560708][ T994] usb 3-1: Using ep0 maxpacket: 32 [ 189.563504][ T994] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 189.563528][ T994] usb 3-1: config 0 has no interface number 0 [ 189.575450][ T994] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 189.575478][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.575496][ T994] usb 3-1: Product: syz [ 189.575509][ T994] usb 3-1: Manufacturer: syz [ 189.575522][ T994] usb 3-1: SerialNumber: syz [ 189.644794][ T994] usb 3-1: config 0 descriptor?? [ 189.647837][ T7667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.682963][ T994] smsc95xx v2.0.0 [ 190.117903][ T994] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 190.117921][ T994] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.677549][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.439978][ T7667] veth0_vlan: entered promiscuous mode [ 191.566434][ T7667] veth1_vlan: entered promiscuous mode [ 191.724928][ T994] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 191.725235][ T994] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 191.864052][ T7667] veth0_macvtap: entered promiscuous mode [ 191.877101][ T7667] veth1_macvtap: entered promiscuous mode [ 191.911068][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.935318][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.963465][ T4125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.967994][ T4125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.968255][ T4125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.968451][ T4125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.798618][ T8083] fuse: Unknown parameter 'group_id00000000000000000000' [ 192.972902][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.972922][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.137194][ T9] usb 3-1: USB disconnect, device number 9 [ 193.255840][ T7678] veth0_vlan: entered promiscuous mode [ 193.256918][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.256934][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.381048][ T7678] veth1_vlan: entered promiscuous mode [ 193.657669][ T37] audit: type=1326 audit(1769819424.140:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8085 comm="syz.1.723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b9d34aeb9 code=0x0 [ 194.017571][ T7678] veth0_macvtap: entered promiscuous mode [ 194.045680][ T7678] veth1_macvtap: entered promiscuous mode [ 194.109219][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.127939][ T8108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.727'. [ 194.160387][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.207477][ T4125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.207699][ T4125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.207748][ T4125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.207780][ T4125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.259932][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259998][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.324191][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.324231][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.380834][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.532840][ T8143] program syz.1.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.540763][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 195.543598][ T44] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 195.543622][ T44] usb 3-1: config 0 has no interface number 0 [ 195.551414][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 195.551442][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.551460][ T44] usb 3-1: Product: syz [ 195.551473][ T44] usb 3-1: Manufacturer: syz [ 195.551485][ T44] usb 3-1: SerialNumber: syz [ 195.562166][ T44] usb 3-1: config 0 descriptor?? [ 195.614354][ T44] smsc95xx v2.0.0 [ 195.651112][ T7690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.651131][ T7690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.937188][ T8148] netlink: 56 bytes leftover after parsing attributes in process `syz.1.739'. [ 196.030858][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 196.030886][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 196.127530][ T8152] 9pnet_fd: Insufficient options for proto=fd [ 197.168363][ T8177] loop2: detected capacity change from 0 to 7 [ 197.170295][ T8177] Dev loop2: unable to read RDB block 7 [ 197.170321][ T8177] loop2: AHDI p2 [ 197.170347][ T8177] loop2: partition table partially beyond EOD, truncated [ 197.393390][ T37] audit: type=1326 audit(1769819427.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.6.738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b7645aeb9 code=0x0 [ 197.587663][ T8184] fuse: Unknown parameter 'use00000000000000000000' [ 197.702801][ T8188] netlink: 56 bytes leftover after parsing attributes in process `syz.1.751'. [ 198.073140][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 198.073412][ T44] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 198.103688][ T8198] 9pnet_fd: Insufficient options for proto=fd [ 198.532272][ T8216] loop2: detected capacity change from 0 to 7 [ 198.540569][ T8216] loop2: [ 198.540601][ T8216] loop2: partition table partially beyond EOD, truncated [ 199.321128][ T8228] program syz.1.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.322800][ T8231] fuseblk: Bad value for 'fd' [ 199.415690][ T5867] usb 3-1: USB disconnect, device number 10 [ 199.545874][ T8233] 9pnet_fd: Insufficient options for proto=fd [ 199.583045][ T8236] process 'syz.7.768' launched '/dev/fd/3' with NULL argv: empty string added [ 200.070094][ T8249] netlink: 'syz.7.776': attribute type 1 has an invalid length. [ 200.123629][ T8250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.774'. [ 200.429035][ T37] audit: type=1326 audit(1769819430.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8226 comm="syz.6.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b7645aeb9 code=0x0 [ 200.547130][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.887339][ T8261] loop2: detected capacity change from 0 to 7 [ 200.888469][ T8261] Dev loop2: unable to read RDB block 7 [ 200.888497][ T8261] loop2: AHDI p1 p2 p3 [ 200.888529][ T8261] loop2: partition table partially beyond EOD, truncated [ 200.888752][ T8261] loop2: p1 start 1601398130 is beyond EOD, truncated [ 200.888861][ T8261] loop2: p2 start 1702059890 is beyond EOD, truncated [ 200.948179][ T8264] fuseblk: Bad value for 'fd' [ 201.130839][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.372168][ T994] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 201.431219][ T5806] Bluetooth: hci4: command 0x0406 tx timeout [ 201.431532][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 201.560720][ T994] usb 6-1: Using ep0 maxpacket: 32 [ 201.564815][ T994] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 201.564830][ T994] usb 6-1: config 0 has no interface number 0 [ 201.566853][ T994] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 201.566869][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.566878][ T994] usb 6-1: Product: syz [ 201.566886][ T994] usb 6-1: Manufacturer: syz [ 201.566893][ T994] usb 6-1: SerialNumber: syz [ 201.642564][ T994] usb 6-1: config 0 descriptor?? [ 201.646917][ T994] smsc95xx v2.0.0 [ 201.695630][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.899252][ T8283] syzkaller0: entered promiscuous mode [ 201.899279][ T8283] syzkaller0: entered allmulticast mode [ 202.064238][ T8285] fuse: Unknown parameter 'user_i00000000000000000000' [ 202.090716][ T994] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 202.090746][ T994] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.213730][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.253600][ T8287] netlink: 'syz.6.788': attribute type 1 has an invalid length. [ 202.594871][ T8293] netlink: 44 bytes leftover after parsing attributes in process `syz.6.790'. [ 202.650231][ T8294] netlink: 44 bytes leftover after parsing attributes in process `syz.6.790'. [ 203.376110][ T69] bridge_slave_1: left allmulticast mode [ 203.376138][ T69] bridge_slave_1: left promiscuous mode [ 203.376398][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.470735][ T69] bridge_slave_0: left allmulticast mode [ 203.470761][ T69] bridge_slave_0: left promiscuous mode [ 203.471018][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.523752][ T8322] netlink: 'syz.2.800': attribute type 1 has an invalid length. [ 203.712085][ T994] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 203.712435][ T994] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 203.979477][ T8337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.803'. [ 204.031493][ T8339] netlink: 44 bytes leftover after parsing attributes in process `syz.1.803'. [ 204.651393][ T5867] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.800702][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 204.803874][ T5867] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 204.803900][ T5867] usb 7-1: config 0 has no interface number 0 [ 204.806854][ T5867] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 204.806881][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.806900][ T5867] usb 7-1: Product: syz [ 204.806913][ T5867] usb 7-1: Manufacturer: syz [ 204.806926][ T5867] usb 7-1: SerialNumber: syz [ 204.812472][ T5867] usb 7-1: config 0 descriptor?? [ 204.838741][ T5867] smsc95xx v2.0.0 [ 204.976258][ T5802] usb 6-1: USB disconnect, device number 4 [ 205.249186][ T37] audit: type=1326 audit(1769819435.730:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8352 comm="syz.7.808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17c1fdaeb9 code=0x0 [ 205.307280][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 205.307309][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 206.003870][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.081363][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.117552][ T5867] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 206.117850][ T5867] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 206.144925][ T69] bond0 (unregistering): Released all slaves [ 206.183367][ T8322] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 206.590928][ T6007] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 206.747256][ T6007] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.747286][ T6007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.747304][ T6007] usb 2-1: Product: syz [ 206.747318][ T6007] usb 2-1: Manufacturer: syz [ 206.747332][ T6007] usb 2-1: SerialNumber: syz [ 206.796543][ T6007] usb 2-1: config 0 descriptor?? [ 207.016031][ T6007] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.057833][ T8407] fuse: Unknown parameter 'use00000000000000000000' [ 207.437268][ T10] usb 7-1: USB disconnect, device number 2 [ 208.146641][ T8424] loop2: detected capacity change from 0 to 7 [ 208.150299][ T8424] Dev loop2: unable to read RDB block 7 [ 208.150318][ T8424] loop2: AHDI p2 p3 [ 208.150382][ T8424] loop2: partition table partially beyond EOD, truncated [ 208.151574][ T8424] loop2: p3 start 335544320 is beyond EOD, truncated [ 208.470182][ T6007] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 208.491954][ T8426] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 208.499435][ T6007] usb 2-1: USB disconnect, device number 10 [ 208.536542][ T37] audit: type=1326 audit(1769819439.020:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.536572][ T37] audit: type=1326 audit(1769819439.020:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.541031][ T37] audit: type=1326 audit(1769819439.020:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.541076][ T37] audit: type=1326 audit(1769819439.030:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.545751][ T37] audit: type=1326 audit(1769819439.030:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.548779][ T37] audit: type=1326 audit(1769819439.030:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.548823][ T37] audit: type=1326 audit(1769819439.030:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.555344][ T37] audit: type=1326 audit(1769819439.040:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.555390][ T37] audit: type=1326 audit(1769819439.040:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.558704][ T37] audit: type=1326 audit(1769819439.040:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8427 comm="syz.6.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7645aeb9 code=0x7ffc0000 [ 208.886947][ T69] hsr_slave_0: left promiscuous mode [ 208.927291][ T69] hsr_slave_1: left promiscuous mode [ 208.928212][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.928235][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.011974][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.012001][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.181720][ T69] veth1_macvtap: left promiscuous mode [ 209.181801][ T69] veth0_macvtap: left promiscuous mode [ 209.216675][ T69] veth1_vlan: left promiscuous mode [ 209.254453][ T69] veth0_vlan: left promiscuous mode [ 209.363753][ T8446] overlayfs: failed to resolve './file0': -2 [ 211.937945][ T6007] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 212.103453][ T6007] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 212.103483][ T6007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.103502][ T6007] usb 8-1: Product: syz [ 212.103515][ T6007] usb 8-1: Manufacturer: syz [ 212.103528][ T6007] usb 8-1: SerialNumber: syz [ 212.160554][ T6007] usb 8-1: config 0 descriptor?? [ 212.187547][ T6007] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 213.580754][ T6007] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.730766][ T6007] usb 6-1: Using ep0 maxpacket: 16 [ 213.741833][ T6007] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.741856][ T6007] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.744265][ T6007] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.744290][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.744308][ T6007] usb 6-1: Product: syz [ 213.744322][ T6007] usb 6-1: Manufacturer: syz [ 213.744335][ T6007] usb 6-1: SerialNumber: syz [ 213.969527][ T6007] usb 6-1: 0:2 : does not exist [ 214.012837][ T6007] usb 6-1: USB disconnect, device number 5 [ 214.090281][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.532762][ T44] usb 8-1: USB disconnect, device number 2 [ 214.656187][ T69] team0 (unregistering): Port device team_slave_1 removed [ 214.709248][ T8503] loop2: detected capacity change from 0 to 7 [ 214.718835][ T8503] Dev loop2: unable to read RDB block 7 [ 214.718875][ T8503] loop2: AHDI p2 p3 [ 214.718902][ T8503] loop2: partition table partially beyond EOD, truncated [ 214.719698][ T8503] loop2: p3 start 335544320 is beyond EOD, truncated [ 215.022152][ T69] team0 (unregistering): Port device team_slave_0 removed [ 215.050750][ T932] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 215.226775][ T932] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.226803][ T932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.226821][ T932] usb 6-1: Product: syz [ 215.226828][ T932] usb 6-1: Manufacturer: syz [ 215.226835][ T932] usb 6-1: SerialNumber: syz [ 215.230383][ T932] usb 6-1: config 0 descriptor?? [ 215.482481][ T932] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.750837][ T1808] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 216.930800][ T1808] usb 8-1: Using ep0 maxpacket: 32 [ 216.932960][ T932] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 216.933297][ T1808] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 216.933319][ T1808] usb 8-1: config 0 has no interface number 0 [ 216.933361][ T1808] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 216.935460][ T1808] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 216.935485][ T1808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.935495][ T1808] usb 8-1: Product: syz [ 216.935502][ T1808] usb 8-1: Manufacturer: syz [ 216.935509][ T1808] usb 8-1: SerialNumber: syz [ 216.940214][ T1808] usb 8-1: config 0 descriptor?? [ 216.950778][ T932] usb 6-1: USB disconnect, device number 6 [ 216.977342][ T8513] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 217.184792][ T8513] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 217.874840][ T8426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 217.885946][ T8459] lo: Caught tx_queue_len zero misconfig [ 218.010817][ T1808] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 218.010845][ T1808] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 218.011093][ T1808] asix 8-1:0.188: probe with driver asix failed with error -61 [ 218.644429][ T932] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 220.010290][ T5867] usb 8-1: USB disconnect, device number 3 [ 220.033888][ T932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 220.033920][ T932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 220.033946][ T932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 220.041755][ T932] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 220.041783][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.041801][ T932] usb 3-1: Product: syz [ 220.041813][ T932] usb 3-1: Manufacturer: syz [ 220.041826][ T932] usb 3-1: SerialNumber: syz [ 220.176321][ T932] usb 3-1: config 0 descriptor?? [ 220.242057][ T8530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.427532][ T8550] fuse: Bad value for 'fd' [ 220.454966][ T8530] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.725140][ T8566] netlink: 'syz.6.864': attribute type 1 has an invalid length. [ 221.729592][ T1808] usb 3-1: USB disconnect, device number 11 [ 223.173804][ T8598] fuse: Unknown parameter 'user_i00000000000000000000' [ 223.284634][ T8605] netlink: 'syz.7.875': attribute type 1 has an invalid length. [ 223.453370][ T8605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.712183][ T8645] fuse: Unknown parameter 'group_i00000000000000000000' [ 224.879209][ T8648] fuse: Bad value for 'fd' [ 225.210759][ T8653] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 225.367937][ T8653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.563113][ T8651] [U] J"—E:ÀÆ" [ 225.692913][ T8665] netlink: 'syz.2.888': attribute type 1 has an invalid length. [ 225.981329][ T8665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.213294][ T932] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 226.360830][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 226.363257][ T932] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 226.363281][ T932] usb 2-1: config 0 has no interface number 0 [ 226.363344][ T932] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 226.369755][ T932] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 226.369783][ T932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.369801][ T932] usb 2-1: Product: syz [ 226.369822][ T932] usb 2-1: Manufacturer: syz [ 226.369835][ T932] usb 2-1: SerialNumber: syz [ 226.385846][ T932] usb 2-1: config 0 descriptor?? [ 226.388733][ T8680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.625237][ T8680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 228.163178][ T932] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 228.163207][ T932] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 228.163475][ T932] asix 2-1:0.188: probe with driver asix failed with error -61 [ 228.760435][ T8731] netlink: 'syz.6.904': attribute type 1 has an invalid length. [ 228.903738][ T8731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.864478][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.908'. [ 229.865219][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.908'. [ 230.009564][ T932] usb 2-1: USB disconnect, device number 11 [ 230.237948][ T8759] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.588309][ T8779] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 231.743353][ T8779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.851544][ T932] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 232.012580][ T932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.012606][ T932] usb 6-1: config 0 has no interfaces? [ 232.013829][ T932] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 232.013853][ T932] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 232.013862][ T932] usb 6-1: Manufacturer: syz [ 232.019083][ T932] usb 6-1: config 0 descriptor?? [ 232.450799][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 232.450816][ T37] audit: type=1326 audit(1769819462.930:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8795 comm="syz.7.922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17c1fdaeb9 code=0x0 [ 232.681204][ T8810] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 232.810577][ T8810] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.929878][ T8808] [U] J"—E:ÀÆ" [ 233.050783][ T1808] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 233.250747][ T1808] usb 2-1: Using ep0 maxpacket: 32 [ 233.252619][ T1808] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 233.252634][ T1808] usb 2-1: config 0 has no interface number 0 [ 233.257573][ T1808] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 233.257590][ T1808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.257600][ T1808] usb 2-1: Product: syz [ 233.257607][ T1808] usb 2-1: Manufacturer: syz [ 233.257614][ T1808] usb 2-1: SerialNumber: syz [ 233.991067][ T1808] usb 2-1: config 0 descriptor?? [ 234.087589][ T1808] smsc95xx v2.0.0 [ 234.165400][ T8832] fuse: Unknown parameter 'user_id00000000000000000000' [ 234.447773][ T1808] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 234.447803][ T1808] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 234.470557][ T8839] tipc: Started in network mode [ 234.474649][ T8839] tipc: Node identity 62881180f092, cluster identity 4711 [ 234.490450][ T8839] tipc: Enabled bearer , priority 0 [ 234.507345][ T8839] syzkaller0: entered promiscuous mode [ 234.507362][ T8839] syzkaller0: entered allmulticast mode [ 234.574147][ T6007] usb 6-1: USB disconnect, device number 7 [ 234.717683][ T8839] tipc: Resetting bearer [ 234.786226][ T8837] tipc: Resetting bearer [ 234.906740][ T8837] tipc: Disabling bearer [ 235.256207][ T1808] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 235.256509][ T1808] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 235.538018][ T37] audit: type=1326 audit(1769819466.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8854 comm="syz.5.941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c158aeb9 code=0x0 [ 236.879688][ T6007] usb 2-1: USB disconnect, device number 12 [ 237.110965][ T5802] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 237.267599][ T5802] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.267624][ T5802] usb 8-1: config 0 has no interfaces? [ 237.268772][ T5802] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.268799][ T5802] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 237.268817][ T5802] usb 8-1: Manufacturer: syz [ 237.322799][ T5802] usb 8-1: config 0 descriptor?? [ 237.673399][ T8904] program syz.5.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.038454][ T8924] program syz.2.964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.955158][ T31] usb 8-1: USB disconnect, device number 4 [ 240.089773][ T37] audit: type=1326 audit(1769819470.570:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.6.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b7645aeb9 code=0x0 [ 242.459196][ T8974] program syz.2.981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.680763][ T6007] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 242.843440][ T6007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.843466][ T6007] usb 2-1: config 0 has no interfaces? [ 242.844907][ T6007] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 242.844933][ T6007] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 242.844951][ T6007] usb 2-1: Manufacturer: syz [ 242.890227][ T6007] usb 2-1: config 0 descriptor?? [ 243.177025][ T37] audit: type=1326 audit(1769819473.650:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8980 comm="syz.2.984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3639cbaeb9 code=0x0 [ 243.522809][ T6007] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 243.772496][ T6007] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 243.772525][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.772544][ T6007] usb 6-1: Product: syz [ 243.772557][ T6007] usb 6-1: Manufacturer: syz [ 243.772570][ T6007] usb 6-1: SerialNumber: syz [ 243.795121][ T6007] usb 6-1: config 0 descriptor?? [ 243.990878][ T44] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 244.008494][ T6007] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 244.147757][ T44] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 244.147870][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 244.147896][ T44] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 244.160070][ T44] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.160099][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.160117][ T44] usb 8-1: Product: syz [ 244.160130][ T44] usb 8-1: Manufacturer: syz [ 244.160143][ T44] usb 8-1: SerialNumber: syz [ 244.169869][ T44] usb 8-1: config 0 descriptor?? [ 244.174094][ T9004] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 244.391843][ T9004] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 244.887822][ T9004] snd-usb-audio 8-1:0.0: Runtime PM usage count underflow! [ 246.285475][ T6007] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 246.339320][ T1808] usb 2-1: USB disconnect, device number 13 [ 246.408217][ T6007] usb 6-1: USB disconnect, device number 8 [ 246.509298][ T9030] fuse: Bad value for 'fd' [ 246.752549][ T1808] usb 8-1: USB disconnect, device number 5 [ 246.968818][ T9036] loop2: detected capacity change from 0 to 7 [ 246.979856][ T9036] Dev loop2: unable to read RDB block 7 [ 246.979876][ T9036] loop2: AHDI p2 p3 [ 246.979892][ T9036] loop2: partition table partially beyond EOD, truncated [ 246.980024][ T9036] loop2: p3 start 335544320 is beyond EOD, truncated [ 248.487167][ T5867] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 248.664364][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.664391][ T5867] usb 2-1: config 0 has no interfaces? [ 248.666658][ T5867] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.666685][ T5867] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 248.666845][ T5867] usb 2-1: Manufacturer: syz [ 248.692079][ T5867] usb 2-1: config 0 descriptor?? [ 248.951562][ T994] usb 2-1: USB disconnect, device number 14 [ 248.968280][ T37] audit: type=1326 audit(1769819479.440:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9053 comm="syz.5.1004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c158aeb9 code=0x0 [ 251.334450][ T9151] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1028'. [ 251.352574][ T37] audit: type=1326 audit(1769819481.830:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9131 comm="syz.5.1024" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4c158aeb9 code=0x0 [ 251.380121][ T37] audit: type=1326 audit(1769819481.860:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b9d34aeb9 code=0x0 [ 251.468101][ T994] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 251.590890][ T994] usb 3-1: device descriptor read/64, error -71 [ 251.751221][ T9165] program syz.7.1031 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.832142][ T994] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 251.960765][ T994] usb 3-1: device descriptor read/64, error -71 [ 252.091619][ T994] usb usb3-port1: attempt power cycle [ 252.403329][ T9188] program syz.7.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.440727][ T994] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 252.461974][ T994] usb 3-1: device descriptor read/8, error -71 [ 252.591647][ T9194] loop2: detected capacity change from 0 to 7 [ 252.594085][ T9194] Dev loop2: unable to read RDB block 7 [ 252.594114][ T9194] loop2: AHDI p1 p2 p3 [ 252.594139][ T9194] loop2: partition table partially beyond EOD, truncated [ 252.594353][ T9194] loop2: p1 start 1818582900 is beyond EOD, truncated [ 252.594369][ T9194] loop2: p3 start 335544320 is beyond EOD, truncated [ 252.633607][ T5867] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 252.700747][ T994] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 252.724573][ T994] usb 3-1: device descriptor read/8, error -71 [ 252.801850][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 252.803663][ T5867] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 252.803687][ T5867] usb 6-1: config 0 has no interface number 0 [ 252.808567][ T5867] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 252.808592][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.808611][ T5867] usb 6-1: Product: syz [ 252.808624][ T5867] usb 6-1: Manufacturer: syz [ 252.808636][ T5867] usb 6-1: SerialNumber: syz [ 252.813934][ T9203] netlink: 'syz.6.1043': attribute type 11 has an invalid length. [ 252.827968][ T5867] usb 6-1: config 0 descriptor?? [ 252.831417][ T994] usb usb3-port1: unable to enumerate USB device [ 252.838133][ T5867] smsc95xx v2.0.0 [ 253.253501][ T5867] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 253.253528][ T5867] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 253.310862][ T1808] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 253.460756][ T1808] usb 7-1: Using ep0 maxpacket: 16 [ 253.462635][ T1808] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.462658][ T1808] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.468031][ T1808] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.468058][ T1808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.468077][ T1808] usb 7-1: Product: syz [ 253.468091][ T1808] usb 7-1: Manufacturer: syz [ 253.468105][ T1808] usb 7-1: SerialNumber: syz [ 253.706203][ T1808] usb 7-1: 0:2 : does not exist [ 253.719247][ T1808] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 253.767409][ T1808] usb 7-1: USB disconnect, device number 3 [ 254.556308][ T7875] udevd[7875]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.639262][ T5867] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 254.639436][ T5867] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 254.768235][ T9220] loop2: detected capacity change from 0 to 7 [ 254.771382][ T9220] Dev loop2: unable to read RDB block 7 [ 254.771408][ T9220] loop2: AHDI p2 p3 [ 254.771434][ T9220] loop2: partition table partially beyond EOD, truncated [ 254.771666][ T9220] loop2: p3 start 335544320 is beyond EOD, truncated [ 255.013089][ T9227] loop2: detected capacity change from 0 to 7 [ 255.014384][ T9227] Dev loop2: unable to read RDB block 7 [ 255.014402][ T9227] loop2: AHDI p1 p2 p3 [ 255.014420][ T9227] loop2: partition table partially beyond EOD, truncated [ 255.014589][ T9227] loop2: p1 start 1818582900 is beyond EOD, truncated [ 255.014607][ T9227] loop2: p3 start 335544320 is beyond EOD, truncated [ 255.678331][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678400][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.388431][ T994] usb 6-1: USB disconnect, device number 9 [ 257.750840][ T44] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 257.880953][ T44] usb 8-1: device descriptor read/64, error -71 [ 257.940767][ T994] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 257.942225][ T932] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.329818][ T1808] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 258.407529][ T994] usb 6-1: device descriptor read/64, error -71 [ 258.461058][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 258.646711][ T932] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 258.646742][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.646762][ T932] usb 3-1: Product: syz [ 258.646775][ T932] usb 3-1: Manufacturer: syz [ 258.646789][ T932] usb 3-1: SerialNumber: syz [ 258.706501][ T932] usb 3-1: config 0 descriptor?? [ 258.726894][ T932] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 258.770774][ T994] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 258.805490][ T1808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.805517][ T1808] usb 7-1: config 0 has no interfaces? [ 258.809049][ T1808] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 258.809070][ T1808] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 258.809125][ T1808] usb 7-1: Manufacturer: syz [ 258.811560][ T44] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 258.874282][ T1808] usb 7-1: config 0 descriptor?? [ 258.910916][ T994] usb 6-1: device descriptor read/64, error -71 [ 258.948065][ T44] usb 8-1: device descriptor read/64, error -71 [ 259.006704][ T9254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.021228][ T994] usb usb6-port1: attempt power cycle [ 259.055711][ T44] usb usb8-port1: attempt power cycle [ 259.096360][ T5884] usb 7-1: USB disconnect, device number 4 [ 259.380835][ T994] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 259.393832][ T44] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 259.404815][ T994] usb 6-1: device descriptor read/8, error -71 [ 259.413696][ T44] usb 8-1: device descriptor read/8, error -71 [ 259.650810][ T44] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 259.651274][ T994] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 259.676749][ T44] usb 8-1: device descriptor read/8, error -71 [ 259.687671][ T994] usb 6-1: device descriptor read/8, error -71 [ 259.782627][ T44] usb usb8-port1: unable to enumerate USB device [ 259.800174][ T994] usb usb6-port1: unable to enumerate USB device [ 259.928794][ T932] gspca_ov534_9: reg_w failed -71 [ 259.970839][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 260.121542][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 260.123327][ T44] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 260.123351][ T44] usb 7-1: config 0 has no interface number 0 [ 260.123393][ T44] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.125566][ T44] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 260.125593][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.125611][ T44] usb 7-1: Product: syz [ 260.125622][ T44] usb 7-1: Manufacturer: syz [ 260.125629][ T44] usb 7-1: SerialNumber: syz [ 260.133462][ T44] usb 7-1: config 0 descriptor?? [ 260.169735][ T9261] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 260.240738][ T932] gspca_ov534_9: Unknown sensor 0000 [ 260.240837][ T932] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 260.245925][ T932] usb 3-1: USB disconnect, device number 16 [ 260.347035][ T9266] program syz.1.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.392917][ T9261] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 262.398748][ T44] asix 7-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 262.520828][ T5807] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 262.600049][ T44] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 262.600080][ T44] asix 7-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 262.600339][ T44] asix 7-1:0.188: probe with driver asix failed with error -61 [ 262.910539][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.910817][ T5807] usb 3-1: config 0 has no interfaces? [ 263.030503][ T5807] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.031614][ T5807] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 263.032165][ T5807] usb 3-1: Manufacturer: syz [ 263.266601][ T5807] usb 3-1: config 0 descriptor?? [ 263.517877][ T9295] program syz.1.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.948024][ T5807] usb 7-1: USB disconnect, device number 5 [ 264.311255][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 265.565542][ T994] usb 3-1: USB disconnect, device number 17 [ 265.966335][ T9336] program syz.1.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.788120][ T9356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.545841][ T9367] lo: entered allmulticast mode [ 271.546836][ T9367] tunl0: entered allmulticast mode [ 271.547149][ T9367] gre0: entered allmulticast mode [ 271.547426][ T9367] gretap0: entered allmulticast mode [ 271.547922][ T9367] erspan0: entered allmulticast mode [ 271.548327][ T9367] ip_vti0: entered allmulticast mode [ 271.548633][ T9367] ip6_vti0: entered allmulticast mode [ 271.548888][ T9367] sit0: entered allmulticast mode [ 271.549131][ T9367] ip6tnl0: entered allmulticast mode [ 271.549386][ T9367] ip6gre0: entered allmulticast mode [ 271.549621][ T9367] syz_tun: entered allmulticast mode [ 271.550186][ T9367] bridge0: entered allmulticast mode [ 271.550824][ T9367] vcan0: entered allmulticast mode [ 271.551159][ T9367] bond0: entered allmulticast mode [ 271.551169][ T9367] bond_slave_0: entered allmulticast mode [ 271.551179][ T9367] bond_slave_1: entered allmulticast mode [ 271.551846][ T9367] team0: entered allmulticast mode [ 271.551855][ T9367] team_slave_0: entered allmulticast mode [ 271.551864][ T9367] team_slave_1: entered allmulticast mode [ 271.552684][ T9367] dummy0: entered allmulticast mode [ 271.552967][ T9367] nlmon0: entered allmulticast mode [ 271.553270][ T9367] caif0: entered allmulticast mode [ 271.553356][ T9367] batadv0: entered allmulticast mode [ 271.554026][ T9367] vxcan0: entered allmulticast mode [ 271.554332][ T9367] vxcan1: entered allmulticast mode [ 271.554634][ T9367] veth0: entered allmulticast mode [ 271.555138][ T9367] veth1: entered allmulticast mode [ 271.555644][ T9367] wg0: entered allmulticast mode [ 271.555923][ T9367] wg1: entered allmulticast mode [ 271.556225][ T9367] wg2: entered allmulticast mode [ 271.556506][ T9367] veth0_to_bridge: entered allmulticast mode [ 271.557750][ T9367] veth1_to_bridge: entered allmulticast mode [ 271.558984][ T9367] veth0_to_bond: entered allmulticast mode [ 271.559941][ T9367] veth1_to_bond: entered allmulticast mode [ 271.560959][ T9367] veth0_to_team: entered allmulticast mode [ 271.562034][ T9367] veth1_to_team: entered allmulticast mode [ 271.563095][ T9367] veth0_to_batadv: entered allmulticast mode [ 271.563604][ T9367] batadv_slave_0: entered allmulticast mode [ 271.564095][ T9367] veth1_to_batadv: entered allmulticast mode [ 271.564601][ T9367] batadv_slave_1: entered allmulticast mode [ 271.565477][ T9367] xfrm0: entered allmulticast mode [ 271.565797][ T9367] veth0_to_hsr: entered allmulticast mode [ 271.566919][ T9367] hsr_slave_0: entered allmulticast mode [ 271.567412][ T9367] veth1_to_hsr: entered allmulticast mode [ 271.567907][ T9367] hsr_slave_1: entered allmulticast mode [ 271.568413][ T9367] hsr0: entered allmulticast mode [ 271.568920][ T9367] veth1_virt_wifi: entered allmulticast mode [ 271.569421][ T9367] veth0_virt_wifi: entered allmulticast mode [ 271.569915][ T9367] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 271.570017][ T9367] veth1_vlan: entered allmulticast mode [ 271.570563][ T9367] veth0_vlan: entered allmulticast mode [ 271.573176][ T9367] vlan0: entered allmulticast mode [ 271.573686][ T9367] vlan1: entered allmulticast mode [ 271.574204][ T9367] macvlan0: entered allmulticast mode [ 271.574673][ T9367] macvlan1: entered allmulticast mode [ 271.575178][ T9367] ipvlan0: entered allmulticast mode [ 271.575275][ T9367] ipvlan1: entered allmulticast mode [ 271.575362][ T9367] veth1_macvtap: entered allmulticast mode [ 271.575870][ T9367] veth0_macvtap: entered allmulticast mode [ 271.576756][ T9367] macvtap0: entered allmulticast mode [ 271.577285][ T9367] macsec0: entered allmulticast mode [ 271.577738][ T9367] geneve0: entered allmulticast mode [ 271.578243][ T9367] geneve1: entered allmulticast mode [ 271.578750][ T9367] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 271.581181][ T9367] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 271.581725][ T9367] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 271.582244][ T9367] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 271.582812][ T9367] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 271.583309][ T9367] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 271.583801][ T9367] bond1: entered allmulticast mode [ 271.584371][ T9367] bond2: entered allmulticast mode [ 271.584922][ T9367] gretap1: entered allmulticast mode [ 272.016794][ T9367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 272.017114][ T9367] block device autoloading is deprecated and will be removed. [ 272.431707][ T9375] program syz.2.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.657495][ T9385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.840771][ T6007] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 272.970794][ T6007] usb 7-1: device descriptor read/64, error -71 [ 273.220807][ T6007] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 273.355807][ T6007] usb 7-1: device descriptor read/64, error -71 [ 273.464956][ T6007] usb usb7-port1: attempt power cycle [ 273.924709][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.924921][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.929155][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 273.939487][ T9404] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.952214][ T9404] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 274.730080][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.733272][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.740388][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.747158][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.750063][ T9404] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.825193][ T9406] virt_wifi0 speed is unknown, defaulting to 1000 [ 275.173681][ T6007] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 275.192211][ T6007] usb 7-1: device descriptor read/8, error -71 [ 275.432419][ T6007] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 275.451620][ T6007] usb 7-1: device descriptor read/8, error -71 [ 275.571185][ T6007] usb usb7-port1: unable to enumerate USB device [ 275.640635][ T9414] program syz.5.1117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.069150][ T9421] usb usb8: usbfs: process 9421 (syz.5.1119) did not claim interface 0 before use [ 278.181288][ T9439] loop2: detected capacity change from 0 to 7 [ 278.190151][ T9439] Dev loop2: unable to read RDB block 7 [ 278.190186][ T9439] loop2: AHDI p1 p2 p3 [ 278.190214][ T9439] loop2: partition table partially beyond EOD, truncated [ 278.190439][ T9439] loop2: p1 start 1818582900 is beyond EOD, truncated [ 278.190458][ T9439] loop2: p3 start 335544320 is beyond EOD, truncated [ 278.883185][ T5802] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 281.030760][ T5802] usb 2-1: Using ep0 maxpacket: 32 [ 281.032773][ T5802] usb 2-1: no configurations [ 281.032790][ T5802] usb 2-1: can't read configurations, error -22 [ 281.192419][ T5802] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 281.530928][ T5802] usb 2-1: device not accepting address 16, error -71 [ 281.592535][ T5802] usb usb2-port1: attempt power cycle [ 282.594228][ T9471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.051662][ T9475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.600784][ T5802] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 285.820730][ T5802] usb 7-1: Using ep0 maxpacket: 32 [ 285.824255][ T5802] usb 7-1: no configurations [ 285.824273][ T5802] usb 7-1: can't read configurations, error -22 [ 285.940838][ T9506] usb usb8: usbfs: process 9506 (syz.5.1149) did not claim interface 0 before use [ 285.965926][ T5802] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 286.235513][ T5802] usb 7-1: Using ep0 maxpacket: 32 [ 286.236326][ T5802] usb 7-1: no configurations [ 286.236342][ T5802] usb 7-1: can't read configurations, error -22 [ 286.955146][ T5802] usb usb7-port1: attempt power cycle [ 288.879357][ T9527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1155'. [ 293.100744][ T932] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 293.250830][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 293.251972][ T932] usb 2-1: no configurations [ 293.251988][ T932] usb 2-1: can't read configurations, error -22 [ 293.270891][ T5807] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 293.382136][ T932] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 293.581247][ T5807] usb 7-1: Using ep0 maxpacket: 16 [ 293.768834][ T5807] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.768849][ T5807] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.789673][ T5807] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 293.789691][ T5807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.789701][ T5807] usb 7-1: Product: syz [ 293.789768][ T5807] usb 7-1: Manufacturer: syz [ 293.789776][ T5807] usb 7-1: SerialNumber: syz [ 293.857985][ T5807] usb 7-1: config 0 descriptor?? [ 293.910725][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 293.915852][ T932] usb 2-1: no configurations [ 293.915870][ T932] usb 2-1: can't read configurations, error -22 [ 293.916250][ T932] usb usb2-port1: attempt power cycle [ 293.990363][ T9569] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1167'. [ 294.481770][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 294.481903][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 294.579875][ T932] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 294.621773][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 294.632897][ T932] usb 2-1: no configurations [ 294.632944][ T932] usb 2-1: can't read configurations, error -22 [ 294.782163][ T932] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 294.813085][ T932] usb 2-1: Using ep0 maxpacket: 32 [ 294.879711][ T932] usb 2-1: no configurations [ 294.879770][ T932] usb 2-1: can't read configurations, error -22 [ 294.912759][ T932] usb usb2-port1: unable to enumerate USB device [ 295.891544][ T932] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 296.117483][ T5802] usb 7-1: USB disconnect, device number 13 [ 296.130709][ T932] usb 3-1: Using ep0 maxpacket: 16 [ 296.132944][ T932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.132966][ T932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.135411][ T932] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.135436][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.135456][ T932] usb 3-1: Product: syz [ 296.135469][ T932] usb 3-1: Manufacturer: syz [ 296.135489][ T932] usb 3-1: SerialNumber: syz [ 296.380539][ T9598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.435314][ T932] usb 3-1: 0:2 : does not exist [ 296.449494][ T932] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 296.492759][ T932] usb 3-1: USB disconnect, device number 18 [ 296.547525][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.628918][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1179'. [ 299.540747][ T5802] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 299.705454][ T5802] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 299.705482][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.705492][ T5802] usb 2-1: Product: syz [ 299.705500][ T5802] usb 2-1: Manufacturer: syz [ 299.705507][ T5802] usb 2-1: SerialNumber: syz [ 299.728156][ T5802] usb 2-1: config 0 descriptor?? [ 299.784896][ T5802] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 300.646526][ T5802] gspca_sunplus: reg_r err -32 [ 300.646586][ T5802] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 300.867357][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1199'. [ 300.867413][ T9660] openvswitch: netlink: Key type 31 is not supported [ 301.415193][ T9671] loop2: detected capacity change from 0 to 7 [ 301.416128][ T9671] Dev loop2: unable to read RDB block 7 [ 301.416156][ T9671] loop2: AHDI p1 p2 p3 [ 301.416181][ T9671] loop2: partition table partially beyond EOD, truncated [ 301.416920][ T9671] loop2: p1 start 1818582900 is beyond EOD, truncated [ 301.416940][ T9671] loop2: p3 start 335544320 is beyond EOD, truncated [ 301.707236][ T1808] usb 2-1: USB disconnect, device number 22 [ 303.681148][ T932] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.922599][ T932] usb 3-1: device descriptor read/64, error -71 [ 304.241718][ T932] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 304.460750][ T932] usb 3-1: device descriptor read/64, error -71 [ 304.571223][ T932] usb usb3-port1: attempt power cycle [ 304.910791][ T932] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 306.460838][ T5802] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 306.518266][ T932] usb 3-1: device descriptor read/8, error -71 [ 306.640899][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 306.642718][ T5802] usb 6-1: config 1 has an invalid interface descriptor of length 5, skipping [ 306.642741][ T5802] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 306.642759][ T5802] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.687162][ T5802] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.687180][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.687191][ T5802] usb 6-1: Product: syz [ 306.687198][ T5802] usb 6-1: Manufacturer: syz [ 306.687205][ T5802] usb 6-1: SerialNumber: syz [ 306.864022][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1226'. [ 306.973025][ T5802] usb 6-1: 0:2 : does not exist [ 307.070409][ T5802] usb 6-1: USB disconnect, device number 14 [ 308.307620][ T9759] syz.2.1235 (9759) used greatest stack depth: 18136 bytes left [ 308.582077][ T5802] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 309.660826][ T5802] usb 8-1: device descriptor read/64, error -71 [ 309.924171][ T9777] lo: entered allmulticast mode [ 309.925068][ T9777] tunl0: entered allmulticast mode [ 309.925352][ T9777] gre0: entered allmulticast mode [ 309.925605][ T9777] gretap0: entered allmulticast mode [ 309.926105][ T9777] erspan0: entered allmulticast mode [ 309.926499][ T9777] ip_vti0: entered allmulticast mode [ 309.927190][ T9777] ip6_vti0: entered allmulticast mode [ 309.927454][ T9777] sit0: entered allmulticast mode [ 309.927723][ T9777] ip6tnl0: entered allmulticast mode [ 309.927975][ T9777] ip6gre0: entered allmulticast mode [ 309.928230][ T9777] syz_tun: entered allmulticast mode [ 309.928641][ T9777] ip6gretap0: entered allmulticast mode [ 309.929080][ T9777] bridge0: entered allmulticast mode [ 309.929574][ T9777] vcan0: entered allmulticast mode [ 309.929867][ T9777] bond0: entered allmulticast mode [ 309.929876][ T9777] bond_slave_0: entered allmulticast mode [ 309.929885][ T9777] bond_slave_1: entered allmulticast mode [ 309.930597][ T9777] team0: entered allmulticast mode [ 309.930686][ T9777] team_slave_0: entered allmulticast mode [ 309.930712][ T9777] team_slave_1: entered allmulticast mode [ 309.931370][ T9777] dummy0: entered allmulticast mode [ 309.931671][ T9777] nlmon0: entered allmulticast mode [ 309.931956][ T9777] caif0: entered allmulticast mode [ 309.932052][ T9777] batadv0: entered allmulticast mode [ 309.932633][ T9777] vxcan0: entered allmulticast mode [ 309.932914][ T9777] vxcan1: entered allmulticast mode [ 309.933198][ T9777] veth0: entered allmulticast mode [ 309.933625][ T9777] veth1: entered allmulticast mode [ 309.934055][ T9777] wg0: entered allmulticast mode [ 309.934342][ T9777] wg1: entered allmulticast mode [ 309.934611][ T9777] wg2: entered allmulticast mode [ 309.934883][ T9777] veth0_to_bridge: entered allmulticast mode [ 309.935969][ T9777] veth1_to_bridge: entered allmulticast mode [ 309.939835][ T9777] veth0_to_bond: entered allmulticast mode [ 309.940762][ T9777] veth1_to_bond: entered allmulticast mode [ 309.941778][ T9777] veth0_to_team: entered allmulticast mode [ 309.942741][ T9777] veth1_to_team: entered allmulticast mode [ 309.943708][ T9777] veth0_to_batadv: entered allmulticast mode [ 309.944234][ T9777] batadv_slave_0: entered allmulticast mode [ 309.944647][ T9777] veth1_to_batadv: entered allmulticast mode [ 309.945077][ T9777] batadv_slave_1: entered allmulticast mode [ 309.945490][ T9777] xfrm0: entered allmulticast mode [ 309.945766][ T9777] veth0_to_hsr: entered allmulticast mode [ 309.946185][ T9777] hsr_slave_0: entered allmulticast mode [ 309.946591][ T9777] veth1_to_hsr: entered allmulticast mode [ 309.947008][ T9777] hsr_slave_1: entered allmulticast mode [ 309.947411][ T9777] hsr0: entered allmulticast mode [ 309.947832][ T9777] veth1_virt_wifi: entered allmulticast mode [ 309.948813][ T9777] veth0_virt_wifi: entered allmulticast mode [ 309.949257][ T9777] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 309.949353][ T9777] veth1_vlan: entered allmulticast mode [ 309.949901][ T9777] veth0_vlan: entered allmulticast mode [ 309.950479][ T9777] vlan0: entered allmulticast mode [ 309.950988][ T9777] vlan1: entered allmulticast mode [ 309.951430][ T9777] macvlan0: entered allmulticast mode [ 309.951887][ T9777] macvlan1: entered allmulticast mode [ 309.952306][ T9777] ipvlan0: entered allmulticast mode [ 309.952397][ T9777] ipvlan1: entered allmulticast mode [ 309.952481][ T9777] veth1_macvtap: entered allmulticast mode [ 309.952902][ T9777] veth0_macvtap: entered allmulticast mode [ 309.953319][ T9777] macvtap0: entered allmulticast mode [ 309.953742][ T9777] macsec0: entered allmulticast mode [ 309.954234][ T9777] geneve0: entered allmulticast mode [ 309.954733][ T9777] geneve1: entered allmulticast mode [ 309.955169][ T9777] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 309.955695][ T9777] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 309.956225][ T9777] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 309.956714][ T9777] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 309.957237][ T9777] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 309.957663][ T9777] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 309.958084][ T9777] bond1: entered allmulticast mode [ 309.961187][ T5802] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 310.091659][ T5802] usb 8-1: device descriptor read/64, error -71 [ 310.201615][ T5802] usb usb8-port1: attempt power cycle [ 310.380801][ T5867] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 310.561256][ T5802] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 310.563611][ T5867] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 310.563650][ T5867] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 310.563684][ T5867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.584661][ T5867] usb 7-1: config 0 descriptor?? [ 310.586273][ T5802] usb 8-1: device descriptor read/8, error -71 [ 310.598682][ T5867] metro_usb 7-1:0.0: required endpoints missing [ 310.694259][ T9783] fuse: Unknown parameter 'user_id00000000000000000000' [ 310.801362][ T5867] usb 7-1: USB disconnect, device number 14 [ 310.825439][ T5802] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 310.844298][ T5802] usb 8-1: device descriptor read/8, error -71 [ 310.948055][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1246'. [ 310.957253][ T5802] usb usb8-port1: unable to enumerate USB device [ 312.238484][ T5802] kernel read not supported for file /comedi3 (pid: 5802 comm: kworker/1:3) [ 312.780316][ T9812] fuse: Unknown parameter 'user_id00000000000000000000' [ 313.158268][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1258'. [ 314.190789][ T6007] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 314.322170][ T6007] usb 7-1: device descriptor read/64, error -71 [ 314.380801][ T994] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 314.474025][ T9846] fuse: Bad value for 'fd' [ 314.548675][ T994] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 314.548780][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.548800][ T994] usb 3-1: Product: syz [ 314.548813][ T994] usb 3-1: Manufacturer: syz [ 314.548826][ T994] usb 3-1: SerialNumber: syz [ 314.560723][ T6007] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 314.605602][ T994] usb 3-1: config 0 descriptor?? [ 314.628641][ T994] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 314.690733][ T6007] usb 7-1: device descriptor read/64, error -71 [ 314.810453][ T6007] usb usb7-port1: attempt power cycle [ 314.814680][ T994] gspca_sunplus: reg_r err -32 [ 314.814784][ T994] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 315.528966][ T6007] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 316.465436][ T6007] usb 7-1: device descriptor read/8, error -71 [ 316.485988][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1271'. [ 316.710796][ T6007] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 316.741564][ T6007] usb 7-1: device descriptor read/8, error -71 [ 316.853483][ T6007] usb usb7-port1: unable to enumerate USB device [ 317.181930][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.182000][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.235258][ T5802] usb 3-1: USB disconnect, device number 23 [ 318.447305][ T6007] kernel read not supported for file /comedi3 (pid: 6007 comm: kworker/0:6) [ 319.138737][ T9900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1283'. [ 319.420755][ T6007] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 319.518755][ T9906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.296296][ T6007] usb 6-1: Using ep0 maxpacket: 32 [ 320.298379][ T6007] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.298404][ T6007] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 320.342415][ T6007] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 320.342444][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.342464][ T6007] usb 6-1: Product: syz [ 320.342477][ T6007] usb 6-1: Manufacturer: syz [ 320.342491][ T6007] usb 6-1: SerialNumber: syz [ 320.347746][ T6007] usb 6-1: config 0 descriptor?? [ 320.471845][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 320.746501][ T9923] fuse: Bad value for 'fd' [ 321.190738][ T1808] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 321.320768][ T1808] usb 8-1: device descriptor read/64, error -71 [ 322.224944][ T9933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 322.277382][ T5802] usb 6-1: USB disconnect, device number 15 [ 322.286662][ T1808] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 322.414222][ T1808] usb 8-1: device descriptor read/64, error -71 [ 322.416570][ T9937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.521496][ T1808] usb usb8-port1: attempt power cycle [ 322.547367][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1299'. [ 322.921246][ T9951] fuse: Unknown parameter '0x0000000000000003' [ 323.181347][ T1808] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 323.242677][ T1808] usb 8-1: device descriptor read/8, error -71 [ 324.149064][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1308'. [ 325.810034][ T9979] loop2: detected capacity change from 0 to 7 [ 325.824839][ T9978] binder: 9974:9978 ioctl c0306201 0 returned -14 [ 325.825026][ T9979] Dev loop2: unable to read RDB block 7 [ 325.825064][ T9979] loop2: unable to read partition table [ 325.825267][ T9979] loop2: partition table beyond EOD, truncated [ 325.825285][ T9979] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 325.826319][ T9978] binder: 9974:9978 ioctl c0306201 200000000640 returned -22 [ 327.734646][ T9989] fuse: Unknown parameter '0x0000000000000003' [ 327.988273][ T9998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1319'. [ 328.103474][ T5802] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 328.230751][ T5802] usb 2-1: device descriptor read/64, error -71 [ 328.470869][ T5802] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 328.600785][ T5802] usb 2-1: device descriptor read/64, error -71 [ 328.717120][ T5802] usb usb2-port1: attempt power cycle [ 329.060732][ T5802] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 329.085375][ T5802] usb 2-1: device descriptor read/8, error -71 [ 329.139231][T10025] fuse: Unknown parameter '0x0000000000000003' [ 329.592114][ T5802] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 329.823813][ T5802] usb 2-1: device descriptor read/8, error -71 [ 330.109450][ T5802] usb usb2-port1: unable to enumerate USB device [ 330.571843][ T932] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 330.731849][ T932] usb 8-1: no configurations [ 330.731869][ T932] usb 8-1: can't read configurations, error -22 [ 332.179285][ T932] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 333.872063][ T932] usb 8-1: device not accepting address 19, error -71 [ 333.876560][ T932] usb usb8-port1: attempt power cycle [ 336.730749][ T5807] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 336.970837][ T5807] usb 7-1: device descriptor read/64, error -71 [ 338.038065][T10083] fuse: Unknown parameter '0x0000000000000003' [ 338.050830][ T5807] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 338.260891][ T932] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 339.371044][ T932] usb 8-1: no configurations [ 339.371063][ T932] usb 8-1: can't read configurations, error -22 [ 339.541658][ T932] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 339.717860][ T932] usb 8-1: no configurations [ 339.717881][ T932] usb 8-1: can't read configurations, error -22 [ 339.718258][ T932] usb usb8-port1: attempt power cycle [ 340.221246][ T932] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 340.800155][ T932] usb 8-1: no configurations [ 340.800168][ T932] usb 8-1: can't read configurations, error -22 [ 340.940762][ T932] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 341.029796][ T932] usb 8-1: device descriptor read/8, error -71 [ 341.087079][T10109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.131107][ T932] usb usb8-port1: unable to enumerate USB device [ 341.180793][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 341.330763][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 341.336225][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.438148][ T44] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 341.438176][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.438193][ T44] usb 2-1: Product: syz [ 341.438204][ T44] usb 2-1: Manufacturer: syz [ 341.438214][ T44] usb 2-1: SerialNumber: syz [ 343.732773][ T44] usb 2-1: config 0 descriptor?? [ 344.426091][ T994] usb 2-1: USB disconnect, device number 27 [ 350.336226][ T44] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 353.901499][ T1808] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 354.030817][ T1808] usb 7-1: device descriptor read/64, error -71 [ 354.290802][ T1808] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 354.435540][ T1808] usb 7-1: device descriptor read/64, error -71 [ 354.541260][ T1808] usb usb7-port1: attempt power cycle [ 354.890880][ T1808] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 354.911516][ T1808] usb 7-1: device descriptor read/8, error -71 [ 354.982742][T10193] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.000827][ T932] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 355.160740][ T1808] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 355.160898][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 355.181541][ T1808] usb 7-1: device descriptor read/8, error -71 [ 355.211862][ T932] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.215548][ T932] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 355.215578][ T932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.215599][ T932] usb 3-1: Product: syz [ 355.215614][ T932] usb 3-1: Manufacturer: syz [ 355.215629][ T932] usb 3-1: SerialNumber: syz [ 355.470810][ T1808] usb usb7-port1: unable to enumerate USB device [ 355.477278][ T932] usb 3-1: config 0 descriptor?? [ 358.093459][ T932] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 358.127057][ T44] usb 3-1: USB disconnect, device number 24 [ 358.266724][ T932] usb 2-1: no configurations [ 358.266744][ T932] usb 2-1: can't read configurations, error -22 [ 358.461776][ T932] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 358.741171][ T932] usb 2-1: no configurations [ 358.741192][ T932] usb 2-1: can't read configurations, error -22 [ 358.749182][ T932] usb usb2-port1: attempt power cycle [ 360.441491][ T932] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 361.094494][ T932] usb 2-1: device descriptor read/8, error -71 [ 363.490768][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 363.849823][ T10] usb 2-1: device descriptor read/64, error -71 [ 364.702896][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 366.148633][ T10] usb 2-1: device descriptor read/64, error -71 [ 366.264206][ T10] usb usb2-port1: attempt power cycle [ 375.301466][ T1808] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 375.306068][T10315] loop2: detected capacity change from 0 to 7 [ 375.316796][T10315] Dev loop2: unable to read RDB block 7 [ 375.316830][T10315] loop2: AHDI p2 p3 [ 375.316856][T10315] loop2: partition table partially beyond EOD, truncated [ 375.317080][T10315] loop2: p3 start 335544320 is beyond EOD, truncated [ 375.464276][ T1808] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 375.464314][ T1808] usb 3-1: can't read configurations, error -61 [ 375.829191][ T5802] kernel read not supported for file /comedi3 (pid: 5802 comm: kworker/1:3) [ 376.610474][ T1808] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 377.260395][ T1808] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 377.260418][ T1808] usb 3-1: can't read configurations, error -71 [ 377.260862][ T1808] usb usb3-port1: attempt power cycle [ 377.274962][ T1808] ================================================================== [ 377.274973][ T1808] BUG: KASAN: slab-use-after-free in rtlock_slowlock_locked+0x3460/0x3c80 [ 377.275002][ T1808] Read of size 8 at addr ffff888039dc48f8 by task kworker/0:4/1808 [ 377.275012][ T1808] [ 377.275028][ T1808] CPU: 0 UID: 0 PID: 1808 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 377.275041][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 377.275049][ T1808] Workqueue: usb_hub_wq hub_event [ 377.275068][ T1808] Call Trace: [ 377.275072][ T1808] [ 377.275080][ T1808] dump_stack_lvl+0xe8/0x150 [ 377.275096][ T1808] print_report+0xba/0x230 [ 377.275109][ T1808] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 377.275120][ T1808] kasan_report+0x117/0x150 [ 377.275135][ T1808] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 377.275148][ T1808] rtlock_slowlock_locked+0x3460/0x3c80 [ 377.275163][ T1808] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 377.275173][ T1808] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 377.275186][ T1808] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 377.275202][ T1808] rt_spin_lock+0x165/0x400 [ 377.275212][ T1808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.275226][ T1808] ? __pfx_rt_spin_lock+0x10/0x10 [ 377.275236][ T1808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 377.275247][ T1808] raw_queue_event+0x39/0x2e0 [ 377.275258][ T1808] gadget_disconnect+0x51/0xe0 [ 377.275268][ T1808] set_link_state+0xc0a/0x1220 [ 377.275280][ T1808] dummy_hub_control+0xafc/0x1a00 [ 377.275292][ T1808] ? usb_hcd_submit_urb+0x786/0x1b50 [ 377.275306][ T1808] usb_hcd_submit_urb+0xdbe/0x1b50 [ 377.275321][ T1808] usb_start_wait_urb+0x12b/0x510 [ 377.275336][ T1808] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 377.275354][ T1808] usb_control_msg+0x232/0x3e0 [ 377.275369][ T1808] hub_event+0x2dc0/0x4f60 [ 377.275389][ T1808] ? __pfx_hub_event+0x10/0x10 [ 377.275398][ T1808] ? process_scheduled_works+0xa0f/0x17a0 [ 377.275415][ T1808] ? process_scheduled_works+0xa0f/0x17a0 [ 377.275429][ T1808] ? process_scheduled_works+0xa0f/0x17a0 [ 377.275444][ T1808] process_scheduled_works+0xaec/0x17a0 [ 377.275464][ T1808] ? __pfx_process_scheduled_works+0x10/0x10 [ 377.275478][ T1808] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.275494][ T1808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.275507][ T1808] ? schedule+0x90/0x360 [ 377.275520][ T1808] worker_thread+0xda6/0x1360 [ 377.275533][ T1808] ? __kthread_parkme+0x19c/0x1f0 [ 377.275544][ T1808] kthread+0x726/0x8b0 [ 377.275556][ T1808] ? __pfx_worker_thread+0x10/0x10 [ 377.275565][ T1808] ? __pfx_kthread+0x10/0x10 [ 377.275576][ T1808] ? rt_spin_unlock+0x14f/0x200 [ 377.275587][ T1808] ? rt_spin_unlock+0x160/0x200 [ 377.275596][ T1808] ? __pfx_kthread+0x10/0x10 [ 377.275607][ T1808] ret_from_fork+0x51b/0xa40 [ 377.275618][ T1808] ? __pfx_ret_from_fork+0x10/0x10 [ 377.275628][ T1808] ? __switch_to+0xc82/0x1410 [ 377.275643][ T1808] ? __pfx_kthread+0x10/0x10 [ 377.275654][ T1808] ret_from_fork_asm+0x1a/0x30 [ 377.275671][ T1808] [ 377.275676][ T1808] [ 377.275680][ T1808] Allocated by task 10311: [ 377.275686][ T1808] kasan_save_track+0x3e/0x80 [ 377.275705][ T1808] __kasan_kmalloc+0x93/0xb0 [ 377.275717][ T1808] __kmalloc_cache_noprof+0x1f2/0x6b0 [ 377.275731][ T1808] raw_open+0x8d/0x530 [ 377.275738][ T1808] misc_open+0x2de/0x350 [ 377.275749][ T1808] chrdev_open+0x4d0/0x5f0 [ 377.275761][ T1808] do_dentry_open+0x7d0/0x1270 [ 377.275769][ T1808] vfs_open+0x3b/0x350 [ 377.275777][ T1808] path_openat+0x34c9/0x3e70 [ 377.275787][ T1808] do_filp_open+0x22d/0x490 [ 377.275797][ T1808] do_sys_openat2+0x12f/0x220 [ 377.275805][ T1808] __x64_sys_openat+0x138/0x170 [ 377.275813][ T1808] do_syscall_64+0xe2/0xf80 [ 377.275825][ T1808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.275834][ T1808] [ 377.275836][ T1808] Freed by task 10310: [ 377.275841][ T1808] kasan_save_track+0x3e/0x80 [ 377.275851][ T1808] kasan_save_free_info+0x46/0x50 [ 377.275861][ T1808] __kasan_slab_free+0x5c/0x80 [ 377.275872][ T1808] kfree+0x1bb/0x8f0 [ 377.275882][ T1808] raw_release+0x191/0x260 [ 377.275889][ T1808] __fput+0x45e/0xa80 [ 377.275897][ T1808] task_work_run+0x1d9/0x270 [ 377.275908][ T1808] do_exit+0x69b/0x2320 [ 377.275919][ T1808] do_group_exit+0x21b/0x2d0 [ 377.275931][ T1808] get_signal+0x125c/0x1310 [ 377.275939][ T1808] arch_do_signal_or_restart+0xbc/0x830 [ 377.275952][ T1808] exit_to_user_mode_loop+0x86/0x480 [ 377.275962][ T1808] do_syscall_64+0x2b7/0xf80 [ 377.275973][ T1808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.275982][ T1808] [ 377.275985][ T1808] The buggy address belongs to the object at ffff888039dc4000 [ 377.275985][ T1808] which belongs to the cache kmalloc-4k of size 4096 [ 377.275994][ T1808] The buggy address is located 2296 bytes inside of [ 377.275994][ T1808] freed 4096-byte region [ffff888039dc4000, ffff888039dc5000) [ 377.276004][ T1808] [ 377.276007][ T1808] The buggy address belongs to the physical page: [ 377.276016][ T1808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39dc0 [ 377.276029][ T1808] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 377.276037][ T1808] flags: 0x80000000000040(head|node=0|zone=1) [ 377.276049][ T1808] page_type: f5(slab) [ 377.276058][ T1808] raw: 0080000000000040 ffff88813fe27140 ffffea0001844600 dead000000000002 [ 377.276067][ T1808] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 377.276076][ T1808] head: 0080000000000040 ffff88813fe27140 ffffea0001844600 dead000000000002 [ 377.276085][ T1808] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 377.276094][ T1808] head: 0080000000000003 ffffea0000e77001 00000000ffffffff 00000000ffffffff [ 377.276102][ T1808] head: ffff888039dc1f50 0000000000000000 00000000ffffffff 0000000000000008 [ 377.276107][ T1808] page dumped because: kasan: bad access detected [ 377.276116][ T1808] page_owner tracks the page as allocated [ 377.276120][ T1808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7047, tgid 7046 (syz.4.413), ts 129048122481, free_ts 129033584510 [ 377.276139][ T1808] post_alloc_hook+0x228/0x280 [ 377.276152][ T1808] get_page_from_freelist+0x28bb/0x2950 [ 377.276161][ T1808] __alloc_frozen_pages_noprof+0x18d/0x380 [ 377.276169][ T1808] alloc_pages_mpol+0xd1/0x380 [ 377.276182][ T1808] allocate_slab+0x86/0x3a0 [ 377.276192][ T1808] ___slab_alloc+0xaf8/0x13d0 [ 377.276200][ T1808] __slab_alloc+0xc5/0x1f0 [ 377.276209][ T1808] __kvmalloc_node_noprof+0x2f9/0x8f0 [ 377.276221][ T1808] pfifo_fast_init+0x252/0x6f0 [ 377.276234][ T1808] qdisc_create_dflt+0x13b/0x4c0 [ 377.276245][ T1808] mq_init+0x2db/0x690 [ 377.276257][ T1808] qdisc_create+0x7ac/0xea0 [ 377.276266][ T1808] tc_modify_qdisc+0x16f0/0x2290 [ 377.276275][ T1808] rtnetlink_rcv_msg+0x77e/0xbe0 [ 377.276287][ T1808] netlink_rcv_skb+0x232/0x4b0 [ 377.276298][ T1808] netlink_unicast+0x831/0x9f0 [ 377.276308][ T1808] page last free pid 5795 tgid 5795 stack trace: [ 377.276313][ T1808] __free_frozen_pages+0xfd0/0x1160 [ 377.276325][ T1808] __put_partials+0x149/0x170 [ 377.276334][ T1808] __slab_free+0x2af/0x330 [ 377.276343][ T1808] qlist_free_all+0x97/0x100 [ 377.276354][ T1808] kasan_quarantine_reduce+0x148/0x160 [ 377.276364][ T1808] __kasan_slab_alloc+0x22/0x80 [ 377.276376][ T1808] kmem_cache_alloc_noprof+0x188/0x6a0 [ 377.276387][ T1808] getname_flags+0xb7/0x540 [ 377.276400][ T1808] vfs_fstatat+0x43/0x170 [ 377.276412][ T1808] __x64_sys_newfstatat+0x151/0x200 [ 377.276420][ T1808] do_syscall_64+0xe2/0xf80 [ 377.276431][ T1808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.276440][ T1808] [ 377.276442][ T1808] Memory state around the buggy address: [ 377.276448][ T1808] ffff888039dc4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.276454][ T1808] ffff888039dc4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.276461][ T1808] >ffff888039dc4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.276466][ T1808] ^ [ 377.276472][ T1808] ffff888039dc4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.276478][ T1808] ffff888039dc4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 377.276484][ T1808] ================================================================== [ 377.276494][ T1808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 377.276505][ T1808] CPU: 0 UID: 0 PID: 1808 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 377.276518][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 377.276525][ T1808] Workqueue: usb_hub_wq hub_event [ 377.276536][ T1808] Call Trace: [ 377.276540][ T1808] [ 377.276545][ T1808] vpanic+0x1e0/0x670 [ 377.276559][ T1808] panic+0xc5/0xd0 [ 377.276571][ T1808] ? __pfx_panic+0x10/0x10 [ 377.276585][ T1808] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 377.276597][ T1808] ? rcu_is_watching+0x15/0xb0 [ 377.276612][ T1808] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 377.276623][ T1808] check_panic_on_warn+0x89/0xb0 [ 377.276636][ T1808] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 377.276646][ T1808] end_report+0x6f/0x140 [ 377.276659][ T1808] kasan_report+0x128/0x150 [ 377.276673][ T1808] ? rtlock_slowlock_locked+0x3460/0x3c80 [ 377.276685][ T1808] rtlock_slowlock_locked+0x3460/0x3c80 [ 377.276707][ T1808] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 377.276718][ T1808] ? rtlock_slowlock_locked+0x2a8/0x3c80 [ 377.276731][ T1808] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 377.276747][ T1808] rt_spin_lock+0x165/0x400 [ 377.276757][ T1808] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.276771][ T1808] ? __pfx_rt_spin_lock+0x10/0x10 [ 377.276782][ T1808] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 377.276793][ T1808] raw_queue_event+0x39/0x2e0 [ 377.276804][ T1808] gadget_disconnect+0x51/0xe0 [ 377.276813][ T1808] set_link_state+0xc0a/0x1220 [ 377.276826][ T1808] dummy_hub_control+0xafc/0x1a00 [ 377.276836][ T1808] ? usb_hcd_submit_urb+0x786/0x1b50 [ 377.276849][ T1808] usb_hcd_submit_urb+0xdbe/0x1b50 [ 377.276862][ T1808] usb_start_wait_urb+0x12b/0x510 [ 377.276878][ T1808] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 377.276896][ T1808] usb_control_msg+0x232/0x3e0 [ 377.276910][ T1808] hub_event+0x2dc0/0x4f60 [ 377.276930][ T1808] ? __pfx_hub_event+0x10/0x10 [ 377.276939][ T1808] ? process_scheduled_works+0xa0f/0x17a0 [ 377.276955][ T1808] ? process_scheduled_works+0xa0f/0x17a0 [ 377.276969][ T1808] ? process_scheduled_works+0xa0f/0x17a0 [ 377.276984][ T1808] process_scheduled_works+0xaec/0x17a0 [ 377.277004][ T1808] ? __pfx_process_scheduled_works+0x10/0x10 [ 377.277018][ T1808] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.277034][ T1808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.277047][ T1808] ? schedule+0x90/0x360 [ 377.277060][ T1808] worker_thread+0xda6/0x1360 [ 377.277072][ T1808] ? __kthread_parkme+0x19c/0x1f0 [ 377.277084][ T1808] kthread+0x726/0x8b0 [ 377.277096][ T1808] ? __pfx_worker_thread+0x10/0x10 [ 377.277105][ T1808] ? __pfx_kthread+0x10/0x10 [ 377.277115][ T1808] ? rt_spin_unlock+0x14f/0x200 [ 377.277126][ T1808] ? rt_spin_unlock+0x160/0x200 [ 377.277135][ T1808] ? __pfx_kthread+0x10/0x10 [ 377.277147][ T1808] ret_from_fork+0x51b/0xa40 [ 377.277157][ T1808] ? __pfx_ret_from_fork+0x10/0x10 [ 377.277167][ T1808] ? __switch_to+0xc82/0x1410 [ 377.277182][ T1808] ? __pfx_kthread+0x10/0x10 [ 377.277193][ T1808] ret_from_fork_asm+0x1a/0x30 [ 377.277210][ T1808] [ 377.277586][ T1808] Kernel Offset: disabled