last executing test programs: 11.173157005s ago: executing program 3 (id=1682): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r2}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, 0xffffffffffffffff, 0x0) 10.21411211s ago: executing program 3 (id=1683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dri(0x0, 0x1df, 0x80980) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 9.923480844s ago: executing program 1 (id=1685): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffff7) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 8.714319893s ago: executing program 3 (id=1686): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(0x0, 0x2480, 0x1) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x410000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x22) close(r2) syz_open_procfs(0x0, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 7.272639056s ago: executing program 4 (id=1689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.99411658s ago: executing program 0 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x1c) 6.99286276s ago: executing program 1 (id=1691): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271d, 0x0, &(0x7f0000000300)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10001}, 0x10}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000180)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) ioctl$LOOP_CHANGE_FD(r5, 0x4c03, r6) 6.633659436s ago: executing program 1 (id=1692): socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast1, 0xf}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='dvmrp1\x00', 0x10) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@index_off}]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 6.493900378s ago: executing program 4 (id=1693): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x3) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3, 0x2, 0x2, r3}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) 6.280889541s ago: executing program 4 (id=1694): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r0, 0x40, 0x1) 6.200919393s ago: executing program 0 (id=1695): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff5}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1200000006"], 0x10) 6.089899065s ago: executing program 0 (id=1696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dri(0x0, 0x1df, 0x80980) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r1, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17) openat$dir(0xffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5.993830096s ago: executing program 4 (id=1697): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e", 0x11}], 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) 5.669138521s ago: executing program 3 (id=1698): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) r5 = syz_io_uring_setup(0x4b2, &(0x7f0000000580)={0x0, 0x86e2, 0x40, 0x1, 0x4}, &(0x7f0000000600), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r7 = dup2(r6, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) bind$unix(r1, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) readv(0xffffffffffffffff, &(0x7f0000002540)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) 5.612206602s ago: executing program 1 (id=1699): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000000080008d64043e200000000000009000000000000000000984ab33823b9948898bc01990e25b37adbc4454db5eae4ce36bb6fb943432e674610d4f2443ebd2b9cf0091fbc8c3cbdfe7f40d228f7adffadead676332b897207629f05914103"], 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x101, 0x1) getdents64(r4, 0x0, 0x0) 5.179093199s ago: executing program 3 (id=1700): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x2, 'JE'}, 0xb, 0x1) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x0, 0x202, 0x2, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$TCFLSH(r0, 0x5608, 0x1) 4.905436353s ago: executing program 1 (id=1701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket(0x23, 0x5, 0x0) 4.332141802s ago: executing program 4 (id=1702): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x17f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16d, 0x1, 0x1, 0x8, 0xa0, 0x7d, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xb, 0x24, 0x6, 0x0, 0x0, "a9a461ead7db"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x4, 0x2}, [@mdlm_detail={0xfe, 0x24, 0x13, 0x8, "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"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x8, 0x2, 0x4, 0x4, 0x7f}, @mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x9b, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xc, 0x3, 0xa1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0xfa}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x80, 0x0, 0x8, 0x5}, 0x24, &(0x7f0000000240)={0x5, 0xf, 0x24, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xcb, 0x2, 0x0, 0xb7, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2a, 0xf7, 0x3fd1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x9, 0xe}]}, 0x7, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, "7410"}}, {0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "39860e9be62649b08b403eb10cba977694d9ee2024558f8dd27c1bc0e80a6a1b74d0ad762249c21f62c91d722920c6c86ee46b64b515d26fe2dec320dc5bf71944dc4be4d30e6be1d89ddc1e1373bbf0a2543f8e145e99c958833ddb3b194686c0749a3a7b22213dcab4d34a876413ae8b01cb89f4f6c17088c970714fd1546e4acf97a3cf67fbcdc3eca5a0eb555968fa10f4c9a91ed39dda57"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xdb, &(0x7f0000000400)=@string={0xdb, 0x3, "516413cfd45912a9e505f937e06507bff6c2e8f7a62eb45048c14b855a60ee1c524096dd22bd685827dfb4dabe748613f200ea17e62f56cc36c2c8aef64d0d6d7278cec0630bb8364c6bb7c68d887df2bb792d0364cfca27601178b2c55da075f37fc59e14fd04c628c5e843f1c22a8c8dacfb5914d7f83f0adca8a3a1e4d1a89da7f14a2d7395ae1ef62c534359e32b8e3ab47a5d8e70b478624e4e6a7dae022e8450d768f1bd6eac5b8aa71a672ed8514c0d4a03f83cba695ac845293185e89ce022e3a8ac070ff0e9cdc6ee58a5ef78d3b3b435704a54f6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x813}}, {0xfa, &(0x7f0000000540)=@string={0xfa, 0x3, "3304b5c91850a3f10019ccaa3484e7a6cd840e5faeff43ea3c55ab5468fb5af5f4ead4f47508d6ce1e6418e325effa12b6d0099173195a390cdb1651663707595199cb77f84d18fd5eed8303d4338044123038f10d51f2a51fc93a1e7908ae8664a6b5f7b9b6221a870e91ef4c0ff9150413c4afdf7a8c9f6b41876993115be6f365275be86bc025ee8be235c9edc2e22f7c69a9e3da50fbcf8a4e67bcb7c6dd94b0b2aa8cb69f97846ddc0dd11700dd94c5ecd8b6c33d5cbc85f058142a0a43d8f22ecf46885852f9de8ed03135348210eeff5955d2a53b325aa5e0e40ce483dedde65ddebfea5517a64c46d1a64a3d5879597d3139abed"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf38f3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfd9e, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6(0xa, 0x80002, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0xa00000, &(0x7f0000000140)='grpquota') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = socket(0x23, 0x2, 0x1) sendfile(r5, r4, 0x0, 0x80000000000001) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002000000000130000000030a03000000000000000007030000000900030073797a30000000000900010073797a30000000"], 0xa0}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.173929955s ago: executing program 2 (id=1703): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x4e23, @loopback}, @vsock={0x28, 0x0, 0x2711, @local}, @phonet={0x23, 0x37, 0x0, 0x3}, 0x7ff, 0x0, 0x0, 0x0, 0x24f2, 0x0, 0x2, 0xf93, 0x5}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) 2.246212754s ago: executing program 2 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.136513956s ago: executing program 0 (id=1705): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd(0x3) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000280)={r3, 0x2, 0x2, r3}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, 0xffffffffffffffff, 0x0) 2.010519119s ago: executing program 2 (id=1706): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff5}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1200000006"], 0x10) 2.009701228s ago: executing program 0 (id=1707): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6(0xa, 0x80002, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) 1.570091955s ago: executing program 2 (id=1708): socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0xa0000006}) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 641.91213ms ago: executing program 2 (id=1709): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x268, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x250, 0x1, [@m_ct={0x60, 0x15, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x7, 0x3}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x118, 0x1d, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x7fffffff, 0x5, 0x7, 0xd}, 0x70}}]}, {0xcd, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xa4, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0x7, 0x2}, 0x5a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xdbc6, 0xfffffffffffffff8, 0x401, 0xdbc0}, 0x6a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5a, 0x7a1e, 0x0, 0x7fff, 0x9}, 0xfeff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x4, 0x8001, 0xaf0a}, 0xa26}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x30, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 501.309692ms ago: executing program 4 (id=1710): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_usb_disconnect(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b", 0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000080)=0x7fffffff, 0x4) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) request_key(&(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000300)='R\x10suse\x00\x00\x00\x00\x00\x00\x00\'n\x00\x00\x00', 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 394.614444ms ago: executing program 2 (id=1711): socket$kcm(0x10, 0x2, 0x0) r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 373.759944ms ago: executing program 0 (id=1712): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8071, 0xffffffffffffffff, 0x172f7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = eventfd2(0x2, 0x0) write$eventfd(r4, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) write$eventfd(r4, &(0x7f0000000580), 0x8) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x1048b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101800, 0x81) fdatasync(r5) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x0}) r6 = dup(r0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES64=r6, @ANYRES64=r0, @ANYRES8, @ANYRES8=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="4a50ae586c7c077f00eb2083524e", 0x0, 0x400004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 315.833815ms ago: executing program 3 (id=1713): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e", 0x11}], 0x2) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) 0s ago: executing program 1 (id=1714): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x3, 0xba2, 0x0, 0x0, {0x8, 0xffffffff}, 0xd1, 0x9}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000240)=0xee1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) socket$packet(0x11, 0x0, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x302, 0x3, 0x0, 0x100000000, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffe, 0x10001, 0x0, 0x9, 0x8a, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): 03][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 306.263653][ T4302] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 306.473610][ T4302] usb 5-1: device descriptor read/64, error -71 [ 306.604141][ T6529] lo speed is unknown, defaulting to 1000 [ 307.513748][ T4302] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 307.520502][ T6537] capability: warning: `syz.2.483' uses deprecated v2 capabilities in a way that may be insecure [ 307.533728][ T6537] overlayfs: failed to resolve './file1': -2 [ 307.693746][ T4302] usb 5-1: device descriptor read/64, error -71 [ 308.389489][ T4302] usb usb5-port1: attempt power cycle [ 311.015012][ T6559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 312.260387][ T6574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.523782][ T4264] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 313.064525][ T4264] usb 1-1: Using ep0 maxpacket: 32 [ 313.073192][ T4264] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.108882][ T4264] usb 1-1: config 0 has no interfaces? [ 313.120867][ T4264] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 313.137914][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 313.151823][ T4264] usb 1-1: Product: syz [ 313.158304][ T4264] usb 1-1: Manufacturer: syz [ 313.169624][ T4264] usb 1-1: SerialNumber: syz [ 313.191096][ T4264] usb 1-1: config 0 descriptor?? [ 313.213959][ T4340] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 313.375604][ T4340] usb 5-1: device descriptor read/64, error -71 [ 313.412867][ T4264] usb 1-1: USB disconnect, device number 6 [ 313.700895][ T4340] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 313.873649][ T4340] usb 5-1: device descriptor read/64, error -71 [ 313.929696][ T4444] Bluetooth: hci5: Frame reassembly failed (-84) [ 313.942324][ T4444] Bluetooth: hci5: Frame reassembly failed (-84) [ 314.033805][ T4340] usb usb5-port1: attempt power cycle [ 314.563646][ T4340] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 314.731234][ T4340] usb 5-1: device descriptor read/8, error -71 [ 315.100868][ T5154] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 315.233597][ T4340] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 315.297176][ T4340] usb 5-1: device descriptor read/8, error -71 [ 315.425173][ T4340] usb usb5-port1: unable to enumerate USB device [ 315.433605][ T5154] usb 4-1: Using ep0 maxpacket: 8 [ 315.443012][ T6596] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 315.457798][ T5154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.518731][ T5154] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.561548][ T5154] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 315.608135][ T5154] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 315.643859][ T5154] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 315.683562][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.731861][ T5154] hub 4-1:1.0: bad descriptor, ignoring hub [ 315.763890][ T5154] hub: probe of 4-1:1.0 failed with error -5 [ 315.770248][ T5154] cdc_wdm 4-1:1.0: skipping garbage [ 315.793678][ T5154] cdc_wdm 4-1:1.0: skipping garbage [ 315.820872][ T5154] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 315.837188][ T5154] cdc_wdm 4-1:1.0: Unknown control protocol [ 315.863927][ T4257] Bluetooth: hci5: command 0x1003 tx timeout [ 315.870280][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 315.933280][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.025135][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.877036][ T52] block nbd3: Attempted send on invalid socket [ 316.883332][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 316.896225][ T6591] XFS (nbd3): SB validate failed with error -5. [ 317.150065][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.156578][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.227511][ T6608] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 317.659215][ T6617] device bridge3 entered promiscuous mode [ 317.697850][ T6619] 9pnet_fd: Insufficient options for proto=fd [ 318.243804][ T22] usb 4-1: USB disconnect, device number 6 [ 318.366819][ T6626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.579762][ T6630] device bond_slave_0 entered promiscuous mode [ 318.586009][ T6630] device bond_slave_1 entered promiscuous mode [ 318.604164][ T6630] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 318.666826][ T6630] bond1: (slave macvlan4): making interface the new active one [ 318.676406][ T6630] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 318.692523][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 320.092643][ T6646] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 320.867911][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 320.900550][ T6654] netlink: 'syz.1.514': attribute type 5 has an invalid length. [ 320.975506][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.514'. [ 322.726767][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 323.513772][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 323.522233][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.553133][ T6674] trusted_key: encrypted_key: insufficient parameters specified [ 323.558912][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.574704][ T6674] trusted_key: encrypted_key: insufficient parameters specified [ 323.605722][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 323.620549][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 323.632351][ T22] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 323.650919][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.750398][ T22] hub 1-1:1.0: bad descriptor, ignoring hub [ 323.913743][ T22] hub: probe of 1-1:1.0 failed with error -5 [ 323.929061][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 323.934913][ T22] cdc_wdm 1-1:1.0: skipping garbage [ 323.946857][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.956470][ T22] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 323.962387][ T22] cdc_wdm 1-1:1.0: Unknown control protocol [ 323.973871][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.525803][ T52] block nbd0: Attempted send on invalid socket [ 324.531999][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 324.542089][ T6685] XFS (nbd0): SB validate failed with error -5. [ 325.216802][ T6696] device bridge3 entered promiscuous mode [ 325.368473][ T6696] 9pnet_fd: Insufficient options for proto=fd [ 325.899016][ T6702] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 328.573394][ T6719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 328.644001][ T7] usb 1-1: USB disconnect, device number 7 [ 329.870957][ T6728] netdevsim netdevsim0: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 329.885253][ T6728] netdevsim netdevsim0: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 331.575395][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 331.796582][ T6745] netlink: 'syz.4.536': attribute type 5 has an invalid length. [ 331.876194][ T6745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.536'. [ 333.683581][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 333.903599][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 333.910056][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.939876][ T14] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.963616][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 334.003608][ T14] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 334.025099][ T14] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 334.043756][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.082052][ T14] hub 4-1:1.0: bad descriptor, ignoring hub [ 334.092798][ T14] hub: probe of 4-1:1.0 failed with error -5 [ 334.104508][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 334.113043][ T14] cdc_wdm 4-1:1.0: skipping garbage [ 334.124013][ T14] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 334.129908][ T14] cdc_wdm 4-1:1.0: Unknown control protocol [ 334.302382][ T6769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.324805][ T6769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.464863][ T4257] Bluetooth: hci5: command 0x1003 tx timeout [ 334.465055][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 336.376815][ T52] block nbd3: Attempted send on invalid socket [ 336.383056][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 336.392937][ T6781] XFS (nbd3): SB validate failed with error -5. [ 337.718672][ T6798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.306781][ T6805] overlayfs: failed to resolve './file0': -2 [ 338.720967][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 338.731230][ T6822] netlink: 'syz.0.552': attribute type 5 has an invalid length. [ 338.739507][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 339.515865][ T14] usb 4-1: USB disconnect, device number 7 [ 340.511756][ T6828] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 341.872029][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.558'. [ 342.052100][ T6848] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.134831][ T6848] device bond_slave_0 entered promiscuous mode [ 342.141052][ T6848] device bond_slave_1 entered promiscuous mode [ 342.323897][ T6848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.404588][ T6848] bond1: (slave macvlan2): making interface the new active one [ 342.448219][ T6848] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 342.471017][ T5769] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 342.693579][ T4242] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 342.883689][ T4242] usb 3-1: device descriptor read/64, error -71 [ 343.143624][ T4264] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 343.156444][ T4242] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 343.323676][ T4242] usb 3-1: device descriptor read/64, error -71 [ 343.345338][ T4264] usb 4-1: Using ep0 maxpacket: 8 [ 343.352092][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.393909][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 343.403098][ T6875] trusted_key: encrypted_key: insufficient parameters specified [ 343.428715][ T4264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 343.444740][ T4242] usb usb3-port1: attempt power cycle [ 343.477964][ T4264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 343.503273][ T4264] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 343.524373][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.549535][ T4264] hub 4-1:1.0: bad descriptor, ignoring hub [ 343.568315][ T4264] hub: probe of 4-1:1.0 failed with error -5 [ 343.586612][ T4264] cdc_wdm 4-1:1.0: skipping garbage [ 343.598485][ T4264] cdc_wdm 4-1:1.0: skipping garbage [ 343.630103][ T4264] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 343.641768][ T4264] cdc_wdm 4-1:1.0: Unknown control protocol [ 343.841324][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.855017][ T4242] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 343.873830][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.994276][ T4242] usb 3-1: device descriptor read/8, error -71 [ 344.263999][ T4242] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 344.315333][ T4242] usb 3-1: device descriptor read/8, error -71 [ 344.474229][ T4242] usb usb3-port1: unable to enumerate USB device [ 345.431847][ T52] block nbd3: Attempted send on invalid socket [ 345.438346][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 345.471960][ T6886] XFS (nbd3): SB validate failed with error -5. [ 346.826171][ T6905] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 347.013583][ T6906] ======================================================= [ 347.013583][ T6906] WARNING: The mand mount option has been deprecated and [ 347.013583][ T6906] and is ignored by this kernel. Remove the mand [ 347.013583][ T6906] option from the mount to silence this warning. [ 347.013583][ T6906] ======================================================= [ 347.048456][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.098709][ T6906] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 349.773869][ T5154] usb 4-1: USB disconnect, device number 8 [ 349.942774][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 350.530252][ T5767] Bluetooth: hci5: Frame reassembly failed (-84) [ 351.967728][ T4303] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 352.075898][ T6973] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 352.143661][ T4303] usb 2-1: device descriptor read/64, error -71 [ 352.647462][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 352.655202][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 352.743729][ T4303] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 352.923678][ T4303] usb 2-1: device descriptor read/64, error -71 [ 353.043738][ T4303] usb usb2-port1: attempt power cycle [ 353.454599][ T4303] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.534094][ T4303] usb 2-1: device descriptor read/8, error -71 [ 353.684889][ T6989] device wireguard0 entered promiscuous mode [ 353.813581][ T4303] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 353.885756][ T4303] usb 2-1: device descriptor read/8, error -71 [ 354.004143][ T4303] usb usb2-port1: unable to enumerate USB device [ 355.963647][ T4264] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 356.163581][ T4264] usb 5-1: Using ep0 maxpacket: 8 [ 356.170779][ T4264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.253022][ T4264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 356.274340][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 356.314840][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 356.357964][ T4264] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 356.393676][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.433328][ T4264] hub 5-1:1.0: bad descriptor, ignoring hub [ 356.450707][ T4264] hub: probe of 5-1:1.0 failed with error -5 [ 356.469015][ T4264] cdc_wdm 5-1:1.0: skipping garbage [ 356.488480][ T4264] cdc_wdm 5-1:1.0: skipping garbage [ 356.531517][ T4264] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 356.550036][ T4264] cdc_wdm 5-1:1.0: Unknown control protocol [ 356.628501][ T7028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.641572][ T7028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.650067][ T7039] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 357.045139][ T52] block nbd4: Attempted send on invalid socket [ 357.051345][ T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 357.061923][ T7042] XFS (nbd4): SB validate failed with error -5. [ 357.098248][ T5791] Bluetooth: hci5: Frame reassembly failed (-84) [ 357.843611][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 358.013775][ T14] usb 4-1: device descriptor read/64, error -71 [ 358.333580][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 358.514516][ T14] usb 4-1: device descriptor read/64, error -71 [ 358.634456][ T14] usb usb4-port1: attempt power cycle [ 359.053963][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.114978][ T14] usb 4-1: device descriptor read/8, error -71 [ 359.153721][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 359.160268][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 359.383726][ T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 359.434386][ T5154] usb 5-1: USB disconnect, device number 31 [ 359.454784][ T14] usb 4-1: device descriptor read/8, error -71 [ 359.585368][ T14] usb usb4-port1: unable to enumerate USB device [ 360.094000][ T7066] lo speed is unknown, defaulting to 1000 [ 360.811105][ T7081] netlink: 304 bytes leftover after parsing attributes in process `syz.3.605'. [ 360.880177][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 361.583770][ T7086] trusted_key: encrypted_key: insufficient parameters specified [ 366.313760][ T4303] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 366.483868][ T4303] usb 2-1: device descriptor read/64, error -71 [ 366.763701][ T4303] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 366.770257][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.617'. [ 366.943586][ T4303] usb 2-1: device descriptor read/64, error -71 [ 367.069047][ T4303] usb usb2-port1: attempt power cycle [ 367.563767][ T7138] trusted_key: encrypted_key: insufficient parameters specified [ 368.393599][ T4303] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 368.480851][ T4303] usb 2-1: device descriptor read/8, error -71 [ 368.846725][ T4303] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 368.924283][ T4303] usb 2-1: device descriptor read/8, error -71 [ 369.027328][ T7155] binder: 7154:7155 ioctl c0306201 200000000080 returned -14 [ 369.053755][ T4303] usb usb2-port1: unable to enumerate USB device [ 370.108046][ T7171] netlink: 'syz.3.628': attribute type 3 has an invalid length. [ 370.117225][ T7171] netlink: 666 bytes leftover after parsing attributes in process `syz.3.628'. [ 370.923783][ T7181] trusted_key: encrypted_key: insufficient parameters specified [ 372.898507][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 373.346578][ T7202] binder: 7201:7202 ioctl c0306201 200000000080 returned -14 [ 373.361781][ T7192] netlink: 'syz.1.631': attribute type 5 has an invalid length. [ 373.483779][ T7186] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 373.673614][ T7186] usb 3-1: device descriptor read/64, error -71 [ 373.863473][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.631'. [ 373.943679][ T7186] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 374.033434][ T4455] Bluetooth: hci5: Frame reassembly failed (-84) [ 374.503602][ T7186] usb 3-1: device descriptor read/64, error -71 [ 374.633935][ T7186] usb usb3-port1: attempt power cycle [ 375.053731][ T7186] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 375.106755][ T7186] usb 3-1: device descriptor read/8, error -71 [ 375.414479][ T7186] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 375.467371][ T7186] usb 3-1: device descriptor read/8, error -71 [ 375.594388][ T7186] usb usb3-port1: unable to enumerate USB device [ 376.103641][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 376.103894][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 376.951016][ T7235] binder: 7234:7235 ioctl c0306201 200000000080 returned -14 [ 377.129301][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 377.139029][ T7240] netlink: 'syz.4.646': attribute type 5 has an invalid length. [ 377.147823][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.646'. [ 377.436786][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 377.446218][ T7249] netlink: 'syz.2.649': attribute type 5 has an invalid length. [ 377.455490][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.649'. [ 378.505847][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.512408][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.763580][ T7186] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 378.933750][ T7186] usb 1-1: device descriptor read/64, error -71 [ 379.229053][ T7265] 9pnet_virtio: no channels available for device syz [ 379.243723][ T7186] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 379.433720][ T7186] usb 1-1: device descriptor read/64, error -71 [ 379.576233][ T7186] usb usb1-port1: attempt power cycle [ 380.016086][ T7186] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.055205][ T7186] usb 1-1: device descriptor read/8, error -71 [ 380.333636][ T7186] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 380.374168][ T7186] usb 1-1: device descriptor read/8, error -71 [ 380.380528][ T7277] binder: 7276:7277 ioctl c0306201 200000000080 returned -14 [ 380.419316][ T7277] binder: 7276:7277 ioctl 4018620d 0 returned -22 [ 380.494090][ T7186] usb usb1-port1: unable to enumerate USB device [ 380.665980][ T7283] syz.3.660 uses obsolete (PF_INET,SOCK_PACKET) [ 383.413817][ T7312] bond1: option mode: unable to set because the bond device has slaves [ 383.972596][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 384.013796][ T7324] netlink: 'syz.2.665': attribute type 5 has an invalid length. [ 384.021537][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'. [ 386.192206][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 386.353599][ T14] usb 4-1: device descriptor read/64, error -71 [ 386.520378][ T7356] block device autoloading is deprecated and will be removed. [ 386.633676][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 386.833596][ T14] usb 4-1: device descriptor read/64, error -71 [ 386.883170][ T7356] lo speed is unknown, defaulting to 1000 [ 386.953963][ T14] usb usb4-port1: attempt power cycle [ 388.326480][ T14] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 388.386240][ T14] usb 4-1: device descriptor read/8, error -71 [ 388.742894][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 388.784224][ T14] usb 4-1: device descriptor read/8, error -71 [ 388.903848][ T14] usb usb4-port1: unable to enumerate USB device [ 389.703775][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 389.900430][ T7405] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 390.674093][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 390.683204][ T7404] netlink: 'syz.0.688': attribute type 5 has an invalid length. [ 390.876889][ T7404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 392.883909][ T4303] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 393.058357][ T4303] usb 5-1: device descriptor read/64, error -71 [ 393.161706][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'. [ 393.343678][ T4303] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 393.523603][ T4303] usb 5-1: device descriptor read/64, error -71 [ 393.643763][ T4303] usb usb5-port1: attempt power cycle [ 394.081845][ T7452] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 394.089621][ T4303] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 394.914496][ T4303] usb 5-1: device descriptor read/8, error -71 [ 395.085586][ T5791] Bluetooth: hci5: Frame reassembly failed (-84) [ 395.193819][ T4303] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 395.557669][ T4303] usb 5-1: device descriptor read/8, error -71 [ 395.683743][ T4303] usb usb5-port1: unable to enumerate USB device [ 396.237756][ T7472] Bluetooth: MGMT ver 1.22 [ 397.147683][ T4257] Bluetooth: hci5: command 0x1003 tx timeout [ 397.155534][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 397.772347][ T7502] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 397.993622][ T7186] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 398.593575][ T7186] usb 1-1: Using ep0 maxpacket: 32 [ 398.601733][ T7186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.718476][ T7186] usb 1-1: config 0 has no interfaces? [ 398.740036][ T7186] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 398.775817][ T7186] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 398.801301][ T7186] usb 1-1: Product: syz [ 398.818089][ T7186] usb 1-1: Manufacturer: syz [ 398.822705][ T7186] usb 1-1: SerialNumber: syz [ 398.888876][ T7186] usb 1-1: config 0 descriptor?? [ 398.898174][ T7514] device bridge9 entered promiscuous mode [ 398.961070][ T7515] 9pnet_fd: Insufficient options for proto=fd [ 399.143904][ T14] usb 1-1: USB disconnect, device number 12 [ 400.056675][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 400.377435][ T7547] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 402.353204][ T7559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 403.000599][ T7561] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 403.490875][ T7571] bond1: option mode: unable to set because the bond device has slaves [ 404.245609][ T7581] device bridge3 entered promiscuous mode [ 404.414540][ T7581] 9pnet_fd: Insufficient options for proto=fd [ 404.432397][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 406.263738][ T4264] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 406.503928][ T4264] usb 3-1: Using ep0 maxpacket: 32 [ 406.519731][ T4264] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.651329][ T7598] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 406.910852][ T4264] usb 3-1: config 0 has no interfaces? [ 406.951026][ T4264] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 407.008429][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 407.035996][ T4264] usb 3-1: Product: syz [ 407.063641][ T4264] usb 3-1: Manufacturer: syz [ 407.068676][ T4264] usb 3-1: SerialNumber: syz [ 407.081383][ T4264] usb 3-1: config 0 descriptor?? [ 407.336545][ T5154] usb 3-1: USB disconnect, device number 19 [ 407.752663][ T7613] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 409.780043][ T7632] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 410.922551][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 410.934032][ T7633] netlink: 'syz.3.747': attribute type 5 has an invalid length. [ 410.953370][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.747'. [ 413.114719][ T7658] device bridge4 entered promiscuous mode [ 413.193421][ T7659] 9pnet_fd: Insufficient options for proto=fd [ 414.091288][ T4514] Bluetooth: hci5: Frame reassembly failed (-84) [ 414.177341][ T4514] Bluetooth: hci5: Frame reassembly failed (-84) [ 414.659281][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 414.683570][ T7673] rdma_rxe: rxe creation allowed on top of a real device only [ 414.729356][ T7673] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 415.253626][ T7186] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 415.453586][ T7186] usb 3-1: Using ep0 maxpacket: 32 [ 415.460780][ T7186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.507656][ T7186] usb 3-1: config 0 has no interfaces? [ 415.530395][ T7186] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.569688][ T7186] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.606592][ T7186] usb 3-1: Product: syz [ 415.622940][ T7186] usb 3-1: Manufacturer: syz [ 415.641222][ T7186] usb 3-1: SerialNumber: syz [ 415.658538][ T7186] usb 3-1: config 0 descriptor?? [ 415.798976][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.851206][ T7694] O3ãc¤±: renamed from bridge_slave_0 [ 415.883314][ T7186] usb 3-1: USB disconnect, device number 20 [ 416.164433][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 416.168212][ T4267] Bluetooth: hci5: command 0x1003 tx timeout [ 416.579958][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 416.591548][ T7702] netlink: 'syz.0.765': attribute type 5 has an invalid length. [ 416.617316][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 418.165153][ T26] audit: type=1326 audit(1750840048.251:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.299570][ T26] audit: type=1326 audit(1750840048.251:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.541419][ T26] audit: type=1326 audit(1750840048.271:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.566915][ T26] audit: type=1326 audit(1750840048.271:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02dfb8e963 code=0x7ffc0000 [ 418.595939][ T26] audit: type=1326 audit(1750840048.271:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f02dfb8e963 code=0x7ffc0000 [ 418.618776][ T26] audit: type=1326 audit(1750840048.271:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.640851][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.647647][ T26] audit: type=1326 audit(1750840048.271:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.775024][ T26] audit: type=1326 audit(1750840048.271:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.798290][ T26] audit: type=1326 audit(1750840048.271:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.821382][ T26] audit: type=1326 audit(1750840048.271:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02dfb8e929 code=0x7ffc0000 [ 418.843442][ C1] vkms_vblank_simulate: vblank timer overrun [ 419.650328][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 419.660633][ T7738] netlink: 'syz.2.773': attribute type 5 has an invalid length. [ 419.672942][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.773'. [ 420.217306][ T7739] lo speed is unknown, defaulting to 1000 [ 423.059044][ T7762] binder: 7761:7762 ioctl c0306201 200000000080 returned -14 [ 423.373568][ T4264] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 423.568694][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.619721][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.670637][ T7772] ubi31: attaching mtd0 [ 423.684840][ T7771] lo speed is unknown, defaulting to 1000 [ 423.693372][ T4264] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.713976][ T7772] ubi31: scanning is finished [ 423.736017][ T7772] ubi31: empty MTD device detected [ 423.782542][ T4264] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.861715][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.958854][ T4264] usb 4-1: config 0 descriptor?? [ 424.160709][ T7772] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 424.190110][ T7772] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 424.332524][ T7772] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 424.342636][ T7772] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 424.350645][ T7772] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 424.362872][ T7772] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 424.372258][ T7772] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4137259461 [ 424.382782][ T7772] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 424.457119][ T7774] ubi31: background thread "ubi_bgt31d" started, PID 7774 [ 424.621831][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 424.661367][ T7777] netlink: 'syz.4.782': attribute type 5 has an invalid length. [ 424.737239][ T7777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.782'. [ 425.734429][ T4264] usbhid 4-1:0.0: can't add hid device: -71 [ 425.741498][ T4264] usbhid: probe of 4-1:0.0 failed with error -71 [ 425.812259][ T4264] usb 4-1: USB disconnect, device number 17 [ 425.963676][ T7786] netlink: 'syz.2.785': attribute type 3 has an invalid length. [ 425.971566][ T7786] netlink: 666 bytes leftover after parsing attributes in process `syz.2.785'. [ 426.392483][ T7794] netlink: 'syz.2.788': attribute type 11 has an invalid length. [ 426.392554][ T7794] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'. [ 427.321005][ T7797] tty tty1: ldisc open failed (-12), clearing slot 0 [ 427.784427][ T7808] binder: 7807:7808 ioctl c0306201 200000000080 returned -14 [ 427.954511][ T7805] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 428.731223][ T7811] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 430.060204][ T7824] netlink: 3 bytes leftover after parsing attributes in process `syz.4.794'. [ 431.988137][ T7838] netlink: 'syz.3.799': attribute type 3 has an invalid length. [ 431.996455][ T7838] netlink: 666 bytes leftover after parsing attributes in process `syz.3.799'. [ 432.233551][ T4242] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 432.363658][ T7186] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 432.535518][ T4242] usb 2-1: device descriptor read/64, error -71 [ 432.633620][ T7186] usb 4-1: Using ep0 maxpacket: 32 [ 432.645326][ T7186] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.736450][ T7186] usb 4-1: config 0 has no interfaces? [ 432.906547][ T4242] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 432.982165][ T7186] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 433.114172][ T7186] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 433.163672][ T4242] usb 2-1: device descriptor read/64, error -71 [ 433.293026][ T7186] usb 4-1: Product: syz [ 433.299041][ T4242] usb usb2-port1: attempt power cycle [ 433.313714][ T7186] usb 4-1: Manufacturer: syz [ 433.318335][ T7186] usb 4-1: SerialNumber: syz [ 433.351664][ T7186] usb 4-1: config 0 descriptor?? [ 433.488295][ T7847] netlink: 'syz.2.802': attribute type 11 has an invalid length. [ 433.496369][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 433.604363][ T7186] usb 4-1: USB disconnect, device number 18 [ 433.620672][ T7852] binder: 7850:7852 ioctl c0306201 200000000080 returned -14 [ 433.827434][ T4242] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 434.104288][ T4242] usb 2-1: device descriptor read/8, error -71 [ 434.237567][ T7865] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 434.853573][ T4242] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 434.905012][ T4242] usb 2-1: device descriptor read/8, error -71 [ 435.024124][ T4242] usb usb2-port1: unable to enumerate USB device [ 438.163389][ T7893] netlink: 'syz.0.815': attribute type 11 has an invalid length. [ 438.176215][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'. [ 438.648195][ T7906] 9pnet_virtio: no channels available for device syz [ 438.902844][ T7908] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 439.359358][ T7907] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 439.945195][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.953588][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.093255][ T7914] lo speed is unknown, defaulting to 1000 [ 440.210773][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 442.503667][ T4264] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 442.713636][ T4264] usb 2-1: Using ep0 maxpacket: 32 [ 442.722343][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.751130][ T4264] usb 2-1: config 0 has no interfaces? [ 442.761602][ T4264] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 442.770978][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 442.779727][ T4264] usb 2-1: Product: syz [ 442.784143][ T4264] usb 2-1: Manufacturer: syz [ 442.788802][ T4264] usb 2-1: SerialNumber: syz [ 442.817252][ T4264] usb 2-1: config 0 descriptor?? [ 443.038331][ T7] usb 2-1: USB disconnect, device number 24 [ 445.920913][ T7963] device bridge4 entered promiscuous mode [ 446.064014][ T4264] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 446.094017][ T7963] 9pnet_fd: Insufficient options for proto=fd [ 446.263807][ T4264] usb 3-1: device descriptor read/64, error -71 [ 446.690735][ T4264] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 446.773538][ T7971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.835'. [ 446.873552][ T4264] usb 3-1: device descriptor read/64, error -71 [ 447.008764][ T4264] usb usb3-port1: attempt power cycle [ 447.067611][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 447.131993][ T7975] netlink: 'syz.1.834': attribute type 5 has an invalid length. [ 447.193363][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'. [ 447.453545][ T4264] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 447.514336][ T4264] usb 3-1: device descriptor read/8, error -71 [ 447.823665][ T4264] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 447.864399][ T4264] usb 3-1: device descriptor read/8, error -71 [ 447.983759][ T4264] usb usb3-port1: unable to enumerate USB device [ 448.026086][ T7986] netlink: 'syz.4.838': attribute type 3 has an invalid length. [ 448.043950][ T7986] netlink: 666 bytes leftover after parsing attributes in process `syz.4.838'. [ 448.490895][ T7993] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 449.875196][ T7] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 450.309115][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 450.329670][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.346933][ T7] usb 5-1: config 0 has no interfaces? [ 450.374972][ T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 450.384101][ T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 450.392320][ T7] usb 5-1: Product: syz [ 450.399455][ T7] usb 5-1: Manufacturer: syz [ 450.404350][ T7] usb 5-1: SerialNumber: syz [ 450.410654][ T7] usb 5-1: config 0 descriptor?? [ 450.701302][ T41] usb 5-1: USB disconnect, device number 36 [ 452.545177][ T7999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.565602][ T7999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 452.840016][ T7999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.899823][ T8024] 9pnet_fd: Insufficient options for proto=fd [ 453.012073][ T7999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.510898][ T8032] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 454.880520][ T7999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.906135][ T7999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 455.086766][ T7999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.154136][ T7999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 455.345410][ T7999] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 455.387727][ T7999] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.453565][ T41] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 456.885111][ T7999] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 456.913786][ T7999] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 456.956426][ T7999] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 456.986264][ T7999] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.023525][ T41] usb 2-1: device descriptor read/64, error -71 [ 457.067270][ T7999] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 457.188369][ T7999] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.293831][ T41] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 457.484216][ T41] usb 2-1: device descriptor read/64, error -71 [ 457.618106][ T41] usb usb2-port1: attempt power cycle [ 458.043599][ T41] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 458.084915][ T41] usb 2-1: device descriptor read/8, error -71 [ 458.123288][ T8061] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 458.394389][ T41] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 458.616320][ T41] usb 2-1: device descriptor read/8, error -71 [ 458.760578][ T41] usb usb2-port1: unable to enumerate USB device [ 458.903696][ T4242] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 460.198105][ T4242] usb 1-1: Using ep0 maxpacket: 32 [ 460.230435][ T4242] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.269484][ T4242] usb 1-1: config 0 has no interfaces? [ 460.293654][ T4242] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 460.311780][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 460.414032][ T4242] usb 1-1: Product: syz [ 460.427788][ T4242] usb 1-1: Manufacturer: syz [ 460.432600][ T4242] usb 1-1: SerialNumber: syz [ 460.459412][ T4242] usb 1-1: config 0 descriptor?? [ 460.694104][ T4242] usb 1-1: USB disconnect, device number 13 [ 464.599432][ T8097] ALSA: seq fatal error: cannot create timer (-16) [ 464.721645][ T8098] netlink: 798 bytes leftover after parsing attributes in process `syz.3.869'. [ 464.771318][ T8099] 9pnet_fd: Insufficient options for proto=fd [ 465.830000][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'. [ 466.573619][ T4299] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 466.773564][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 466.780408][ T4299] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.803174][ T4299] usb 3-1: config 0 has no interface number 0 [ 466.818391][ T4299] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 466.836953][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.849905][ T4299] usb 3-1: Product: syz [ 466.854137][ T4299] usb 3-1: Manufacturer: syz [ 466.858874][ T4299] usb 3-1: SerialNumber: syz [ 466.899198][ T4299] usb 3-1: config 0 descriptor?? [ 466.931272][ T4299] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 466.963568][ T4242] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 467.007344][ T4299] usb 3-1: selecting invalid altsetting 1 [ 467.064873][ T4299] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 467.127709][ T4242] usb 1-1: device descriptor read/64, error -71 [ 467.173951][ T4299] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 467.493559][ T4242] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 468.676456][ T4299] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 468.685621][ T4299] usb 3-1: media controller created [ 468.704535][ T4299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.759885][ T4299] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 468.767909][ T4299] zl10353_read_register: readreg error (reg=127, ret==-71) [ 468.776977][ T4299] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 468.805331][ T4299] usb 3-1: USB disconnect, device number 25 [ 468.823665][ T4242] usb 1-1: device descriptor read/64, error -71 [ 468.958628][ T4242] usb usb1-port1: attempt power cycle [ 469.165986][ T8153] 9pnet_virtio: no channels available for device syz [ 469.383644][ T4242] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 470.571127][ T8157] siw: device registration error -23 [ 470.651715][ T4242] usb 1-1: device descriptor read/8, error -71 [ 472.926451][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 473.354246][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 475.101821][ T8201] 9pnet_fd: Insufficient options for proto=fd [ 476.644499][ T41] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 476.827750][ T8215] netlink: 148 bytes leftover after parsing attributes in process `syz.2.894'. [ 476.844941][ T41] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.915176][ T41] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.953258][ T41] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.979475][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.049015][ T8213] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.283146][ T5154] usb 4-1: USB disconnect, device number 19 [ 478.204481][ T8231] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 478.211295][ T8231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 478.221851][ T8231] vhci_hcd vhci_hcd.0: Device attached [ 478.521780][ T14] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 478.536107][ T8236] vhci_hcd: connection reset by peer [ 478.553540][ T5154] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 478.576206][ T5769] vhci_hcd: stop threads [ 478.580886][ T5769] vhci_hcd: release socket [ 478.616357][ T5769] vhci_hcd: disconnect device [ 478.743682][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 478.751680][ T5154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.778243][ T5154] usb 2-1: config 0 has no interfaces? [ 478.802788][ T5154] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 478.836534][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 478.863609][ T5154] usb 2-1: Product: syz [ 478.878304][ T5154] usb 2-1: Manufacturer: syz [ 478.891665][ T5154] usb 2-1: SerialNumber: syz [ 478.918049][ T5154] usb 2-1: config 0 descriptor?? [ 479.154355][ T4242] usb 2-1: USB disconnect, device number 29 [ 480.665193][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 480.682626][ T8245] lo speed is unknown, defaulting to 1000 [ 482.979911][ T8262] lo speed is unknown, defaulting to 1000 [ 483.459423][ T8272] tmpfs: Unknown parameter 'usrquota' [ 483.639320][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.909'. [ 483.707290][ T14] vhci_hcd: vhci_device speed not set [ 484.661059][ T8285] 9pnet_fd: Insufficient options for proto=fd [ 486.230474][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 486.247001][ T8307] netlink: 'syz.1.918': attribute type 5 has an invalid length. [ 486.265149][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'. [ 486.359041][ T8307] device geneve3 entered promiscuous mode [ 486.613563][ T7186] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 486.883572][ T7186] usb 1-1: Using ep0 maxpacket: 8 [ 486.890102][ T7186] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.981324][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 486.990538][ T8315] netlink: 'syz.2.921': attribute type 5 has an invalid length. [ 487.009817][ T8315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.921'. [ 487.042100][ T7186] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.052417][ T8299] lo speed is unknown, defaulting to 1000 [ 487.172996][ T7186] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 487.349605][ T7186] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 487.654932][ T7186] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 487.685007][ T7186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.767522][ T7186] hub 1-1:1.0: bad descriptor, ignoring hub [ 487.797671][ T7186] hub: probe of 1-1:1.0 failed with error -5 [ 487.816733][ T7186] cdc_wdm 1-1:1.0: skipping garbage [ 487.816746][ T7186] cdc_wdm 1-1:1.0: skipping garbage [ 487.826680][ T7186] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 487.826695][ T7186] cdc_wdm 1-1:1.0: Unknown control protocol [ 487.940210][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.940327][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.946537][ T8322] netlink: 32 bytes leftover after parsing attributes in process `syz.4.922'. [ 489.087939][ T52] block nbd0: Attempted send on invalid socket [ 489.094175][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 489.105712][ T8309] XFS (nbd0): SB validate failed with error -5. [ 490.563852][ T4303] usb 1-1: USB disconnect, device number 18 [ 490.593043][ T8355] ubi: mtd0 is already attached to ubi31 [ 490.762057][ T8353] lo speed is unknown, defaulting to 1000 [ 492.003392][ T8363] 9pnet_fd: Insufficient options for proto=fd [ 492.736848][ T8370] lo speed is unknown, defaulting to 1000 [ 496.605833][ T14] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 496.835309][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 496.862699][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.951108][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 496.983024][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 497.207056][ T14] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 497.218706][ T14] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 497.227909][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.271054][ T5094] Bluetooth: hci5: Frame reassembly failed (-84) [ 497.293022][ T5094] Bluetooth: hci5: Frame reassembly failed (-84) [ 497.658674][ T8394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.683779][ T14] hub 1-1:1.0: bad descriptor, ignoring hub [ 497.716265][ T8394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.733840][ T14] hub: probe of 1-1:1.0 failed with error -5 [ 498.009999][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 498.112959][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 498.884057][ T14] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 498.890236][ T14] cdc_wdm 1-1:1.0: Unknown control protocol [ 498.901445][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 498.983787][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 498.998305][ T52] block nbd0: Attempted send on invalid socket [ 499.004530][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 499.021968][ T8394] XFS (nbd0): SB validate failed with error -5. [ 499.364364][ T8428] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 499.364364][ T8428] program syz.4.949 not setting count and/or reply_len properly [ 501.386259][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.392600][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.453828][ T4300] usb 1-1: USB disconnect, device number 19 [ 501.480922][ T8444] binder: 8443:8444 ioctl c0306201 200000000080 returned -14 [ 501.530376][ T8445] 9pnet_fd: Insufficient options for proto=fd [ 503.165420][ T8458] ubi: mtd0 is already attached to ubi31 [ 503.823715][ T8462] trusted_key: encrypted_key: key user:syz not found [ 507.533877][ T8453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.549521][ T8453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.557068][ T8453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.637926][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.961'. [ 510.675339][ T8520] zonefs (nullb0) ERROR: Not a zoned block device [ 514.423159][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 515.622507][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 517.963632][ T4264] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 518.183525][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 518.190280][ T4264] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 518.216635][ T4264] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 518.275284][ T4264] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.334047][ T4264] usb 5-1: config 1 interface 0 has no altsetting 0 [ 518.363886][ T4264] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 518.398080][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.425723][ T4264] usb 5-1: Product: syz [ 518.451023][ T4264] usb 5-1: Manufacturer: syz [ 518.471633][ T4264] usb 5-1: SerialNumber: syz [ 518.791622][ T4264] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 519.934717][ T4242] usb 5-1: USB disconnect, device number 37 [ 519.949252][ T4242] usblp0: removed [ 520.289153][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 522.110330][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.999'. [ 523.565058][ T8638] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 525.882485][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 528.262338][ T8680] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 530.013535][ T8694] ucma_write: process 747 (syz.2.1015) changed security contexts after opening file descriptor, this is not allowed. [ 530.552007][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 530.580028][ T8696] netlink: 'syz.1.1014': attribute type 5 has an invalid length. [ 530.704546][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1014'. [ 531.166387][ T8702] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 532.609395][ T8710] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 534.166662][ T8727] tmpfs: Unknown parameter 'usrquota' [ 534.293489][ T8665] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 534.513502][ T8665] usb 3-1: Using ep0 maxpacket: 32 [ 534.520227][ T8665] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.722093][ T8665] usb 3-1: config 0 has no interfaces? [ 534.732940][ T8665] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 534.757163][ T8665] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 534.797579][ T8665] usb 3-1: Product: syz [ 534.808429][ T8665] usb 3-1: Manufacturer: syz [ 534.818564][ T8665] usb 3-1: SerialNumber: syz [ 534.832066][ T8665] usb 3-1: config 0 descriptor?? [ 536.391955][ T4242] usb 3-1: USB disconnect, device number 26 [ 536.485809][ T8741] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 537.307066][ T8752] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 542.435133][ T8785] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 542.782172][ T8796] ubi: mtd0 is already attached to ubi31 [ 542.809817][ T8793] lo speed is unknown, defaulting to 1000 [ 543.613609][ T4242] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 543.635287][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 544.543621][ T4242] usb 4-1: Using ep0 maxpacket: 32 [ 544.570269][ T4242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.589023][ T4242] usb 4-1: config 0 has no interfaces? [ 544.603216][ T4242] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 544.629585][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 544.691401][ T4242] usb 4-1: Product: syz [ 544.716257][ T4242] usb 4-1: Manufacturer: syz [ 544.720904][ T4242] usb 4-1: SerialNumber: syz [ 544.770001][ T4242] usb 4-1: config 0 descriptor?? [ 545.012880][ T4242] usb 4-1: USB disconnect, device number 20 [ 547.997344][ T8836] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 549.133043][ T8849] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 549.778474][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 552.187511][ T8876] ubi: mtd0 is already attached to ubi31 [ 552.249064][ T8874] lo speed is unknown, defaulting to 1000 [ 554.357961][ T8891] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 554.883671][ T8890] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 556.993236][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 559.215222][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 559.215237][ T26] audit: type=1326 audit(1750840189.301:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 559.425961][ T8925] 9pnet_fd: Insufficient options for proto=fd [ 559.596918][ T26] audit: type=1326 audit(1750840189.301:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 559.642072][ T26] audit: type=1326 audit(1750840189.411:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 559.799122][ T26] audit: type=1326 audit(1750840189.471:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 559.991924][ T26] audit: type=1326 audit(1750840189.711:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.3.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 560.213103][ T8927] lo speed is unknown, defaulting to 1000 [ 560.462774][ T8935] ubi: mtd0 is already attached to ubi31 [ 560.539264][ T8934] lo speed is unknown, defaulting to 1000 [ 562.827313][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.833678][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.224382][ T8948] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 563.567735][ T8953] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 567.085856][ T5769] Bluetooth: hci5: Frame reassembly failed (-84) [ 567.113750][ T5769] Bluetooth: hci5: Frame reassembly failed (-84) [ 567.116320][ T8984] device bridge5 entered promiscuous mode [ 567.169883][ T8984] 9pnet_fd: Insufficient options for proto=fd [ 567.361747][ T8985] lo speed is unknown, defaulting to 1000 [ 569.260650][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 570.417922][ T9002] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 570.627858][ T9007] lo speed is unknown, defaulting to 1000 [ 571.750403][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 574.900034][ T9029] lo speed is unknown, defaulting to 1000 [ 576.593913][ T9049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 577.572694][ T9059] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 579.147902][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 579.157781][ T9072] netlink: 'syz.4.1109': attribute type 5 has an invalid length. [ 579.166139][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 579.923577][ T4299] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 580.148575][ T9085] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 580.203495][ T4299] usb 3-1: Using ep0 maxpacket: 8 [ 580.209970][ T4299] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.269379][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.297918][ T4299] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 580.312198][ T4299] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.352975][ T4299] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 580.388204][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.640973][ T4299] usb 3-1: GET_CAPABILITIES returned 0 [ 580.647162][ T4299] usbtmc 3-1:16.0: can't read capabilities [ 580.844945][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.854406][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.865781][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.874880][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.883965][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.893034][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.902098][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.911174][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.920240][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.929307][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.938372][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.947434][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.956498][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.965558][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.974619][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 580.983679][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 581.024504][ T4299] usb 3-1: USB disconnect, device number 27 [ 581.267512][ T9096] lo speed is unknown, defaulting to 1000 [ 581.517982][ T9104] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 582.631623][ T9105] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 582.704000][ T9111] 9pnet_virtio: no channels available for device syz [ 582.966393][ T9115] device batadv1 entered promiscuous mode [ 585.738838][ T4303] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 585.753604][ T7] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 585.923553][ T4303] usb 1-1: Using ep0 maxpacket: 8 [ 585.930229][ T4303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.944049][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 585.950637][ T4303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 585.954549][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.979770][ T4303] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 585.990085][ T7] usb 2-1: config 0 has no interfaces? [ 586.022438][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 586.029434][ T4303] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 586.047191][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.063367][ T4303] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 586.067282][ T9157] batman_adv: batadv0: Adding interface: dummy0 [ 586.076688][ T7] usb 2-1: Product: syz [ 586.093129][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.097326][ T9157] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.131382][ T7] usb 2-1: Manufacturer: syz [ 586.137382][ T7] usb 2-1: SerialNumber: syz [ 586.149037][ T7] usb 2-1: config 0 descriptor?? [ 586.154228][ T4303] hub 1-1:1.0: bad descriptor, ignoring hub [ 586.163459][ T4303] hub: probe of 1-1:1.0 failed with error -5 [ 586.169880][ T4303] cdc_wdm 1-1:1.0: skipping garbage [ 586.175477][ T9157] batman_adv: batadv0: Interface activated: dummy0 [ 586.199035][ T9158] batadv0: mtu less than device minimum [ 586.226068][ T4303] cdc_wdm 1-1:1.0: skipping garbage [ 586.227587][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.243544][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.255705][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.264302][ T4303] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 586.267822][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.284140][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.292449][ T4303] cdc_wdm 1-1:1.0: Unknown control protocol [ 586.296171][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.312654][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.324830][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.337005][ T9158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 586.347099][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.383192][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.410670][ T7] usb 2-1: USB disconnect, device number 30 [ 586.889799][ T52] block nbd0: Attempted send on invalid socket [ 586.896175][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 586.908862][ T9152] XFS (nbd0): SB validate failed with error -5. [ 587.525878][ T9171] lo speed is unknown, defaulting to 1000 [ 590.300105][ T7] usb 1-1: USB disconnect, device number 20 [ 592.361189][ T7186] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 592.574576][ T7186] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 592.594780][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 592.625384][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 592.650015][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 592.674445][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.619989][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.671450][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 593.702347][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 593.794685][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 593.852247][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 593.976965][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.003487][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.014605][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.022226][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.041622][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.052925][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.060870][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.723915][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.735211][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.743092][ T7186] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 594.823582][ T7186] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 594.846301][ C1] net_ratelimit: 10 callbacks suppressed [ 594.846312][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 594.970290][ T7186] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.143502][ T5154] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 595.224126][ T7186] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 595.231709][ T7186] usb 1-1: can't read configurations, error -71 [ 595.394486][ T5154] usb 2-1: Using ep0 maxpacket: 8 [ 595.423653][ T5154] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.434316][ T5154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 595.443210][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 595.558682][ T5154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 595.616534][ T5154] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 595.626053][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.703523][ T5154] hub 2-1:1.0: bad descriptor, ignoring hub [ 595.709480][ T5154] hub: probe of 2-1:1.0 failed with error -5 [ 595.716424][ T5154] cdc_wdm 2-1:1.0: skipping garbage [ 595.721646][ T5154] cdc_wdm 2-1:1.0: skipping garbage [ 595.748903][ T5154] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 595.755119][ T5154] cdc_wdm 2-1:1.0: Unknown control protocol [ 595.849518][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.983991][ T9262] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 596.605064][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.030128][ T93] block nbd1: Attempted send on invalid socket [ 597.036489][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 597.048517][ T9248] XFS (nbd1): SB validate failed with error -5. [ 597.293898][ T5154] usb 2-1: USB disconnect, device number 31 [ 598.538447][ T9269] fuse: Unknown parameter '0x000000000000000500000000000000000000' [ 599.269787][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 599.506995][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1177'. [ 600.158469][ T9309] lo speed is unknown, defaulting to 1000 [ 600.500441][ T9320] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 606.215135][ T9392] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 606.943848][ T26] audit: type=1326 audit(1750840237.021:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 606.966020][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.921374][ T9415] tmpfs: Unknown parameter 'usrquota' [ 607.961964][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1201'. [ 609.293502][ T41] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 609.381531][ T5154] libceph: connect (1)[c::]:6789 error -101 [ 609.392048][ T5154] libceph: mon0 (1)[c::]:6789 connect error [ 609.405879][ T9436] ceph: No mds server is up or the cluster is laggy [ 609.483670][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 609.503073][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.514340][ T41] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 609.523980][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.553318][ T41] usb 1-1: config 0 descriptor?? [ 610.013962][ T9426] lo speed is unknown, defaulting to 1000 [ 610.066544][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.095092][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.217801][ T41] usbhid 1-1:0.0: can't add hid device: -71 [ 610.233586][ T41] usbhid: probe of 1-1:0.0 failed with error -71 [ 610.337309][ T41] usb 1-1: USB disconnect, device number 23 [ 611.006681][ T9454] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 611.202173][ T9462] lo speed is unknown, defaulting to 1000 [ 611.675049][ T9469] trusted_key: encrypted_key: key user:syz not found [ 612.642072][ T9477] siw: device registration error -23 [ 613.920964][ T26] audit: type=1326 audit(1750840244.001:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 614.712820][ T26] audit: type=1326 audit(1750840244.781:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 614.742719][ T26] audit: type=1326 audit(1750840244.821:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 614.769364][ T26] audit: type=1326 audit(1750840244.851:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 614.804270][ T26] audit: type=1326 audit(1750840244.881:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 614.827397][ T26] audit: type=1326 audit(1750840244.891:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 614.882269][ T26] audit: type=1326 audit(1750840244.911:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 615.067175][ T26] audit: type=1326 audit(1750840244.931:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 615.226467][ T26] audit: type=1326 audit(1750840244.961:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 615.292809][ T26] audit: type=1326 audit(1750840245.041:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.0.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e6158e929 code=0x7ffc0000 [ 617.175576][ T9511] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 617.459736][ T5765] Bluetooth: hci5: Frame reassembly failed (-84) [ 617.490144][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 619.463472][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 619.463514][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 620.013169][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.020371][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.086949][ T9539] device bond_slave_0 left promiscuous mode [ 620.093122][ T9539] device bond_slave_1 left promiscuous mode [ 620.158619][ T9539] batman_adv: batadv0: Interface deactivated: dummy0 [ 621.075626][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.132050][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.306106][ T9539] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.315094][ T9539] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.324369][ T9539] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.333247][ T9539] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.470308][ T9539] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 622.479202][ T9539] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 622.488048][ T9539] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 622.497060][ T9539] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 622.509126][ T9539] device geneve2 left promiscuous mode [ 622.626863][ T9539] device bridge1 left promiscuous mode [ 622.645437][ T9539] device bridge2 left promiscuous mode [ 622.898153][ T9539] device bridge3 left promiscuous mode [ 622.967365][ T41] lo speed is unknown, defaulting to 1000 [ 622.982503][ T9532] lo speed is unknown, defaulting to 1000 [ 623.418813][ T9563] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 624.266435][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.272910][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.053725][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 626.503580][ T8606] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 627.038132][ T8606] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.085323][ T8606] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 627.159515][ T8606] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.162006][ T9604] overlayfs: missing 'lowerdir' [ 627.201246][ T8606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.329191][ T9596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.384282][ T4264] usb 4-1: USB disconnect, device number 21 [ 630.592909][ T9618] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 632.741767][ T4299] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 632.888605][ T9632] 9pnet_virtio: no channels available for device syz [ 633.033948][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 633.047978][ T4299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.203499][ T4299] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 633.274791][ T4299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 633.355021][ T4299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 633.386829][ T4299] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 633.403512][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.475407][ T4299] hub 1-1:1.0: bad descriptor, ignoring hub [ 633.481346][ T4299] hub: probe of 1-1:1.0 failed with error -5 [ 633.546882][ T4299] cdc_wdm 1-1:1.0: skipping garbage [ 633.552136][ T4299] cdc_wdm 1-1:1.0: skipping garbage [ 633.560532][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 633.688084][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.713536][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.714675][ T4299] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 633.741492][ T4299] cdc_wdm 1-1:1.0: Unknown control protocol [ 635.143729][ T4299] usb 1-1: USB disconnect, device number 24 [ 635.380773][ T9662] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 637.856972][ T9695] 9pnet_virtio: no channels available for device syz [ 638.520501][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 638.695055][ T4514] Bluetooth: hci5: Frame reassembly failed (-84) [ 638.713596][ T7186] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 638.820762][ T9705] UBIFS error (pid: 9705): cannot open "./file0", error -22 [ 638.903825][ T7186] usb 4-1: Using ep0 maxpacket: 8 [ 638.966669][ T7186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.025919][ T7186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 639.091653][ T7186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 639.140532][ T7186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 639.197050][ T7186] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 639.286894][ T7186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.360538][ T7186] hub 4-1:1.0: bad descriptor, ignoring hub [ 639.386956][ T7186] hub: probe of 4-1:1.0 failed with error -5 [ 639.424939][ T7186] cdc_wdm 4-1:1.0: skipping garbage [ 639.455111][ T7186] cdc_wdm 4-1:1.0: skipping garbage [ 639.502550][ T7186] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 639.545469][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.569920][ T7186] cdc_wdm 4-1:1.0: Unknown control protocol [ 639.576408][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.093003][ T52] block nbd3: Attempted send on invalid socket [ 640.099253][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 640.111025][ T9700] XFS (nbd3): SB validate failed with error -5. [ 640.283774][ T41] usb 4-1: USB disconnect, device number 22 [ 640.743605][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 641.128000][ T9725] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 641.601017][ T9736] 9pnet_virtio: no channels available for device syz [ 643.204884][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 643.553848][ T9754] device bridge4 entered promiscuous mode [ 645.379039][ T9772] tmpfs: Unknown parameter 'usrquota' [ 645.403210][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1301'. [ 645.483475][ T8606] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 645.683870][ T8606] usb 1-1: Using ep0 maxpacket: 8 [ 645.690739][ T8606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.788712][ T8606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 645.905438][ T8606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 645.917080][ T8606] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 645.929211][ T8606] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 645.939525][ T8606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.984977][ T8606] hub 1-1:1.0: bad descriptor, ignoring hub [ 646.060754][ T8606] hub: probe of 1-1:1.0 failed with error -5 [ 646.088736][ T8606] cdc_wdm 1-1:1.0: skipping garbage [ 646.094119][ T8606] cdc_wdm 1-1:1.0: skipping garbage [ 646.163027][ T8606] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 646.171314][ T9769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.192392][ T9769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.216239][ T8606] cdc_wdm 1-1:1.0: Unknown control protocol [ 646.636524][ T52] block nbd0: Attempted send on invalid socket [ 646.642727][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 646.654821][ T9769] XFS (nbd0): SB validate failed with error -5. [ 646.743828][ T4300] usb 1-1: USB disconnect, device number 25 [ 647.020947][ T9788] 9pnet_virtio: no channels available for device syz [ 648.550116][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 648.556596][ T4257] Bluetooth: hci5: command 0x1003 tx timeout [ 651.512278][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 652.209149][ T9832] ubi: mtd0 is already attached to ubi31 [ 652.267739][ T9831] lo speed is unknown, defaulting to 1000 [ 654.535520][ T5791] Bluetooth: hci5: Frame reassembly failed (-84) [ 654.933514][ T22] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 655.133508][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 655.140071][ T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.173530][ T22] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 655.184271][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 655.222553][ T22] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 655.264639][ T22] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 655.277655][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.328150][ T22] hub 2-1:1.0: bad descriptor, ignoring hub [ 655.354395][ T22] hub: probe of 2-1:1.0 failed with error -5 [ 655.370846][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 655.380430][ T22] cdc_wdm 2-1:1.0: skipping garbage [ 655.406313][ T22] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 655.412406][ T22] cdc_wdm 2-1:1.0: Unknown control protocol [ 655.523163][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.555825][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.582372][ T9855] sp0: Synchronizing with TNC [ 655.810507][ T52] block nbd1: Attempted send on invalid socket [ 655.817673][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 655.827380][ T9859] XFS (nbd1): SB validate failed with error -5. [ 655.856709][ T9858] [U] è [ 656.664687][ T4267] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 657.495742][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 657.503571][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 657.511305][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.518703][ T9883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.813642][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 657.822522][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 658.507150][ T4264] usb 2-1: USB disconnect, device number 32 [ 658.842690][ T9887] netlink: 'syz.4.1329': attribute type 29 has an invalid length. [ 658.852393][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 658.985441][ T9891] lo speed is unknown, defaulting to 1000 [ 660.194982][ T9887] netlink: 'syz.4.1329': attribute type 29 has an invalid length. [ 660.325830][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 661.249070][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 661.961856][ T9921] lo speed is unknown, defaulting to 1000 [ 661.979715][ T9922] ubi: mtd0 is already attached to ubi31 [ 664.510255][ T4321] Bluetooth: hci5: Frame reassembly failed (-84) [ 666.583510][ T4257] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 666.997232][ T9960] netlink: 'syz.0.1343': attribute type 39 has an invalid length. [ 667.007700][ T9960] device veth0_macvtap left promiscuous mode [ 669.374965][ T9981] 9pnet_virtio: no channels available for device syz [ 669.921898][ T9991] siw: device registration error -23 [ 673.552934][T10031] 9pnet_virtio: no channels available for device syz [ 676.625055][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1365'. [ 678.606935][T10079] overlayfs: failed to resolve './file0': -2 [ 681.408965][T10102] siw: device registration error -23 [ 685.493597][ T4340] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 685.683772][ T4340] usb 2-1: Using ep0 maxpacket: 8 [ 685.691650][ T4340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.707023][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.712283][ T4340] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 685.713759][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.731252][ T4340] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 685.818474][ T4340] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 685.860602][T10166] 9pnet_virtio: no channels available for device syz [ 685.887103][ T4340] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 685.926987][ T4340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.055804][ T4340] hub 2-1:1.0: bad descriptor, ignoring hub [ 686.078158][ T4340] hub: probe of 2-1:1.0 failed with error -5 [ 686.095087][ T4340] cdc_wdm 2-1:1.0: skipping garbage [ 686.100326][ T4340] cdc_wdm 2-1:1.0: skipping garbage [ 686.117721][ T4340] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 686.137906][ T4340] cdc_wdm 2-1:1.0: Unknown control protocol [ 686.233228][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.262748][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.693816][ T93] block nbd1: Attempted send on invalid socket [ 686.700064][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 686.710457][T10177] XFS (nbd1): SB validate failed with error -5. [ 690.184380][ T4299] usb 2-1: USB disconnect, device number 33 [ 692.216945][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 692.239488][T10234] netlink: 'syz.1.1400': attribute type 5 has an invalid length. [ 692.248537][T10234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 694.614131][T10252] 9pnet_virtio: no channels available for device syz [ 695.874784][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1405'. [ 696.797793][T10277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1409'. [ 697.093486][ T4264] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 697.223113][T10282] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 697.863557][ T4264] usb 4-1: Using ep0 maxpacket: 8 [ 698.003610][ T4264] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.016704][ T4264] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 698.102197][T10292] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 699.147434][ T4264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 699.158677][ T4264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 699.169857][ T4264] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 699.179113][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.196122][ T4264] hub 4-1:1.0: bad descriptor, ignoring hub [ 699.202061][ T4264] hub: probe of 4-1:1.0 failed with error -5 [ 699.209800][ T4264] cdc_wdm 4-1:1.0: skipping garbage [ 699.215062][ T4264] cdc_wdm 4-1:1.0: skipping garbage [ 699.222222][ T4264] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 699.229247][ T4264] cdc_wdm 4-1:1.0: Unknown control protocol [ 699.347021][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1414'. [ 699.393985][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.419087][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.409461][ T52] block nbd3: Attempted send on invalid socket [ 700.415729][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 700.425359][T10309] XFS (nbd3): SB validate failed with error -5. [ 702.287100][T10345] bond1: option mode: unable to set because the bond device has slaves [ 702.434199][ T4267] Bluetooth: hci3: command 0x0405 tx timeout [ 702.552206][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1423'. [ 702.853655][ T4299] usb 4-1: USB disconnect, device number 23 [ 703.593043][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.687257][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.697688][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.705463][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.712960][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.720653][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.728147][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.735716][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.743134][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.751142][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.804255][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.846983][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 703.931332][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.006577][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.083062][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.160518][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.267144][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.275281][T10375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 704.340992][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.380018][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.389513][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.449416][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.458263][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.471811][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.491425][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.513244][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.556653][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.577665][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.597970][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.616879][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.636063][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.658566][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.677667][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.697764][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.722659][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.730134][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 704.730142][ T26] audit: type=1326 audit(1750840334.801:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 704.769250][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.789648][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.810867][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.838384][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.853545][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.873340][ T26] audit: type=1326 audit(1750840334.801:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 704.897093][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.918999][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.970795][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 704.998887][ T26] audit: type=1326 audit(1750840334.851:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 705.021123][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.035434][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.042875][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.065392][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.072934][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.085442][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.093104][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.166283][ T26] audit: type=1326 audit(1750840334.851:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 705.195228][ T26] audit: type=1326 audit(1750840334.871:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 705.223726][ T26] audit: type=1326 audit(1750840334.871:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 705.243295][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.254269][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.262158][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.265873][ T26] audit: type=1326 audit(1750840334.871:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 705.269681][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.297232][ T26] audit: type=1326 audit(1750840334.871:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.2.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe82978e929 code=0x7ffc0000 [ 705.299366][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 705.321480][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.393436][ T4336] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 705.595282][ T4336] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.611501][ T4336] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 705.621934][ T4336] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.636485][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.710820][T10384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 706.292764][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.300632][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.670073][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.677660][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.685183][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.692692][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.700142][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.732969][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.766137][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.797002][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.829793][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.863613][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.889027][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.935781][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.963610][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 706.990349][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.019547][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.047419][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.075893][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.101922][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.127235][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.156823][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.185194][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.212685][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.241763][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.269165][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.292600][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.311160][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.332951][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.348816][ T4340] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 707.424610][ T4340] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 708.066436][ T22] usb 3-1: USB disconnect, device number 28 [ 708.167510][T10400] fido_id[10400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 708.484057][ T22] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 708.663532][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 708.670358][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.683621][ T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 708.692990][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 708.707163][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 708.718385][ T22] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 708.727688][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.745066][ T22] hub 3-1:1.0: bad descriptor, ignoring hub [ 708.751159][ T22] hub: probe of 3-1:1.0 failed with error -5 [ 708.757709][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 708.763009][ T22] cdc_wdm 3-1:1.0: skipping garbage [ 708.774789][ T22] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 708.780715][ T22] cdc_wdm 3-1:1.0: Unknown control protocol [ 708.951107][T10402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.963133][T10402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.226069][ T93] block nbd2: Attempted send on invalid socket [ 709.232245][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 709.242909][T10404] XFS (nbd2): SB validate failed with error -5. [ 710.030663][T10388] bond1: option mode: unable to set because the bond device has slaves [ 710.278025][T10414] 9pnet_virtio: no channels available for device syz [ 712.035936][ T4299] usb 3-1: USB disconnect, device number 29 [ 714.469876][T10445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1443'. [ 714.496460][ T7186] Process accounting resumed [ 715.443651][T10458] trusted_key: encrypted_key: key user:syz not found [ 717.994282][T10472] 9pnet_virtio: no channels available for device syz [ 719.382994][T10481] ubi: mtd0 is already attached to ubi31 [ 720.245216][ T4264] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 720.437426][ T4264] usb 1-1: Using ep0 maxpacket: 8 [ 720.457764][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.468281][ T4264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 720.477951][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 720.489698][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 720.501467][ T4264] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 720.511043][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.539092][ T4264] hub 1-1:1.0: bad descriptor, ignoring hub [ 720.545214][ T4264] hub: probe of 1-1:1.0 failed with error -5 [ 720.551750][ T4264] cdc_wdm 1-1:1.0: skipping garbage [ 720.557639][ T4264] cdc_wdm 1-1:1.0: skipping garbage [ 720.568066][ T4264] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 720.574437][ T4264] cdc_wdm 1-1:1.0: Unknown control protocol [ 720.760015][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.773801][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.032282][ T52] block nbd0: Attempted send on invalid socket [ 721.038737][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 721.055619][T10487] XFS (nbd0): SB validate failed with error -5. [ 722.307089][T10467] lo speed is unknown, defaulting to 1000 [ 722.808963][T10504] overlayfs: missing 'lowerdir' [ 723.573831][ T22] usb 1-1: USB disconnect, device number 26 [ 724.276470][T10521] 9pnet_virtio: no channels available for device syz [ 726.789014][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 730.457978][T10562] overlayfs: missing 'lowerdir' [ 730.690901][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1475'. [ 737.669973][T10631] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 741.133459][ T4303] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 741.435355][ T4303] usb 1-1: Using ep0 maxpacket: 8 [ 741.467506][ T4303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.528467][ T4303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 741.563947][ T4303] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 741.644519][ T4303] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 741.685476][ T4303] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 741.722886][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.782100][ T4303] hub 1-1:1.0: bad descriptor, ignoring hub [ 741.798296][ T4303] hub: probe of 1-1:1.0 failed with error -5 [ 741.813804][ T4303] cdc_wdm 1-1:1.0: skipping garbage [ 741.843994][ T4303] cdc_wdm 1-1:1.0: skipping garbage [ 741.880123][ T4303] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 741.912392][ T4303] cdc_wdm 1-1:1.0: Unknown control protocol [ 741.970360][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.987772][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.309750][ T52] block nbd0: Attempted send on invalid socket [ 742.315965][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 742.326370][T10685] XFS (nbd0): SB validate failed with error -5. [ 743.013465][ T22] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 743.214737][ T22] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 743.275819][ T22] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 743.326201][ T22] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 743.368782][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.499769][T10711] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 743.511534][T10702] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 743.700916][T10710] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 745.873308][ T22] usb 2-1: USB disconnect, device number 34 [ 745.883889][ T4340] usb 1-1: USB disconnect, device number 27 [ 747.144922][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.151358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.875697][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'. [ 751.321260][T10761] netlink: 'syz.2.1520': attribute type 29 has an invalid length. [ 751.329373][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 751.343133][T10761] netlink: 'syz.2.1520': attribute type 29 has an invalid length. [ 751.351421][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1520'. [ 751.522242][T10762] lo speed is unknown, defaulting to 1000 [ 751.618361][T10763] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 751.749013][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 753.863443][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1524'. [ 754.238431][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 757.659517][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1528'. [ 759.031785][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 760.399772][T10812] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 762.785407][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 764.693253][ T26] audit: type=1326 audit(1750840394.641:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.3.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 764.850508][ T26] audit: type=1326 audit(1750840394.801:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.3.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 765.130331][ T26] audit: type=1326 audit(1750840394.801:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.3.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 765.639653][ T26] audit: type=1326 audit(1750840394.801:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.3.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a1f8e929 code=0x7ffc0000 [ 766.568257][T10879] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 766.812771][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 770.204744][T10924] device bridge5 entered promiscuous mode [ 770.713423][T10924] 9pnet_fd: Insufficient options for proto=fd [ 771.180411][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1559'. [ 771.255549][T10934] 9pnet_virtio: no channels available for device syz [ 777.565473][T10991] tmpfs: Unknown parameter 'usrquota' [ 777.599503][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'. [ 778.312268][T11000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1572'. [ 779.608667][T11022] device bridge5 entered promiscuous mode [ 779.638802][T11026] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 779.734134][T11027] 9pnet_fd: Insufficient options for proto=fd [ 779.867704][T11026] 9pnet_virtio: no channels available for device syz [ 783.429211][T11051] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 784.005436][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1586'. [ 786.223434][T11090] trusted_key: encrypted_key: key user:syz not found [ 787.093460][ T22] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 787.722598][T11092] device bridge10 entered promiscuous mode [ 787.735322][T11092] 9pnet_fd: Insufficient options for proto=fd [ 787.893419][ T22] usb 5-1: device descriptor read/64, error -71 [ 788.081157][ T4340] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 788.131222][T11104] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 788.193584][ T22] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 788.313506][ T4340] usb 1-1: Using ep0 maxpacket: 8 [ 788.322844][ T4340] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.341880][ T4340] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 788.507474][ T4340] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 788.518863][ T4340] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 788.530321][ T4340] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 788.539540][ T4340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.573514][ T22] usb 5-1: device descriptor read/64, error -71 [ 788.735998][ T22] usb usb5-port1: attempt power cycle [ 789.144708][ T4340] hub 1-1:1.0: bad descriptor, ignoring hub [ 789.153453][ T4340] hub: probe of 1-1:1.0 failed with error -5 [ 789.203935][ T4340] cdc_wdm 1-1:1.0: skipping garbage [ 789.214571][ T4340] cdc_wdm 1-1:1.0: skipping garbage [ 789.230172][ T4340] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 789.242858][ T4340] cdc_wdm 1-1:1.0: Unknown control protocol [ 789.253291][T11116] tmpfs: Unknown parameter 'usrquota' [ 789.276896][T11116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1601'. [ 789.410387][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.441500][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.698316][ T7186] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 792.364721][ T7186] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 792.573654][ T7186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.594674][ T7186] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 792.635230][ T7186] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 792.643244][ T7186] usb 5-1: Manufacturer: syz [ 792.649445][ T7186] usb 5-1: config 0 descriptor?? [ 792.783530][ T7186] rc_core: IR keymap rc-hauppauge not found [ 792.789476][ T7186] Registered IR keymap rc-empty [ 792.815214][ T7186] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 792.838033][ T7186] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 792.884638][ T7186] usb 5-1: USB disconnect, device number 41 [ 793.085264][T11158] overlayfs: missing 'lowerdir' [ 793.113505][ T4340] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 793.313896][ T4340] usb 2-1: device descriptor read/64, error -71 [ 793.593842][ T7186] usb 1-1: USB disconnect, device number 28 [ 793.703992][ T4340] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 793.903541][ T4340] usb 2-1: device descriptor read/64, error -71 [ 794.024237][T11161] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 794.117372][ T4340] usb usb2-port1: attempt power cycle [ 795.672722][T11186] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 795.690806][ T4340] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 795.744285][ T4340] usb 2-1: device descriptor read/8, error -71 [ 796.369908][T11205] overlayfs: missing 'lowerdir' [ 796.383400][ T22] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 796.613610][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 796.622523][ T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.633157][ T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 796.642500][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 796.668797][ T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 796.884502][ T22] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 796.938848][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.956161][ T22] hub 5-1:1.0: bad descriptor, ignoring hub [ 796.962063][ T22] hub: probe of 5-1:1.0 failed with error -5 [ 796.968568][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 796.973800][ T22] cdc_wdm 5-1:1.0: skipping garbage [ 796.981151][ T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 796.987373][ T22] cdc_wdm 5-1:1.0: Unknown control protocol [ 797.157426][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.170204][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.403432][ T7186] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 800.443389][ T7186] usb 4-1: device descriptor read/64, error -71 [ 800.803688][ T7186] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 800.841385][T11238] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 800.963687][ T7186] usb 4-1: device descriptor read/64, error -71 [ 801.003878][ T4299] usb 5-1: USB disconnect, device number 42 [ 801.136161][ T7186] usb usb4-port1: attempt power cycle [ 801.593577][ T7186] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 801.644043][ T7186] usb 4-1: device descriptor read/8, error -71 [ 801.667431][T11255] overlayfs: missing 'lowerdir' [ 801.914734][ T7186] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 801.953943][ T7186] usb 4-1: device descriptor read/8, error -71 [ 801.996110][T11266] overlayfs: missing 'workdir' [ 802.023743][ T4340] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 802.083654][ T7186] usb usb4-port1: unable to enumerate USB device [ 802.245478][ T4340] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 803.327466][ T4340] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 803.337642][ T4340] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 803.346893][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.358556][T11261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 804.887428][ T4340] usb 5-1: USB disconnect, device number 43 [ 805.364334][ T4340] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 805.553623][ T4340] usb 5-1: Using ep0 maxpacket: 8 [ 805.559950][ T4340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.582430][ T4340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 805.605246][ T4340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 805.632010][ T4340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 805.656599][ T4340] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 805.677506][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.711382][ T4340] hub 5-1:1.0: bad descriptor, ignoring hub [ 805.727467][ T4340] hub: probe of 5-1:1.0 failed with error -5 [ 805.743431][ T4340] cdc_wdm 5-1:1.0: skipping garbage [ 805.748650][ T4340] cdc_wdm 5-1:1.0: skipping garbage [ 805.755165][ T4340] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 805.761082][ T4340] cdc_wdm 5-1:1.0: Unknown control protocol [ 805.925881][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.936294][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.576789][T11312] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 807.159864][T11317] tmpfs: Unknown parameter 'usrquota' [ 807.211556][T11317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'. [ 808.589100][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.596536][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.693804][ T4302] usb 5-1: USB disconnect, device number 44 [ 808.835413][T11206] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 808.860145][T11326] overlayfs: missing 'lowerdir' [ 808.998092][T11206] usb 2-1: device descriptor read/64, error -71 [ 809.128233][T11294] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1651'. [ 809.140258][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1649'. [ 809.293633][T11206] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 809.467500][T11206] usb 2-1: device descriptor read/64, error -71 [ 809.593581][T11206] usb usb2-port1: attempt power cycle [ 810.222411][T11206] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 810.323988][T11206] usb 2-1: device descriptor read/8, error -71 [ 810.733517][T11206] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 812.272710][T11206] usb 2-1: device descriptor read/8, error -71 [ 812.403543][T11206] usb usb2-port1: unable to enumerate USB device [ 814.787085][T11392] overlayfs: missing 'lowerdir' [ 814.792068][T11393] syz.1.1671[11393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.792166][T11393] syz.1.1671[11393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 815.940223][T11407] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 819.600635][T11441] lo speed is unknown, defaulting to 1000 [ 820.198492][T11450] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 820.936445][T11463] overlayfs: missing 'lowerdir' [ 822.160981][T11482] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 823.398545][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 823.563458][ T7186] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 825.083408][ T7186] usb 5-1: device descriptor read/64, error -71 [ 825.363681][ T7186] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 825.683060][ T7186] usb 5-1: device descriptor read/64, error -71 [ 825.813603][ T7186] usb usb5-port1: attempt power cycle [ 826.082717][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'. [ 826.723425][ T7186] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 826.833421][ T7186] usb 5-1: device descriptor read/8, error -71 [ 827.387150][ T7186] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 828.302705][ T7186] usb 5-1: Using ep0 maxpacket: 32 [ 828.313791][ T7186] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.352844][ T7186] usb 5-1: config 0 has no interfaces? [ 828.361063][ T7186] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 828.405442][ T7186] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 828.474859][ T7186] usb 5-1: Product: syz [ 828.479116][ T7186] usb 5-1: Manufacturer: syz [ 828.513517][ T7186] usb 5-1: SerialNumber: syz [ 828.529374][ T7186] usb 5-1: config 0 descriptor?? [ 936.593286][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 936.600291][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10960/1:b..l [ 936.608739][ C1] (detected by 1, t=10502 jiffies, g=73877, q=80 ncpus=2) [ 936.615916][ C1] task:udevd state:R running task stack:26560 pid:10960 ppid:3623 flags:0x00004002 [ 936.627437][ C1] Call Trace: [ 936.630701][ C1] [ 936.633616][ C1] __schedule+0x10e9/0x40d0 [ 936.638118][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 936.643989][ C1] ? lock_chain_count+0x20/0x20 [ 936.648820][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 936.654085][ C1] preempt_schedule_irq+0xb1/0x150 [ 936.659172][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 936.664866][ C1] ? rcu_is_watching+0x11/0xa0 [ 936.669611][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 936.675396][ C1] irqentry_exit+0x63/0x70 [ 936.679787][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 936.685742][ C1] RIP: 0010:lock_acquire+0x20f/0x490 [ 936.691006][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 936.710599][ C1] RSP: 0018:ffffc90005d9f320 EFLAGS: 00000206 [ 936.716649][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 33630cbe500b5900 [ 936.724597][ C1] RDX: 0000000000000000 RSI: ffffffff8a6c1160 RDI: ffffffff8abf1360 [ 936.732542][ C1] RBP: ffffc90005d9f438 R08: dffffc0000000000 R09: fffffbfff2117049 [ 936.740489][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: 0000000000000000 [ 936.748436][ C1] R13: 1ffff92000bb3e70 R14: 0000000000000246 R15: dffffc0000000000 [ 936.756399][ C1] ? read_lock_is_recursive+0x10/0x10 [ 936.761751][ C1] ? unwind_next_frame+0x1880/0x20b0 [ 936.767012][ C1] ? deref_stack_reg+0x19f/0x230 [ 936.771925][ C1] ? preempt_count_add+0x8d/0x190 [ 936.776923][ C1] ? unwind_next_frame+0x1880/0x20b0 [ 936.782203][ C1] is_bpf_text_address+0x43/0x2a0 [ 936.787222][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 936.792406][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 936.797597][ C1] kernel_text_address+0x9c/0xd0 [ 936.802534][ C1] __kernel_text_address+0x9/0x30 [ 936.807544][ C1] unwind_get_return_address+0x49/0x80 [ 936.812985][ C1] ? stack_trace_save+0xe0/0xe0 [ 936.817813][ C1] arch_stack_walk+0xf2/0x140 [ 936.822474][ C1] stack_trace_save+0x98/0xe0 [ 936.827131][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 936.832226][ C1] kasan_set_track+0x4b/0x70 [ 936.836799][ C1] ? kasan_set_track+0x4b/0x70 [ 936.841541][ C1] ? kasan_save_free_info+0x2d/0x50 [ 936.846717][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 936.851982][ C1] ? slab_free_freelist_hook+0x131/0x1a0 [ 936.857594][ C1] ? kmem_cache_free+0xf7/0x290 [ 936.862419][ C1] ? unlink_anon_vmas+0x2c8/0x660 [ 936.867420][ C1] ? free_pgtables+0x24e/0x3d0 [ 936.872159][ C1] ? exit_mmap+0x33b/0x8e0 [ 936.876552][ C1] ? __mmput+0x118/0x3c0 [ 936.880769][ C1] ? exit_mm+0x1e6/0x2c0 [ 936.884989][ C1] ? do_exit+0x8b9/0x2400 [ 936.889294][ C1] ? do_group_exit+0x217/0x2d0 [ 936.894035][ C1] ? __x64_sys_exit_group+0x3b/0x40 [ 936.899213][ C1] ? do_syscall_64+0x4c/0xa0 [ 936.903778][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.909843][ C1] ? kmem_cache_free+0xf7/0x290 [ 936.914674][ C1] kasan_save_free_info+0x2d/0x50 [ 936.919674][ C1] ____kasan_slab_free+0x126/0x1e0 [ 936.924767][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 936.930219][ C1] ? unlink_anon_vmas+0x2c8/0x660 [ 936.935231][ C1] kmem_cache_free+0xf7/0x290 [ 936.939894][ C1] unlink_anon_vmas+0x2c8/0x660 [ 936.944729][ C1] free_pgtables+0x24e/0x3d0 [ 936.949298][ C1] ? free_pgd_range+0xb10/0xb10 [ 936.954126][ C1] ? rwsem_write_trylock+0x12f/0x1b0 [ 936.959400][ C1] exit_mmap+0x33b/0x8e0 [ 936.963628][ C1] ? vm_brk+0x20/0x20 [ 936.967591][ C1] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 936.973212][ C1] ? exit_mm+0x1d6/0x2c0 [ 936.977444][ C1] ? uprobe_clear_state+0x274/0x290 [ 936.982633][ C1] ? mm_update_next_owner+0x525/0x650 [ 936.987997][ C1] __mmput+0x118/0x3c0 [ 936.992050][ C1] exit_mm+0x1e6/0x2c0 [ 936.996101][ C1] ? do_exit+0x2400/0x2400 [ 937.000502][ C1] ? taskstats_exit+0x35a/0x9d0 [ 937.005337][ C1] do_exit+0x8b9/0x2400 [ 937.009478][ C1] ? put_task_struct+0x80/0x80 [ 937.014221][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 937.020182][ C1] ? lock_chain_count+0x20/0x20 [ 937.025009][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 937.030015][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 937.035367][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 937.041327][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 937.046507][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 937.051684][ C1] do_group_exit+0x217/0x2d0 [ 937.056255][ C1] __x64_sys_exit_group+0x3b/0x40 [ 937.061262][ C1] do_syscall_64+0x4c/0xa0 [ 937.065658][ C1] ? clear_bhb_loop+0x60/0xb0 [ 937.070312][ C1] ? clear_bhb_loop+0x60/0xb0 [ 937.074966][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.080839][ C1] RIP: 0033:0x7f97de4f16c5 [ 937.085241][ C1] RSP: 002b:00007ffe20e9d268 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 937.093630][ C1] RAX: ffffffffffffffda RBX: 0000556805b8d7d0 RCX: 00007f97de4f16c5 [ 937.101580][ C1] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 937.109534][ C1] RBP: 0000556805b4f910 R08: 0000000000000000 R09: 0000000000000000 [ 937.117495][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.125446][ C1] R13: 00007ffe20e9d2b0 R14: 0000000000000000 R15: 0000000000000000 [ 937.133404][ C1] [ 937.136400][ C1] rcu: rcu_preempt kthread starved for 10550 jiffies! g73877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 937.147569][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 937.157514][ C1] rcu: RCU grace-period kthread stack dump: [ 937.163376][ C1] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 937.174121][ C1] Call Trace: [ 937.177376][ C1] [ 937.180287][ C1] __schedule+0x10e9/0x40d0 [ 937.184783][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 937.190656][ C1] schedule+0xb9/0x180 [ 937.194703][ C1] schedule_timeout+0x15c/0x280 [ 937.199531][ C1] ? console_conditional_schedule+0x40/0x40 [ 937.205407][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 937.211279][ C1] ? update_process_times+0x1b0/0x1b0 [ 937.216636][ C1] ? prepare_to_swait_event+0x335/0x350 [ 937.222167][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 937.226998][ C1] ? dump_blkd_tasks+0x810/0x810 [ 937.231914][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 937.237091][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 937.241829][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 937.247701][ C1] ? finish_swait+0xc3/0x1d0 [ 937.252272][ C1] rcu_gp_kthread+0x95/0x380 [ 937.256838][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 937.261926][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 937.267797][ C1] ? __kthread_parkme+0x162/0x1c0 [ 937.272801][ C1] kthread+0x29d/0x330 [ 937.276849][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 937.281936][ C1] ? kthread_blkcg+0xd0/0xd0 [ 937.286503][ C1] ret_from_fork+0x1f/0x30 [ 937.290908][ C1] [ 937.293905][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 937.300200][ C1] Sending NMI from CPU 1 to CPUs 0: [ 937.305393][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10