last executing test programs: 6.532500299s ago: executing program 1 (id=1474): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40, 0x1000000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) dup(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) 6.114264152s ago: executing program 4 (id=1477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x41, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4095, 0xfff}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0) 5.985890895s ago: executing program 3 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030012005800018044000400200001000a0000000000000000000000000040120000006e7000000100000000200002000a00000000800000000000000000000200000000000000aa000000000d0001007564703a73"], 0x6c}}, 0x0) 5.800758401s ago: executing program 3 (id=1479): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0x3, &(0x7f00000024c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000200)=""/188) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000086d0486c2000210000001090224000100003020090400010203000100092103000601220500090581030002020000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000001640)=ANY=[@ANYBLOB="6d6ff169009911fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2100999078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec368e2be6a38e110ad79a38fb5c1436b5988215e096f61cb5c51b9788796ac34f4a8e455dd1d07d4684c7b2e91b6fd3fbaeffe7f5c6d14b23c1b00be5fe8ca59610a206c47126484462b109828c00"/177], 0xc1) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (rerun: 32) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x5, 0x0, &(0x7f00000000c0)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) (async) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=ANY=[@ANYBLOB="14000000c5c9be319df23ce94be9ddf8de920161c9830239c8a47b7fd438c2eb6758109bb2927321eb2052cfecbfd56a739f6c4fb1794d735076cdf2f76f67dbcc98fafc328fb86f8b9f1236510f7d8e8c1a915513b45d2bd3006a1b6d5f19975a1925e290d28159690baa246a97c8611334950c70aa773bf9ef1df14c41fbc5f3315a35791e0148ef6ccb88c942f4d026ee3dc90d3626f314089c5b46b5d12854061ce801d10dd428799581e813c311e8cd9163018a6f25f8f5461b57f0d561b4949aa2092aa457389b7c7a3f8f", @ANYRES16=0x0, @ANYBLOB="10002bbd7100fbdbdf254f000000"], 0x14}}, 0x20004050) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000002240)={0x0, 0xf9, "6a1b5870ed0caa829f4742695062c23199dd83810d6a34267091c79ea7efcd83587bf5fc408a8e691031efecc37bf6bdcafefb3b63c23b6f3318179b5104b4a4cf74f3c2523b906d65647da1246655a419625b73f7777bc6fc99b0169a9ed2e85a9aa36a31768a88e09f4dd649d3af40540129bc74f06131823171f72adf60ef5f82d3d93da64e38e1ee4ca71b2db08b70bfee5ae6b730f7ae76280d8c33491901ac0eaf06721140031dc3495bbf83828adfbdfb453be646e8f27d3b9ff47204de40fc566e7e6aea48f1d7afb17325a373133274068589db916503eddfafbfaf3c6022f999143dd641e193a496e77f9c1cd9bbf9a8a4b3e6c4"}, &(0x7f0000002380)=0x101) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f00000023c0)={r11, 0x8}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000240)=ANY=[]) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x3}, 0x1c) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e24000000002e003a0000003a3a000000000000005f02000000200002000a0000000000000cff010000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) (async, rerun: 32) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ramfs\x00', 0x21800a, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002241c2dc05533406008000"], 0x0}, 0x0) 5.800284902s ago: executing program 4 (id=1480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x13) 5.500796357s ago: executing program 1 (id=1481): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000002c0)={0x1, "52ff465780c668cf81c451293aabc90f4b3c3a82dcafbdd39d9be64f46dff5df"}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f00000000c0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x4b49, 0xffffffffffffffff) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00), 0x0, 0x20004000) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000370401000000f89bdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000001c0012800900010069706970000000000c00028008000200ac1414bb08001f0006000000"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 4.678479536s ago: executing program 2 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000419b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 4.476682406s ago: executing program 1 (id=1484): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000fffffff80000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\\\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 3.679640864s ago: executing program 2 (id=1485): io_submit(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ffffff000000000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x4d4ff, 0x4}, 0x94) 3.619675342s ago: executing program 3 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff000007000008"], 0x4c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e22, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@empty, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002cb, 0x6, 0x4000000000000}, {0x200000000000, 0x8, 0x0, 0xfffffffffffffffc}, {0x0, 0x9}, 0x0, 0x2000000, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 3.404827091s ago: executing program 1 (id=1487): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x2d00000000000000, 0x1000000}) 3.359960921s ago: executing program 3 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [{0x20, '-W-A'}], 0xa, "17"}, 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x9, 0x2, 0x2, "ae2646f0f6c86602a181e747c18ef0ab7a57008d5f7b0204a0de0f58871de302", 0x30c0615}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x40, r8, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0x40}}, 0x0) ioperm(0x3, 0x804, 0x1000009) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000040)=[{0x0}], 0x1) 3.342018656s ago: executing program 1 (id=1489): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r3 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000080)={0x8, 'netdevsim0\x00', {'veth0_to_bond\x00'}, 0x4}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) socket$kcm(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000080)={0x8, 'netdevsim0\x00', {'veth0_to_bond\x00'}, 0x4}) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) (async) 2.672609745s ago: executing program 3 (id=1490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x28) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001c8, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, r5, {0x7fffffffffffffff}}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x4e23, 0x2, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x0, 0x0, r6}, {0x6, 0x6, 0x3, 0x0, 0x0, 0x80000000, 0x1ff, 0x7}, {0x4, 0x7, 0x9, 0x8000000000000001}, 0x5f, 0x6e6bb3, 0x2, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x3500, 0x1, 0x3, 0x0, 0x8, 0x4, 0x73e6f593}}, 0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000340)="b63dd516f45b1a1cbc6549", 0xb}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000540)="1174dabf79056c4cad72f2ddfe0dcf449d2964c38d5cf37412", 0x19}, {&(0x7f0000001600)="30ec0c73248cfd6a7b0343d1c92926499520c990ff29bac7cc5667498a7e987cd0ecc9122e26dd9752a9e818d7e0f27c59c58330d2d423134939a87463485432ebbfd67df10a3e7823df9fc3ec985620a57f0f40244021eeffc786c2da82be9cda25b698e3052e6e6b24b9025646fbca7f019760ee95ee0fba8462fadd2acdebf381076605b65131dca99ea54f2d42fcb0accc81e55450fcb16460379d0b4a048741bd92e518421c3bd52b10870c4ee4bd52c0158443818d", 0xb8}, {&(0x7f00000016c0)="b1c27fdec8ad9da1c07e5c390990a1449f27405ed0003a4d556845a37a27c75215852f1e66ccded5fd10f367cb9fa1d623ec9177506da3b6526617269c5e85b04cf71de6c2e4858ee7337f8b89c59f4d77a1bc0cbdc73e8543f3c42988d8f8e2c1776b00e2e18e0de5a3614f1c2b1c3f8a0079736d64bc339786fec5dd96ab10cce5c3", 0x83}, {&(0x7f0000001780)="3a41e1eee60721eb0eec3456639dc186121e8af389cc328c4642bfaf1080744e70858b3e97c46f096f87e48de0a4935f35214d7d5a0782917cd8f27928c47becf04fec317f5c125da04cf27579972b586bcc9c40c4f13442584944036ccc5f198942149f2582ce580bd83010cb3bac", 0x6f}, {&(0x7f0000001800)="925e98ed798705e4b46e2bf68192ff04e8017154562aac688a99e94a6b63e87e1e4f5d52b48dff4b4dbaf6ab3b71d5b0809ff0d437d35275e1a98bdaf983825cd6192c736c51f1853b6f60e0b8", 0x4d}, {&(0x7f0000000580)}], 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000001000000000000eb9a0002000000000067003e1e7c9cde8df053fe56ed9fc5225abdeb224c626f4bf3c58431ff7f4592ae2fb47fc120dcc912b1fcb7899e3dea6af21a567beec278c46bf8df72efa71d299e86f839f77c840e2266a89568cb493df8cd52551e0705c76f1a261ca11b5b3b24e67e925cca991120a79980f8f3d225bbee27e10429945777d281ae4e30a093f5ba05bc8afbb89d968e24", @ANYRESOCT=r6, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r1, @ANYRESOCT=r5, @ANYRESOCT=r9, @ANYRESDEC=r7, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001feffff66dff9785fa9f8e0020000002e166339e34504d3fbeec334c588b67709000000001b7309c480b5797651d40deb33bc8a571c318b289da3cd194a7a070d9f5d4fa0a3c11cfaf4a6fae29f5a7d6073ab2f9624d597d5bfa0f7e25af67c3a8a58c5b18f975ef12d4cdaaea9fd089effcc8ebb948e320bd18df1eb6e6e24810a6ee7d8d2a7a2ec4bdba8fec7d5a1fb9f015c7b34692ba0344d7837fc089a1d60c380fb27484fc405892a5c95caa0f15af14382de73d2b34612cb3e", @ANYBLOB="7ebbedd6282010b9e6125c5ae1298d6975df5a84d090bab0ed9b657eefa71d8e0499c04ddbfce005d12a6021350a6441bcae9f9a974b424711ce4b160141effec2e89e333c", @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000001c00"/20, @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x4}, 0x20008014) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) r12 = openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r12, 0x80044dfe, &(0x7f0000000080)) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.67234339s ago: executing program 2 (id=1491): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40, 0x1000000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) dup(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) 1.750057654s ago: executing program 1 (id=1493): r0 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[5\xa9\xae\xef\xdbd(\xa7\x89\x13a]\xe6b\xa0\xcf\x1b\xd0\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\x9b\xac\xe3\xbf\xa5\xdf\xbd\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x02\x00\x00\x00\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x1b\x88\xf8C\n\xcc\x05\x90P\x0eQ\xd2\xe4\x9f5\x9b\x01\xf9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\xd5\r\xfcc\xb6\xef\x91N\xe9\xed', 0x6) pwrite64(r0, 0x0, 0x0, 0x2) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0) 1.572807965s ago: executing program 3 (id=1494): r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000580)={0x0, [[0x2, 0x0, 0x0, 0x0, 0x54], [0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x44, 0x8, 0x0, 0x7f]], '\x00', [{}, {}, {0xfffffffc, 0x9}, {}, {}, {0x0, 0x1000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x8}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32], 0x2b) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000200)={{0x80000000, r1, 0x0, [0x4, 0x9]}, {0x80000000, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]}) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df"], 0x0) 1.569469965s ago: executing program 0 (id=1495): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0x0, 0xffa4]}}, 0x5c) 1.502118227s ago: executing program 0 (id=1496): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000900)={'bond0\x00', @broadcast}) 1.457952923s ago: executing program 2 (id=1497): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2000000000}, 0x18) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x3f00000000000000, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0xffff7ffe00000000) 1.457538523s ago: executing program 4 (id=1498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) write$binfmt_misc(r3, &(0x7f0000000200), 0xfffffecc) (async) splice(r2, 0x0, r4, 0x0, 0x100000006, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x22221000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6c, @local, 0x4e22, 0x4, 'nq\x00', 0x1, 0xcc, 0x66}, 0x2c) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.300960551s ago: executing program 0 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {0x900}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x21, 0x91, "04ff8239e3cc3aea9a26d1d0c7ad1383efaaeb895eb1cdc38538d062b0"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.223987962s ago: executing program 0 (id=1500): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80600000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 1.185959245s ago: executing program 4 (id=1501): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x22020600) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x27, 0x0, 0x3}, 0x6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x2d4, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@void, @val={0xc, 0x99, {0x2, 0x5f}}}}, [@NL80211_ATTR_TID_CONFIG={0x2b4, 0x11d, 0x0, 0x1, [{0x2b0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x284, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x5}, {0x1, 0x6}, {0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {}, {0x1, 0x5}, {0x3, 0x8}, {0x4, 0xa}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x0, 0x3}, {0x6}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x3}, {0x2, 0x6}, {0x3, 0x6}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0x8}, {0x2, 0x5}, {0x4, 0x5}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {}, {0x0, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xb, 0x7, 0xffff, 0x6, 0xc69, 0x18, 0x4b5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x3, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x5, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x0, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0xf, 0xe0, 0x101, 0x5, 0xe, 0x5]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x82e7f7ef472c38fa, 0x36]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x8, 0x1000, 0x0, 0x2, 0x2, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x5}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x3}, {0x7, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0xa}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {}, {0x0, 0x1}, {0x6, 0x3}, {0x6}, {0x0, 0x5}, {}, {0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x5, 0x3}, {0x6, 0x3}, {0x5, 0x5}, {0x3, 0x5}, {0x7}, {0x0, 0x2}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x65, 0x30, 0x36, 0x60, 0x4, 0x48, 0x60, 0x2, 0x48, 0x12, 0x1b, 0x3, 0x30, 0xc, 0xc, 0xc, 0x16, 0x36, 0x36, 0x18, 0x1, 0x12, 0x12, 0x60, 0x48, 0x4, 0xc, 0x9, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x7}, {0x6}, {0x7, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x5, 0x5}, {0x5, 0x7}, {0x1, 0x4}, {}, {0x2, 0x8}, {0x4}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x1}, {0x5, 0x2}, {0x6}, {0x4, 0x8}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x8}, {0x5, 0x4}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0x1, 0xa}, {0x6, 0x3}, {0x4, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x10, 0x5, 0x3ff, 0x7, 0x78, 0x7, 0x100]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x1b, 0x4, 0xd6a7a0887e610aab, 0xc, 0x6, 0x60, 0x36, 0x1b, 0x16, 0x4, 0x2d, 0x4, 0x48, 0x5, 0x6, 0x4, 0x3, 0x60, 0x9, 0x3, 0xc, 0x2, 0x9, 0x24, 0x6c, 0x1, 0x18, 0x48, 0x36, 0x1b, 0x16]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7, 0xe4b, 0x6, 0x4, 0x3, 0xfff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6677, 0xfffb, 0x6, 0xfff, 0x0, 0x8, 0x2, 0x1]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x5}, {}, {0x1, 0xa}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x8}, {0x5, 0xa}, {0x3}, {0x3, 0x5}, {0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x2}, {0x0, 0x2}, {0x2, 0x2}, {0x5, 0x6}, {0x6, 0x6}, {0x7, 0x5}, {0x0, 0x6}, {0x7, 0xa}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x3, 0x6}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x6}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {0x4, 0x2}, {0x5, 0x7}, {0x4}, {0x2, 0x9}, {0x7, 0xa}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x4}, {0x3, 0x9}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x3, 0x2}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x4}, {0x3, 0x8}, {0x5, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x7ff, 0x4, 0x40, 0x7, 0x5, 0x40]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x173d, 0xeefe, 0x415, 0xffff, 0x0, 0x5, 0xffff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.115279896s ago: executing program 0 (id=1502): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x260800, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') close_range(r3, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x47) ioctl$KDGKBSENT(0xffffffffffffffff, 0x5602, &(0x7f0000000000)={0x0, "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"}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x2002, 0x0, 0x89) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) r10 = gettid() sendmmsg$unix(r8, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002e80)="ea45c6bfacd670286954d1b7dcf952b9e3289cb80ed1c4c27c719f5522065179ce865f685ff9bd9ebfedc96200e24d653073c1d2ed46cb72b3791e98acc1145c43d5183ad169eb2bc9f876fb07b5bbf1b210dcce8dcbac8c0333d868151978fd6f97285179edc964e52daa3ab686be3fecc3ac616e9bd4214fa11a1cb57a623b30efb620f38a4ec7a022c1cbd876bce5a04a7fa48ebff1d70a78f6bbad76afe6002b9db48a212d31c869996e8cc72f1f37fd58", 0xb3}, {&(0x7f0000000280)="c5ec7f2e9bf58545495dfcbf6282c98b4b5f06e44fbe98f6fe681a31dfa88ef047b4f484e60c2a113750d71a54090f", 0x2f}, {&(0x7f0000002e00)="622c8b6f9de8c813f24ed74d76dcec42289486895803f904614d04e11e2c6fbbd8b12c59146681668f5b0a32640a4b28a2b6bd22cabd10a9aced9aa62b0124d11dad85b0d51383566696530c14911525800812cc27ee61c0fb87cde9c00d3ccdad5f3f9ab4", 0x65}, {&(0x7f0000000500)="4545ef6280c29caf0799664a9eba404662e7fe786ea44797ad2c4343e323572dd613c50ac86fbf3cd14f47b17150ba9c377e92281235302fe7939f6b7f43df0144e043417ef3a58ea43e8bcde76ed840a41e742df850a7d586c45a2a809ec1d2602747da25b14a5476274b56b2749bce6205e8c7e8807402560632eb78481f721d6d", 0x82}, {&(0x7f00000005c0)="67d1bdc87bdd96324f49c3966c499eaa5fed3056ee7df2c899242d983691ce62a91c000a69898072c9499af5b926a35d028f8c26d55a4199054b96251d8383deb5ff5ee58ff07e05e635796956eacb517af408", 0x53}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r7, r9, r2, r7, r1, r6, 0xffffffffffffffff]}}], 0x50, 0x20004044}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f00000007c0)="04860d7f299bb24894beb5ea10f9517f6fdda8e4a8062c4c2c93a023d75c1a15aa6a1e6e86", 0x25}, {&(0x7f0000000800)="83a3608a5081ec02f8a5ddab095e2d7044f99c306a8879c0c8ef153082206201dd71b488910e665762bca2c3a37122e866da835062d48ee862a22f72df8a46b60def35e90e1510d75d9c37f7a94daa2b68777f245936ea1bef90dae56aa4d71648a1e881974dccd6d222ee0fbac2cadf86e362475687a04d0f2a140542354e8975044e4faa49ff79bc982ee88d392c1fd0164d", 0x93}, {&(0x7f00000008c0)="b68f732d346f601a73f5118c9cfc3f6d8d8099f0fa83faea70747113146b63455935a367494fbe6a7078e96877e56dd33e69", 0x32}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="33d39d0a3ee709e62f2dbae1715fa21f0e2eb93fc8cc26e9e7b13b7ab927684acb4a0eba4cdfab2bebf51e96759037820b713d572dfe1053232ff057e9896fd7e8c7f904e14ff94751f52a316064f60594f346cf066543ffd996f6e7e05d8830e88f6e2f569e54dda666223904e6be67b43350b4952ebd648e749421d441ba718495e7e42b74d17d99ace7523efa64d956a77e3782c86af419bc2f8e1f895c340534e248c69bbca5912e30a5e3e163d7f855ecb3ae663cb85e", 0xb9}, {&(0x7f00000019c0)="895452c793385292961fab2e997adde9b3fdb9340b15c4422c3ba7f29c583626752f6288ad558811da864f4589303a72c2b596a5fdcf780f90915a10eb3eb55dea897d4d2c45c6c408fdf872538f59650f6d8192f6e23428cd174bbf9679042358b73d8f37ee90ed94bb3b123dc78e7853fef54cc1ef1e478d587d9aa18ae1e54b7b94b71a66a59cdd6381d2ca1713b8d6717ea9efec808f5531330426173366f998543072db224336662e3a16e4a46ec6591e51e70fda254b831052805e85b5174808185111420984911f001f3eab2435ab531a548f80688a8230d561206406fb8f5c20fb96c7df7fda25c7433db1", 0xef}, {&(0x7f0000001ac0)="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", 0xfe}, {&(0x7f0000001bc0)="f1144266ce44c3d9ff5e3a259207b02f87d78030964909525b486a1896aae068efb0a041e10d6e4dcdf6fd90b7a1da7d314413c4bee6742db985ba635283b2c426c4896b485d01f389445e46b797943e030b664a6de2d879df354a7391b753fe7f6faca2176e043dbaf42c5fbdd8f63f63fc28e844e38944655feb76aaa7d573d9def61f42931bbaa753c6927dffc9a0a49787540d", 0x95}, {&(0x7f0000001c80)="f37d2af5149254faf507bd222194b1", 0xf}, {&(0x7f0000001cc0)="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", 0x1000}], 0xa, 0x0, 0x0, 0x4848}}], 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f00000000c0)=0x6) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000040)=0x7f) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) 1.075341228s ago: executing program 4 (id=1503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3e24e48aa31086b87031400e4ff1f03000800010000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a61c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) 986.467586ms ago: executing program 4 (id=1504): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) close(0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x3) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000c03000000000000000000000201000000000000000000000d000000000000000000005f009d509a486f2c8bf56651a91f082e2b3a4529ce8bb6504529825aa1d5cd61a7bf9787a961523ff71c7bbce6d5fb90ed12b47af435488bd9c732ebf2735148f4b0337f"], 0x0, 0x44}, 0x20) (async, rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='fuseblk\x00', 0x2000, &(0x7f0000000480)='[\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f0000000000)=0xfffffffb) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000300)="158f"}) (async, rerun: 64) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000040)=r3) (async, rerun: 64) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x1c, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090200000000007baaf0ff00000000b6bed02e3c54d92cb9bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r4, @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 93.134102ms ago: executing program 0 (id=1505): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x5}, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x41) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000440)="b0", 0x1) splice(r6, 0x0, r5, 0x0, 0x5, 0x0) shutdown(r2, 0x1) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 82.149206ms ago: executing program 2 (id=1506): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x40}}, 0x48000) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'ip6tnl0\x00'}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e9b310cff7ac692c2e5bd24fd2423cdcaaa9afcf24ea9cfaaee9bcf8bee59a2d5d10d9156d9d3c61d126f9462507679a871c367be9e641c37efe79c4027a39402fd6f082595066260adf6682487b5006c2579816b1936f9c07ac9f4ff23aaaf82327fb849fb6e93ede8de75959405cbaca1bd6b3b3d1ac4152e9cbfc382b2a27f678421d", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=r0], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x81, r6}, 0x38) r7 = socket$inet6(0xa, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1], 0x53) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x32314742}}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d62696e643a372d4e3a4e2f4e17"]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x1, 0x9}, 0x20) 0s ago: executing program 2 (id=1507): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x40, 0x1000000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) dup(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) kernel console output (not intermixed with test programs): message: -71 [ 227.095712][ T3078] ath6kl: unable to send the bmi data to the device: -71 [ 227.102862][ T3078] ath6kl: Unable to send get target info: -71 [ 227.224965][ T3078] ath6kl: Failed to init ath6kl core: -71 [ 227.232060][ T3078] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 227.331313][ T3078] usb 2-1: USB disconnect, device number 15 [ 227.568837][ T5911] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 229.470884][ T5911] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 229.664215][ T5911] usb 5-1: can't read configurations, error -71 [ 229.759370][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.587'. [ 229.768622][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'. [ 229.779714][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.587'. [ 229.789034][ T7861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.587'. [ 229.811655][ T7863] tipc: Started in network mode [ 229.844054][ T7863] tipc: Node identity , cluster identity 4711 [ 229.904823][ T7863] tipc: Failed to set node id, please configure manually [ 229.927958][ T7863] tipc: Enabling of bearer rejected, failed to enable media [ 230.036793][ T7870] --map-set only usable from mangle table [ 230.944022][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 231.254740][ T7888] overlayfs: missing 'lowerdir' [ 231.477213][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 231.540379][ T7897] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 231.571971][ T7897] netlink: 172 bytes leftover after parsing attributes in process `syz.1.599'. [ 231.624349][ T7901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.599'. [ 233.139988][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'. [ 233.724150][ T7929] overlayfs: missing 'lowerdir' [ 234.250621][ T7938] binder: 7933:7938 ioctl c0306201 2000000003c0 returned -14 [ 237.104278][ T7956] netlink: 14 bytes leftover after parsing attributes in process `syz.2.616'. [ 238.877525][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 239.215747][ T7956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.258312][ T7977] vivid-004: ================= START STATUS ================= [ 239.268367][ T7956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.279272][ T7956] bond0 (unregistering): Released all slaves [ 239.312826][ T7977] vivid-004: Radio HW Seek Mode: Bounded [ 239.324067][ T7982] overlayfs: missing 'lowerdir' [ 239.331935][ T7977] vivid-004: Radio Programmable HW Seek: false [ 239.360558][ T7977] vivid-004: RDS Rx I/O Mode: Block I/O [ 239.433132][ T7977] vivid-004: Generate RBDS Instead of RDS: false [ 239.462178][ T7977] vivid-004: RDS Reception: true [ 239.500322][ T7977] vivid-004: RDS Program Type: 0 inactive [ 239.539700][ T7977] vivid-004: RDS PS Name: inactive [ 239.558764][ T7977] vivid-004: RDS Radio Text: inactive [ 239.735800][ T7977] vivid-004: RDS Traffic Announcement: false inactive [ 239.790646][ T7977] vivid-004: RDS Traffic Program: false inactive [ 239.800783][ T7992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.624'. [ 239.820008][ T7993] netlink: 60 bytes leftover after parsing attributes in process `syz.3.625'. [ 239.829266][ T7977] vivid-004: RDS Music: false inactive [ 239.836169][ T7993] program syz.3.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.865401][ T7977] vivid-004: ================== END STATUS ================== [ 240.081062][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.627'. [ 240.155623][ T8004] netlink: 216 bytes leftover after parsing attributes in process `syz.1.627'. [ 240.244673][ T8004] openvswitch: netlink: Flow key attr not present in new flow. [ 240.365381][ T8007] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.230198][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 241.295373][ T8018] netlink: 36 bytes leftover after parsing attributes in process `syz.4.632'. [ 244.453897][ T5933] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 244.484550][ T8051] tipc: Started in network mode [ 244.489428][ T8051] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 244.544376][ T8051] tipc: Enabling of bearer rejected, failed to enable media [ 244.684033][ T5933] usb 5-1: not running at top speed; connect to a high speed hub [ 244.723263][ T5933] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 244.739071][ T5933] usb 5-1: config 95 has no interface number 0 [ 244.746597][ T5933] usb 5-1: config 95 interface 1 has no altsetting 0 [ 244.770898][ T5933] usb 5-1: string descriptor 0 read error: -22 [ 244.778480][ T5933] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 244.811310][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.876293][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.885204][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.894033][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.902800][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.912121][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.920963][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.929808][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.938805][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.947679][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 244.956491][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 246.652530][ T8069] No such timeout policy "syz1" [ 247.544297][ T5933] usb 5-1: USB disconnect, device number 5 [ 248.307010][ T8088] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 249.969348][ T8108] __nla_validate_parse: 46 callbacks suppressed [ 249.969366][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 250.113631][ T8111] fuse: Bad value for 'user_id' [ 250.138439][ T8111] fuse: Bad value for 'user_id' [ 250.649058][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'. [ 250.801513][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.663'. [ 254.421026][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.437046][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.624137][ T5933] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 254.674571][ T5911] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 254.834491][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 254.945490][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.960222][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.968823][ T5933] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 254.970242][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.088756][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.180847][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.391685][ T5911] usb 5-1: config 0 descriptor?? [ 255.540181][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.550669][ T5933] usb 4-1: Product: syz [ 255.554987][ T5933] usb 4-1: Manufacturer: syz [ 255.560649][ T5933] usb 4-1: SerialNumber: syz [ 255.577693][ T5933] usb 4-1: config 0 descriptor?? [ 255.605892][ T5933] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 255.662429][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.668940][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.598477][ T8168] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 256.611828][ T8168] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 256.621583][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.632639][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.654007][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 256.660027][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 256.689519][ T5911] usb 5-1: USB disconnect, device number 6 [ 256.841534][ T8194] tipc: Started in network mode [ 256.846934][ T8194] tipc: Node identity 00000000400000000000000000000001, cluster identity 4711 [ 256.856776][ T8194] tipc: Enabling of bearer rejected, failed to enable media [ 256.988456][ T8195] binder: BINDER_SET_CONTEXT_MGR already set [ 256.996757][ T8195] binder: 8191:8195 ioctl 4018620d 200000000040 returned -16 [ 257.018481][ T8195] binder: 8191:8195 ioctl c0306201 2000000003c0 returned -14 [ 257.107288][ T5933] pwc: Warning: more than 1 configuration available. [ 257.342040][ T8198] tipc: Enabling of bearer rejected, failed to enable media [ 257.365577][ T5933] pwc: Failed to set LED on/off time (-71) [ 257.376834][ T5933] pwc: send_video_command error -71 [ 257.382228][ T5933] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 257.441125][ T5933] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 257.528396][ T8207] tipc: Can't bind to reserved service type 0 [ 258.625028][ T5933] usb 4-1: USB disconnect, device number 13 [ 258.859908][ T8223] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.367081][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.674053][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 260.762532][ T8243] capability: warning: `syz.0.701' uses 32-bit capabilities (legacy support in use) [ 260.860159][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 260.872608][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.886909][ T9] usb 5-1: config 179 has no interface number 0 [ 260.920038][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 260.943844][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 260.992379][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 261.018400][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 261.036367][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 261.049924][ T5911] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 261.059490][ T8248] lo: left allmulticast mode [ 261.061172][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 261.071635][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 261.071760][ T8248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.099927][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.141000][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input16 [ 261.193120][ T8255] netlink: 104 bytes leftover after parsing attributes in process `syz.2.705'. [ 261.225940][ T5176] input input16: unable to receive magic message: -110 [ 261.244021][ T5911] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 261.273525][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.331445][ T5911] usb 1-1: config 0 descriptor?? [ 261.360702][ T5176] input input16: unable to receive magic message: -32 [ 261.455799][ T5176] input input16: unable to receive magic message: -32 [ 261.474190][ T5176] input input16: unable to receive magic message: -32 [ 261.880119][ T5176] input input16: unable to receive magic message: -32 [ 261.959262][ T8265] netlink: 'syz.1.708': attribute type 9 has an invalid length. [ 261.969979][ T8265] netlink: 'syz.1.708': attribute type 9 has an invalid length. [ 262.261888][ T5911] sony 0003:1345:3008.0001: unbalanced delimiter at end of report description [ 262.296739][ T5911] sony 0003:1345:3008.0001: parse failed [ 262.320751][ T5911] sony 0003:1345:3008.0001: probe with driver sony failed with error -22 [ 262.441496][ T5933] usb 1-1: USB disconnect, device number 14 [ 262.636275][ T30] audit: type=1326 audit(1751441439.343:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8276 comm="syz.2.713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f238e929 code=0x0 [ 262.804381][ T5911] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 262.964037][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 262.984834][ T5911] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 262.998050][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.006807][ T5911] usb 2-1: Product: syz [ 263.011627][ T5911] usb 2-1: Manufacturer: syz [ 263.019599][ T5911] usb 2-1: SerialNumber: syz [ 263.024566][ T3078] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 263.031613][ T5911] usb 2-1: config 0 descriptor?? [ 263.065105][ T5911] usb 2-1: invalid MIDI EP [ 263.070346][ T5911] usb 2-1: snd-bcd2000: error during probing [ 263.083255][ T5911] snd-bcd2000 2-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 263.206353][ T3078] usb 4-1: config index 0 descriptor too short (expected 2559, got 18) [ 263.214865][ T3078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.227179][ T3078] usb 4-1: config 0 has no interfaces? [ 263.239456][ T3078] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 263.249654][ T3078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.258003][ T3078] usb 4-1: Product: syz [ 263.262341][ T3078] usb 4-1: Manufacturer: syz [ 263.268216][ T3078] usb 4-1: SerialNumber: syz [ 263.277585][ T3078] usb 4-1: config 0 descriptor?? [ 263.289907][ T8275] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 263.302446][ T5911] usb 2-1: USB disconnect, device number 17 [ 263.324346][ T6941] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 263.414274][ T3078] usb 5-1: USB disconnect, device number 7 [ 263.414581][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 263.428581][ T3078] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 263.490741][ T6941] usb 1-1: Using ep0 maxpacket: 8 [ 263.500425][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.711'. [ 263.516767][ T6941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.530628][ T5911] usb 4-1: USB disconnect, device number 14 [ 263.540589][ T6941] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 263.560975][ T6941] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 263.577867][ T6941] usb 1-1: config 17 has no interface number 0 [ 263.585901][ T6941] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 263.595543][ T8285] tipc: Started in network mode [ 263.598817][ T6941] usb 1-1: config 17 interface 8 has no altsetting 0 [ 263.600737][ T8285] tipc: Node identity f65325044292, cluster identity 4711 [ 263.611098][ T6941] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 263.616532][ T8285] tipc: Enabled bearer , priority 10 [ 263.629829][ T6941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.639691][ T6941] usb 1-1: Product: syz [ 263.644413][ T6941] usb 1-1: Manufacturer: syz [ 263.650031][ T6941] usb 1-1: SerialNumber: syz [ 263.679078][ T8285] tipc: Resetting bearer [ 263.691911][ T8284] tipc: Resetting bearer [ 263.889455][ T6941] usb 1-1: selecting invalid altsetting 0 [ 264.079587][ T6941] usb 1-1: USB disconnect, device number 15 [ 264.676472][ T5911] tipc: Node number set to 3032556804 [ 265.130191][ T8300] ubi: mtd0 is already attached to ubi31 [ 265.976752][ T5911] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.135632][ T5911] usb 1-1: device descriptor read/64, error -71 [ 266.375117][ T5911] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 266.518292][ T5911] usb 1-1: device descriptor read/64, error -71 [ 266.638533][ T5911] usb usb1-port1: attempt power cycle [ 266.846866][ T8284] tipc: Disabling bearer [ 266.989370][ T5911] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 267.016996][ T5911] usb 1-1: device descriptor read/8, error -71 [ 267.032466][ T8316] netlink: 'syz.2.727': attribute type 3 has an invalid length. [ 267.040287][ T8316] netlink: 'syz.2.727': attribute type 3 has an invalid length. [ 268.419782][ T5911] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 268.615621][ T5911] usb 1-1: device descriptor read/8, error -71 [ 268.902282][ T5911] usb usb1-port1: unable to enumerate USB device [ 269.055560][ T8330] netlink: 104 bytes leftover after parsing attributes in process `syz.2.730'. [ 273.567971][ T30] audit: type=1804 audit(1751441450.133:7): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.737" name="file0" dev="ramfs" ino=16565 res=1 errno=0 [ 274.034098][ T30] audit: type=1326 audit(1751441450.723:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 274.488197][ T8376] openvswitch: netlink: Duplicate or invalid key (type 0). [ 274.495594][ T8376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.517738][ T30] audit: type=1326 audit(1751441450.723:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 274.551389][ T30] audit: type=1326 audit(1751441450.723:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 274.684973][ T3078] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 274.686719][ T30] audit: type=1326 audit(1751441450.723:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 275.237609][ T30] audit: type=1326 audit(1751441450.723:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 275.254265][ T3078] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 275.294413][ T3078] usb 4-1: config 0 has no interface number 0 [ 275.300568][ T3078] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 275.360006][ T3078] usb 4-1: config 0 interface 11 has no altsetting 0 [ 275.369234][ T30] audit: type=1326 audit(1751441450.723:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 275.377350][ T3078] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 275.437808][ T3078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.469384][ T30] audit: type=1326 audit(1751441450.723:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 275.508348][ T3078] usb 4-1: config 0 descriptor?? [ 275.535707][ T8366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.542996][ T8366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.558028][ T8390] Unknown options in mask 5 [ 275.562284][ T3078] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 275.725435][ T30] audit: type=1326 audit(1751441450.723:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 276.470036][ T30] audit: type=1326 audit(1751441450.723:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8369 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404b38e929 code=0x7ffc0000 [ 276.613422][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 276.623870][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 276.683374][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 276.687287][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 276.687427][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 276.687491][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 276.735062][ T3078] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 276.847320][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 276.849711][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 276.881838][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 276.881898][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 276.881941][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 276.881983][ T3078] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 276.885673][ T3078] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 276.973487][ T3078] usb 4-1: USB disconnect, device number 15 [ 277.850831][ T3078] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 277.872944][ T3078] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 277.885118][ T3078] keyspan 4-1:0.11: device disconnected [ 278.322670][ T8422] openvswitch: netlink: Message has 20 unknown bytes. [ 278.329858][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.382097][ T8428] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.430072][ T8443] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.968835][ T8454] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 283.321333][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 283.321352][ T30] audit: type=1326 audit(1751441459.843:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8466 comm="syz.0.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d538e929 code=0x0 [ 283.374344][ T5822] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 283.454091][ T8472] openvswitch: netlink: Message has 20 unknown bytes. [ 283.461302][ T8472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.141444][ T5822] usb 2-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 284.163877][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.172258][ T5822] usb 2-1: Product: syz [ 284.214420][ T5822] usb 2-1: Manufacturer: syz [ 284.219132][ T5822] usb 2-1: SerialNumber: syz [ 284.700641][ T5822] usb 2-1: config 0 descriptor?? [ 284.730142][ T5822] upd78f0730 2-1:0.0: upd78f0730 converter detected [ 284.746053][ T5822] usb 2-1: upd78f0730 converter now attached to ttyUSB0 [ 285.437257][ T8487] netlink: 'syz.4.774': attribute type 4 has an invalid length. [ 285.454653][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 285.581188][ T8457] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 285.676927][ T3078] usb 2-1: USB disconnect, device number 18 [ 285.764407][ T8494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.775'. [ 285.848395][ T3078] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 285.928061][ T3078] upd78f0730 2-1:0.0: device disconnected [ 288.237872][ T8519] openvswitch: netlink: Message has 20 unknown bytes. [ 288.245183][ T8519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.538340][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 288.547218][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 288.726299][ T8521] tipc: Enabling of bearer rejected, failed to enable media [ 289.406408][ T8533] SET target dimension over the limit! [ 290.386708][ T8543] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.276747][ T8546] Cannot find add_set index 0 as target [ 293.323592][ T6941] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 293.921619][ T6941] usb 4-1: Using ep0 maxpacket: 8 [ 294.071438][ T6941] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 294.248182][ T6941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.425654][ T6941] usb 4-1: Product: syz [ 294.487167][ T6941] usb 4-1: Manufacturer: syz [ 294.498477][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 294.500620][ T6941] usb 4-1: SerialNumber: syz [ 294.524574][ T6941] usb 4-1: config 0 descriptor?? [ 294.542799][ T6941] ipw 4-1:0.0: IPWireless converter converter detected [ 294.707642][ T8582] xt_hashlimit: invalid interval [ 294.764209][ T6941] usb 4-1: USB disconnect, device number 16 [ 294.775556][ T6941] ipw 4-1:0.0: device disconnected [ 296.756427][ T8598] netlink: 104 bytes leftover after parsing attributes in process `syz.0.805'. [ 297.804148][ T8609] vivid-007: ================= START STATUS ================= [ 297.818774][ T8609] vivid-007: Enable Output Cropping: true [ 297.962809][ T8609] vivid-007: Enable Output Composing: true [ 298.023954][ T8609] vivid-007: Enable Output Scaler: true [ 298.049434][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.812'. [ 298.127820][ T8609] vivid-007: Tx RGB Quantization Range: Automatic [ 298.153969][ T8609] vivid-007: Transmit Mode: HDMI [ 298.173892][ T8609] vivid-007: Hotplug Present: 0x00000000 [ 298.188640][ T8609] vivid-007: RxSense Present: 0x00000000 [ 298.194903][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 298.223165][ T8609] vivid-007: EDID Present: 0x00000000 [ 298.249226][ T8609] vivid-007: ================== END STATUS ================== [ 298.307210][ T8623] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 298.381729][ T8623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.395960][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 298.416771][ T8633] gretap1: entered promiscuous mode [ 298.437057][ T8633] bond0: (slave gretap1): making interface the new active one [ 298.470563][ T8633] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 298.576950][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 298.587464][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 298.596821][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.773743][ T8639] sp0: Synchronizing with TNC [ 299.248140][ T8623] macvlan2: entered promiscuous mode [ 299.253499][ T8623] macvlan2: entered allmulticast mode [ 299.315368][ T8623] bond0: entered promiscuous mode [ 299.323746][ T8623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 299.332272][ T8623] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 299.349209][ T8623] bond0: left promiscuous mode [ 299.404563][ T8642] binder: 8640:8642 ioctl 40046210 0 returned -14 [ 299.414736][ T8645] binder: 8640:8645 ioctl 40046210 0 returned -14 [ 299.784487][ T5933] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 300.226265][ T5933] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 300.254777][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.276590][ T5933] usb 1-1: Product: syz [ 300.290357][ T5933] usb 1-1: Manufacturer: syz [ 300.351323][ T8656] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 300.405979][ T5933] usb 1-1: SerialNumber: syz [ 300.414539][ T5933] usb 1-1: config 0 descriptor?? [ 300.441580][ T8658] xt_bpf: check failed: parse error [ 300.447599][ T5933] ch341 1-1:0.0: ch341-uart converter detected [ 300.514556][ T8660] netlink: 'syz.1.825': attribute type 10 has an invalid length. [ 300.553340][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.825'. [ 301.028651][ T5933] usb 1-1: failed to send control message: -71 [ 301.044082][ T5933] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 301.064304][ T5933] usb 1-1: USB disconnect, device number 20 [ 301.089659][ T5933] ch341 1-1:0.0: device disconnected [ 301.135919][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 301.158419][ T8650] bridge0: entered promiscuous mode [ 301.164167][ T8650] macsec1: entered allmulticast mode [ 301.169761][ T8650] bridge0: entered allmulticast mode [ 302.555621][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 303.063158][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 303.115757][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input17 [ 303.177867][ T9] input: failed to attach handler kbd to device input17, error: -5 [ 303.343964][ T6941] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 303.638116][ T6941] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.671101][ T9] usb 4-1: USB disconnect, device number 17 [ 303.749586][ T6941] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.814014][ T6941] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.849384][ T6941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.881586][ T8698] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.919316][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 303.937545][ T6941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.040875][ T8718] program syz.3.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.166883][ T6941] usb 1-1: USB disconnect, device number 21 [ 305.466413][ T8725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.845'. [ 305.703942][ T8735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.716885][ T8736] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 306.313971][ T5897] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 306.506992][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.539021][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.556370][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.582522][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.604504][ T5897] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.624192][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.650557][ T5897] usb 1-1: config 0 descriptor?? [ 306.723113][ T8754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.852'. [ 307.026378][ T8759] futex_wake_op: syz.2.854 tries to shift op by -1; fix this program [ 307.363379][ T5897] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 307.401234][ T5897] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 307.432208][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 308.466989][ T3078] usb 1-1: USB disconnect, device number 22 [ 308.575227][ T8775] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 308.581934][ T8775] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 308.597339][ T8775] vhci_hcd vhci_hcd.0: Device attached [ 308.642421][ T8780] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 308.648967][ T8780] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 308.657414][ T8780] vhci_hcd vhci_hcd.0: Device attached [ 308.679486][ T8781] vhci_hcd: cannot find the pending unlink 193 [ 308.686957][ T8781] vhci_hcd: connection closed [ 308.689079][ T7105] vhci_hcd: stop threads [ 308.699332][ T8777] vhci_hcd: connection closed [ 308.704479][ T7105] vhci_hcd: release socket [ 308.725701][ T7105] vhci_hcd: disconnect device [ 308.766470][ T7105] vhci_hcd: stop threads [ 308.773912][ T5911] vhci_hcd: vhci_device speed not set [ 308.784125][ T7105] vhci_hcd: release socket [ 308.796755][ T7105] vhci_hcd: disconnect device [ 308.944370][ T5911] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 308.952454][ T5911] usb 41-1: enqueue for inactive port 0 [ 309.030182][ T5911] vhci_hcd: vhci_device speed not set [ 309.797005][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.819167][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.324011][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 310.547022][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 310.611295][ T43] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 310.663912][ T43] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 310.700080][ T43] usb 4-1: config 0 has no interface number 0 [ 310.710511][ T8818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.734211][ T43] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.766107][ T43] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 310.792662][ T43] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 310.841406][ T43] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 310.906505][ T43] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 310.933655][ T43] usb 4-1: Product: syz [ 311.014840][ T43] usb 4-1: config 0 descriptor?? [ 311.029362][ T8808] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.323704][ T43] usb 4-1: USB disconnect, device number 18 [ 312.329277][ T8846] FAULT_INJECTION: forcing a failure. [ 312.329277][ T8846] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 312.347301][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.4.876 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 312.347326][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.347341][ T8846] Call Trace: [ 312.347351][ T8846] [ 312.347360][ T8846] dump_stack_lvl+0x189/0x250 [ 312.347397][ T8846] ? __pfx____ratelimit+0x10/0x10 [ 312.347420][ T8846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.347442][ T8846] ? __pfx__printk+0x10/0x10 [ 312.347460][ T8846] ? __might_fault+0xb0/0x130 [ 312.347490][ T8846] should_fail_ex+0x414/0x560 [ 312.347515][ T8846] _copy_from_iter+0x1db/0x16f0 [ 312.347549][ T8846] ? rcu_is_watching+0x15/0xb0 [ 312.347572][ T8846] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 312.347594][ T8846] ? __pfx__copy_from_iter+0x10/0x10 [ 312.347616][ T8846] ? __build_skb_around+0x257/0x3e0 [ 312.347638][ T8846] ? netlink_sendmsg+0x642/0xb30 [ 312.347655][ T8846] ? skb_put+0x11b/0x210 [ 312.347675][ T8846] netlink_sendmsg+0x6b2/0xb30 [ 312.347702][ T8846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.347728][ T8846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.347747][ T8846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.347765][ T8846] __sock_sendmsg+0x219/0x270 [ 312.347790][ T8846] ____sys_sendmsg+0x505/0x830 [ 312.347815][ T8846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.347843][ T8846] ? import_iovec+0x74/0xa0 [ 312.347870][ T8846] ___sys_sendmsg+0x21f/0x2a0 [ 312.347891][ T8846] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.347945][ T8846] ? __fget_files+0x2a/0x420 [ 312.347966][ T8846] ? __fget_files+0x3a0/0x420 [ 312.347996][ T8846] __x64_sys_sendmsg+0x19b/0x260 [ 312.348018][ T8846] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.348046][ T8846] ? __pfx_ksys_write+0x10/0x10 [ 312.348063][ T8846] ? rcu_is_watching+0x15/0xb0 [ 312.348090][ T8846] ? do_syscall_64+0xbe/0x3b0 [ 312.348116][ T8846] do_syscall_64+0xfa/0x3b0 [ 312.348136][ T8846] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.348157][ T8846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.348173][ T8846] ? clear_bhb_loop+0x60/0xb0 [ 312.348193][ T8846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.348210][ T8846] RIP: 0033:0x7f404b38e929 [ 312.348229][ T8846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.348244][ T8846] RSP: 002b:00007f404c1df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.348262][ T8846] RAX: ffffffffffffffda RBX: 00007f404b5b5fa0 RCX: 00007f404b38e929 [ 312.348276][ T8846] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 312.348287][ T8846] RBP: 00007f404c1df090 R08: 0000000000000000 R09: 0000000000000000 [ 312.348297][ T8846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.348307][ T8846] R13: 0000000000000000 R14: 00007f404b5b5fa0 R15: 00007ffdce7348c8 [ 312.348335][ T8846] [ 313.185159][ T8858] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.470398][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 313.686689][ T8857] hsr0: entered promiscuous mode [ 313.691824][ T8857] vlan2: entered promiscuous mode [ 313.978589][ T30] audit: type=1326 audit(1751441490.683:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d538e929 code=0x7ffc0000 [ 314.017038][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.884'. [ 314.026400][ T30] audit: type=1326 audit(1751441490.683:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d538e929 code=0x7ffc0000 [ 314.048262][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.884'. [ 314.061843][ T30] audit: type=1326 audit(1751441490.713:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d538e929 code=0x7ffc0000 [ 314.078142][ T8875] loop8: detected capacity change from 0 to 1 [ 314.088729][ T30] audit: type=1326 audit(1751441490.713:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d538e929 code=0x7ffc0000 [ 314.113709][ T8875] Dev loop8: unable to read RDB block 1 [ 314.116987][ T30] audit: type=1326 audit(1751441490.713:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d538e929 code=0x7ffc0000 [ 314.133135][ T8875] loop8: unable to read partition table [ 314.149448][ T30] audit: type=1326 audit(1751441490.713:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d5390847 code=0x7ffc0000 [ 314.170934][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 314.173929][ T8875] loop8: partition table beyond EOD, truncated [ 314.185134][ T8875] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 314.229300][ T30] audit: type=1326 audit(1751441490.713:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f33d53907bc code=0x7ffc0000 [ 314.265472][ T30] audit: type=1326 audit(1751441490.713:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f33d53906f4 code=0x7ffc0000 [ 314.290601][ T30] audit: type=1326 audit(1751441490.713:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f33d53906f4 code=0x7ffc0000 [ 314.321051][ T30] audit: type=1326 audit(1751441490.713:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8872 comm="syz.0.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f33d538d58a code=0x7ffc0000 [ 314.363536][ T10] usb 5-1: device descriptor read/64, error -71 [ 314.674522][ T8894] No such timeout policy "syz1" [ 315.266032][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 315.432123][ T8904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.892'. [ 315.441638][ T8904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.892'. [ 315.480596][ T10] usb 5-1: device descriptor read/64, error -71 [ 315.773882][ T10] usb usb5-port1: attempt power cycle [ 316.074404][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 316.100316][ T8921] tipc: Cannot configure node identity twice [ 316.133922][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 316.155465][ T10] usb 5-1: device descriptor read/8, error -71 [ 316.234162][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 316.264557][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 316.268985][ T8926] netlink: 14 bytes leftover after parsing attributes in process `syz.3.902'. [ 316.505375][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 316.824775][ T10] usb 5-1: device descriptor read/8, error -71 [ 316.858573][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.875200][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 316.890881][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 316.924041][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 316.945127][ T10] usb usb5-port1: unable to enumerate USB device [ 316.948704][ T43] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 316.960808][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.972154][ T43] usb 1-1: Product: syz [ 316.977533][ T43] usb 1-1: Manufacturer: syz [ 316.982762][ T8926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.991899][ T43] usb 1-1: SerialNumber: syz [ 317.001588][ T43] usb 1-1: config 0 descriptor?? [ 317.012452][ T8926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.044693][ T8926] bond0 (unregistering): Released all slaves [ 317.155829][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163605][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.298603][ T43] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 317.581913][ T43] usb 1-1: USB disconnect, device number 23 [ 317.801850][ T8938] program syz.3.906 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.995031][ T8946] netlink: 104 bytes leftover after parsing attributes in process `syz.3.911'. [ 318.134547][ T8948] netlink: 64 bytes leftover after parsing attributes in process `syz.0.910'. [ 318.479361][ T8950] netlink: 'syz.4.908': attribute type 39 has an invalid length. [ 318.774312][ T43] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 319.268615][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'. [ 319.374241][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 319.661240][ T43] usb 5-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 319.988367][ T9] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 320.041817][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 320.063344][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.074028][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.082140][ T43] usb 5-1: Product: syz [ 320.087035][ T43] usb 5-1: Manufacturer: syz [ 320.091729][ T43] usb 5-1: SerialNumber: syz [ 320.093851][ T9] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 320.121355][ T43] cdc_ether 5-1:1.0: skipping garbage [ 320.126856][ T43] usb 5-1: bad CDC descriptors [ 320.163349][ T9] usb 4-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config [ 320.259742][ T8979] netlink: 48 bytes leftover after parsing attributes in process `syz.1.921'. [ 320.293838][ T9] usb 4-1: config 8 has no interface number 0 [ 320.306226][ T9] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 320.317967][ T9] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.338387][ T9] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 320.350544][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.359931][ T9] usb 4-1: Product: syz [ 320.367028][ T9] usb 4-1: Manufacturer: syz [ 320.371761][ T9] usb 4-1: SerialNumber: syz [ 320.614006][ T9] usb 4-1: USB disconnect, device number 20 [ 320.679696][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.930'. [ 321.651968][ T5911] usb 5-1: USB disconnect, device number 13 [ 323.180504][ T9016] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 323.502121][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 323.511455][ T9021] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 323.520462][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.921545][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 324.418000][ T9033] netlink: 44 bytes leftover after parsing attributes in process `syz.3.937'. [ 324.507710][ T9036] ======================================================= [ 324.507710][ T9036] WARNING: The mand mount option has been deprecated and [ 324.507710][ T9036] and is ignored by this kernel. Remove the mand [ 324.507710][ T9036] option from the mount to silence this warning. [ 324.507710][ T9036] ======================================================= [ 324.632766][ T9042] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 324.670003][ T9042] batman_adv: batadv0: Adding interface: gretap1 [ 324.694825][ T9042] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.741962][ T9036] new mount options do not match the existing superblock, will be ignored [ 324.744250][ T9042] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 324.881046][ T9046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.941571][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.036666][ T9049] Invalid logical block size (1310720) [ 325.651783][ T9058] overlay: Unknown parameter 'fowner<00000000000000000007' [ 325.703898][ T9] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 325.870064][ T9] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 325.891832][ T9] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 325.910157][ T9] usb 1-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config [ 325.923221][ T9] usb 1-1: config 8 has no interface number 0 [ 325.933456][ T9] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 325.945283][ T9] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.972676][ T9] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 325.995721][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.012159][ T9] usb 1-1: Product: syz [ 326.016448][ T9] usb 1-1: Manufacturer: syz [ 326.021064][ T9] usb 1-1: SerialNumber: syz [ 326.275714][ T9] usb 1-1: USB disconnect, device number 24 [ 326.979446][ T9074] random: crng reseeded on system resumption [ 327.064926][ T9074] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 327.193229][ T9068] kthread_run failed with err -4 [ 327.342354][ T9081] netlink: 216 bytes leftover after parsing attributes in process `syz.3.957'. [ 327.530746][ T9086] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'. [ 328.304507][ T9091] veth0: entered promiscuous mode [ 328.328193][ T9090] veth0: left promiscuous mode [ 329.098235][ T9102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.963'. [ 329.107421][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 329.284065][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 329.796368][ T9] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 329.833375][ T9] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 329.873918][ T9] usb 4-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config [ 329.902679][ T9] usb 4-1: config 8 has no interface number 0 [ 329.913062][ T9] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 329.924425][ T9] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.120567][ T9] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 330.135166][ T9123] 9pnet_fd: Insufficient options for proto=fd [ 330.141719][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.154232][ T9] usb 4-1: Product: syz [ 330.162190][ T9] usb 4-1: Manufacturer: syz [ 330.167002][ T5911] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 330.181777][ T9] usb 4-1: SerialNumber: syz [ 330.329448][ T5911] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.342487][ T9133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.975'. [ 330.353915][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.544632][ T5911] usb 1-1: config 0 descriptor?? [ 330.566966][ T9] usb 4-1: USB disconnect, device number 21 [ 330.580566][ T5911] cp210x 1-1:0.0: cp210x converter detected [ 331.434917][ T9121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.489376][ T5911] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 331.513858][ T9121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.300759][ T5911] usb 1-1: cp210x converter now attached to ttyUSB0 [ 332.563726][ T9156] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.571362][ T9156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.524183][ T43] usb 1-1: USB disconnect, device number 25 [ 333.554734][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.573623][ T5911] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 333.744232][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 333.777149][ T43] cp210x 1-1:0.0: device disconnected [ 333.779646][ T5911] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 333.809908][ T5911] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 333.826058][ T5911] usb 2-1: config 0 has no interface number 0 [ 333.832970][ T5911] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.871616][ T5911] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 333.898103][ T9175] --map-set only usable from mangle table [ 334.028151][ T5911] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 334.347343][ T5911] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 334.488063][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 334.499939][ T5911] usb 2-1: Product: syz [ 334.508409][ T5911] usb 2-1: config 0 descriptor?? [ 334.518775][ T9164] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 336.346704][ T5911] usb 2-1: USB disconnect, device number 19 [ 337.077783][ T9201] binder: BINDER_SET_CONTEXT_MGR already set [ 337.084397][ T9201] binder: 9191:9201 ioctl 4018620d 200000000040 returned -16 [ 337.093929][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 337.103898][ T5911] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 337.245567][ T9] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 337.349047][ T9] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 337.361969][ T5911] usb 2-1: device descriptor read/all, error -71 [ 337.369377][ T9] usb 4-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config [ 337.380179][ T9] usb 4-1: config 8 has no interface number 0 [ 337.388097][ T9] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 337.420599][ T9] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.461092][ T9] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 337.482312][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.523910][ T9] usb 4-1: Product: syz [ 337.531292][ T9] usb 4-1: Manufacturer: syz [ 337.541543][ T9] usb 4-1: SerialNumber: syz [ 337.611855][ T9212] netlink: 56 bytes leftover after parsing attributes in process `syz.1.999'. [ 337.911674][ T9] usb 4-1: USB disconnect, device number 22 [ 338.216334][ T9221] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.499105][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1004'. [ 338.528360][ T9229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1003'. [ 338.565577][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 338.723857][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 338.865592][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.885158][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.897718][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 339.562863][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.609784][ T10] usb 5-1: config 0 descriptor?? [ 339.706732][ T10] hub 5-1:0.0: USB hub found [ 339.894108][ T9249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'. [ 339.997763][ T10] hub 5-1:0.0: 1 port detected [ 340.230620][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 340.291508][ T10] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 340.302236][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 340.312139][ T10] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 340.340167][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 340.360384][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 340.405522][ T10] usb 5-1: USB disconnect, device number 14 [ 340.735371][ T3078] libceph: connect (1)[c::]:6789 error -101 [ 340.743036][ T3078] libceph: mon0 (1)[c::]:6789 connect error [ 340.749610][ T43] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 340.772176][ T3078] libceph: connect (1)[c::]:6789 error -101 [ 340.786525][ T3078] libceph: mon0 (1)[c::]:6789 connect error [ 340.938603][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.951127][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 340.963674][ T43] usb 4-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.980194][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 340.990644][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 341.003319][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.015028][ T43] usb 4-1: Product: syz [ 341.019534][ T43] usb 4-1: Manufacturer: syz [ 341.029669][ T43] usb 4-1: SerialNumber: syz [ 341.055928][ T3078] libceph: connect (1)[c::]:6789 error -101 [ 341.062913][ T3078] libceph: mon0 (1)[c::]:6789 connect error [ 341.086377][ T9272] ceph: No mds server is up or the cluster is laggy [ 341.255786][ T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input21 [ 341.284491][ T5176] bcm5974 4-1:1.0: could not read from device [ 341.297559][ T5176] bcm5974 4-1:1.0: could not read from device [ 341.321575][ T43] usb 4-1: USB disconnect, device number 23 [ 341.377196][ T5176] bcm5974 4-1:1.0: could not read from device [ 341.976920][ T7515] udevd[7515]: Error opening device "/dev/input/event4": No such file or directory [ 342.014943][ T7515] udevd[7515]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.022561][ T7515] udevd[7515]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.098170][ T7515] udevd[7515]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.120607][ T7515] udevd[7515]: Unable to EVIOCGABS device "/dev/input/event4" [ 342.557185][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 343.639594][ T9312] program syz.4.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.651993][ T9306] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 343.834865][ T9321] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 344.394025][ T5933] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 344.868065][ T9337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.914459][ T9329] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 344.974044][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 345.017650][ T5933] usb 1-1: config 8 has an invalid interface number: 215 but max is 0 [ 345.086461][ T5933] usb 1-1: config 8 has no interface number 0 [ 345.096665][ T5933] usb 1-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00 [ 345.111132][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.236085][ T9344] lo: entered allmulticast mode [ 345.261173][ T9344] tunl0: entered allmulticast mode [ 345.266741][ T5933] usb 1-1: Product: syz [ 345.270957][ T5933] usb 1-1: Manufacturer: syz [ 345.301798][ T9344] gre0: entered allmulticast mode [ 345.341552][ T9346] xt_cgroup: invalid path, errno=-2 [ 345.948225][ T5933] usb 1-1: SerialNumber: syz [ 345.967848][ T5933] usb-storage 1-1:8.215: USB Mass Storage device detected [ 346.008720][ T9344] gretap0: entered allmulticast mode [ 346.224388][ T9344] erspan0: entered allmulticast mode [ 346.674876][ T5897] usb 1-1: USB disconnect, device number 26 [ 346.704733][ T9344] ip_vti0: entered allmulticast mode [ 346.729109][ T9344] ip6_vti0: entered allmulticast mode [ 346.741614][ T9344] sit0: entered allmulticast mode [ 346.762937][ T9344] ip6tnl0: entered allmulticast mode [ 346.782564][ T9344] ip6gre0: entered allmulticast mode [ 346.804837][ T9344] syz_tun: entered allmulticast mode [ 346.823732][ T9344] ip6gretap0: entered allmulticast mode [ 346.858917][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.866307][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.887219][ T9344] vcan0: entered allmulticast mode [ 346.902262][ T9344] bond0: entered allmulticast mode [ 346.907986][ T9344] bond_slave_0: entered allmulticast mode [ 347.004200][ T9344] bond_slave_1: entered allmulticast mode [ 347.033454][ T9344] team0: entered allmulticast mode [ 347.043121][ T9344] team_slave_0: entered allmulticast mode [ 347.053276][ T9344] team_slave_1: entered allmulticast mode [ 347.072438][ T9344] dummy0: entered allmulticast mode [ 347.103231][ T9344] nlmon0: entered allmulticast mode [ 347.178421][ T9344] caif0: entered allmulticast mode [ 347.205454][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1049'. [ 347.375919][ T9344] batadv0: entered allmulticast mode [ 347.549935][ T9344] vxcan0: entered allmulticast mode [ 347.565795][ T9344] vxcan1: entered allmulticast mode [ 347.590416][ T9344] veth0: entered allmulticast mode [ 347.608701][ T9344] veth1: entered allmulticast mode [ 347.622554][ T9344] wg1: entered allmulticast mode [ 347.632291][ T9344] wg2: entered allmulticast mode [ 347.645519][ T9344] veth0_to_bridge: entered allmulticast mode [ 347.664880][ T9344] veth1_to_bridge: entered allmulticast mode [ 347.681472][ T9344] veth0_to_bond: entered allmulticast mode [ 347.712525][ T9344] veth1_to_bond: entered allmulticast mode [ 347.752181][ T9344] veth0_to_team: entered allmulticast mode [ 347.798742][ T9344] veth1_to_team: entered allmulticast mode [ 347.850805][ T9344] veth0_to_batadv: entered allmulticast mode [ 348.185436][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.194636][ T9344] batadv_slave_0: entered allmulticast mode [ 348.206003][ T9344] xfrm0: entered allmulticast mode [ 348.215697][ T9344] veth0_to_hsr: entered allmulticast mode [ 348.236680][ T9344] hsr_slave_0: entered allmulticast mode [ 348.249153][ T9344] veth1_to_hsr: entered allmulticast mode [ 348.267568][ T9344] hsr_slave_1: entered allmulticast mode [ 348.279279][ T9344] hsr0: entered allmulticast mode [ 348.316027][ T9344] veth1_virt_wifi: entered allmulticast mode [ 348.325260][ T9344] veth0_virt_wifi: entered allmulticast mode [ 348.334586][ T9344] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 348.342745][ T9344] veth1_vlan: entered allmulticast mode [ 348.350894][ T9344] veth0_vlan: entered allmulticast mode [ 348.362675][ T9344] vlan1: entered allmulticast mode [ 348.368733][ T9344] macvlan0: entered allmulticast mode [ 348.377433][ T9344] macvlan1: entered allmulticast mode [ 348.385942][ T9344] ipvlan0: entered allmulticast mode [ 348.391357][ T9344] ipvlan1: entered allmulticast mode [ 348.399078][ T9344] veth1_macvtap: entered allmulticast mode [ 348.408520][ T9344] veth0_macvtap: entered allmulticast mode [ 348.416835][ T9344] macvtap0: entered allmulticast mode [ 348.424590][ T9344] macsec0: entered allmulticast mode [ 348.432212][ T9344] geneve0: entered allmulticast mode [ 348.440036][ T9344] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.449315][ T9344] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.458685][ T9344] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.468886][ T9344] geneve1: entered allmulticast mode [ 348.478222][ T9344] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 348.489351][ T9344] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 348.499849][ T9344] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 348.509647][ T9344] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 348.527415][ T9344] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 348.543920][ T9344] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 348.552382][ T9344] gretap1: entered allmulticast mode [ 348.559086][ T9344] bridge1: entered allmulticast mode [ 348.564617][ T9344] bond1: entered allmulticast mode [ 348.569757][ T9344] gretap2: entered allmulticast mode [ 348.576647][ T9344] gretap2: left promiscuous mode [ 348.582344][ T9344] bond2: entered allmulticast mode [ 348.587581][ T9344] bridge2: entered allmulticast mode [ 348.598854][ T9344] veth2: entered allmulticast mode [ 348.604135][ T9344] veth3: entered allmulticast mode [ 348.614915][ T10] lo speed is unknown, defaulting to 1000 [ 348.621499][ T10] syz0: Port: 1 Link DOWN [ 349.028757][ T9386] netlink: 'syz.1.1053': attribute type 11 has an invalid length. [ 350.072658][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 351.506276][ T9412] SET target dimension over the limit! [ 351.512653][ T9412] SET target dimension over the limit! [ 351.594987][ T9406] nvme_fabrics: missing parameter 'transport=%s' [ 351.621992][ T9406] nvme_fabrics: missing parameter 'nqn=%s' [ 351.814698][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 352.033896][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 352.041174][ T5897] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 352.743811][ T5897] usb 5-1: config 0 has no interface number 0 [ 352.982946][ T5897] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 352.995783][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.004046][ T5897] usb 5-1: Product: syz [ 353.008238][ T5897] usb 5-1: Manufacturer: syz [ 353.012862][ T5897] usb 5-1: SerialNumber: syz [ 353.022516][ T5897] usb 5-1: config 0 descriptor?? [ 353.046538][ T5897] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 353.280932][ T9445] --map-set only usable from mangle table [ 353.773351][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.801716][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.836285][ T5897] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 353.858845][ T5897] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 354.648090][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 354.656822][ T5897] usb 5-1: USB disconnect, device number 15 [ 354.682886][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 354.721998][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 354.869225][ T5897] quatech2 5-1:0.51: device disconnected [ 354.939490][ T9461] syz.3.1077: attempt to access beyond end of device [ 354.939490][ T9461] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 354.952591][ T9461] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 355.710852][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 355.915621][ T9478] erspan0: entered promiscuous mode [ 355.928015][ T9478] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1084'. [ 357.678374][ T9491] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1086'. [ 359.670577][ T9516] binder: 9502:9516 ioctl c0306201 2000000003c0 returned -14 [ 360.234588][ T5897] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 360.425673][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.631158][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.641781][ T9522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1097'. [ 361.057243][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.107391][ T5897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.136636][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.159414][ T5897] usb 5-1: config 0 descriptor?? [ 361.179173][ T9527] netlink: 'syz.3.1099': attribute type 12 has an invalid length. [ 361.214288][ T9527] netlink: 'syz.3.1099': attribute type 29 has an invalid length. [ 361.238001][ T9527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1099'. [ 361.277010][ T9527] netlink: 'syz.3.1099': attribute type 2 has an invalid length. [ 361.305372][ T9527] netlink: 'syz.3.1099': attribute type 3 has an invalid length. [ 361.321251][ T9527] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1099'. [ 361.550297][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 361.563367][ T9540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 362.199459][ T9543] lo speed is unknown, defaulting to 1000 [ 362.470424][ T9548] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 362.587915][ T9548] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 363.854098][ T5897] usbhid 5-1:0.0: can't add hid device: -71 [ 363.860144][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 363.877870][ T5897] usb 5-1: USB disconnect, device number 16 [ 364.483600][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 364.483617][ T30] audit: type=1326 audit(1751441541.183:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9555 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbebef8e929 code=0x7fc00000 [ 364.673177][ T9557] kthread_run failed with err -4 [ 364.767370][ T9557] netlink: 936 bytes leftover after parsing attributes in process `syz.2.1107'. [ 366.093961][ T43] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 366.264742][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 366.348601][ T43] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.440339][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 366.509637][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 366.525017][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.533049][ T43] usb 1-1: Product: syz [ 367.145425][ T43] usb 1-1: Manufacturer: syz [ 367.150358][ T43] usb 1-1: SerialNumber: syz [ 367.349560][ T9614] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.366418][ T9617] tipc: Started in network mode [ 367.378986][ T9617] tipc: Node identity 40000000000012000000000000000001, cluster identity 4711 [ 367.395131][ T9617] tipc: Enabling of bearer rejected, failed to enable media [ 367.629203][ T9627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.716546][ T43] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 9 proto 1 vid 0x0525 pid 0xA4A8 [ 367.734119][ T43] usb 1-1: USB disconnect, device number 27 [ 367.754722][ T43] usblp0: removed [ 368.540004][ T5897] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 368.594124][ T9641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1132'. [ 368.729998][ T9647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1134'. [ 368.763895][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 368.778207][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.815916][ T5897] usb 2-1: config 7 has an invalid interface number: 7 but max is 0 [ 368.833944][ T5897] usb 2-1: config 7 has no interface number 0 [ 368.840079][ T5897] usb 2-1: config 7 interface 7 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 368.869404][ T5897] usb 2-1: config 7 interface 7 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 8 [ 368.884648][ T5897] usb 2-1: config 7 interface 7 has no altsetting 0 [ 368.894178][ T5897] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=f9.7e [ 368.895546][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1136'. [ 368.913396][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.922136][ T5897] usb 2-1: Product: syz [ 368.932225][ T5897] usb 2-1: Manufacturer: syz [ 369.573874][ T5897] usb 2-1: SerialNumber: syz [ 369.583188][ T9629] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 369.632431][ T9649] kvm: pic: non byte read [ 369.655152][ T9649] kvm: pic: level sensitive irq not supported [ 369.655309][ T9649] kvm: pic: non byte read [ 369.684580][ T9649] kvm: pic: level sensitive irq not supported [ 369.684644][ T9649] kvm: pic: non byte read [ 369.846234][ T5897] usb 2-1: Error in usbnet_get_endpoints (-22) [ 369.871262][ T5897] usb 2-1: USB disconnect, device number 22 [ 370.100187][ T9671] overlayfs: workdir and upperdir must be separate subtrees [ 370.141576][ T9673] overlay: Unknown parameter 'fowner' [ 370.219635][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1146'. [ 370.329980][ T9688] netlink: 'syz.0.1148': attribute type 9 has an invalid length. [ 370.410715][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 370.424522][ T5897] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 370.611137][ T9697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1152'. [ 370.623267][ T9697] tipc: Invalid UDP bearer configuration [ 370.623331][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 370.696437][ T9698] openvswitch: netlink: Duplicate or invalid key (type 0). [ 370.703881][ T9698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.164651][ T5897] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 371.173022][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.196967][ T5897] usb 4-1: config 0 has no interface number 0 [ 371.203209][ T5897] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x13, changing to 0x3 [ 371.223845][ T5897] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 371.235099][ T5897] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.353435][ T5897] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.366542][ T5897] usb 4-1: config 0 interface 52 has no altsetting 0 [ 371.376278][ T5897] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 371.403989][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 371.412389][ T5897] usb 4-1: Product: syz [ 371.432992][ T5897] usb 4-1: SerialNumber: syz [ 371.669313][ T5897] usb 4-1: config 0 descriptor?? [ 372.513949][ T9714] binder: 9705:9714 ioctl c0306201 2000000003c0 returned -14 [ 372.934274][ T6941] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 372.982548][ T9724] netlink: 'syz.1.1161': attribute type 1 has an invalid length. [ 373.073479][ T43] usb 4-1: USB disconnect, device number 24 [ 373.086947][ T9732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1164'. [ 373.103624][ T9729] bond1: (slave bridge1): making interface the new active one [ 373.111577][ T6941] usb 1-1: device descriptor read/64, error -71 [ 373.136765][ T9729] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 373.242336][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'. [ 373.261190][ T9740] team0: entered promiscuous mode [ 373.267083][ T9740] team_slave_0: entered promiscuous mode [ 373.272958][ T9740] team_slave_1: entered promiscuous mode [ 373.281640][ T9740] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 373.290568][ T9740] team0: left promiscuous mode [ 373.295707][ T9740] team_slave_0: left promiscuous mode [ 373.301534][ T9740] team_slave_1: left promiscuous mode [ 373.323069][ T9742] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.374272][ T6941] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 373.593983][ T6941] usb 1-1: device descriptor read/64, error -71 [ 373.985921][ T6941] usb usb1-port1: attempt power cycle [ 374.383276][ T9764] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 374.393905][ T6941] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 374.409575][ T9768] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1170'. [ 374.422145][ T9764] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.458729][ T6941] usb 1-1: device descriptor read/8, error -71 [ 374.550055][ T30] audit: type=1326 audit(1751441551.253:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9774 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 374.683519][ T30] audit: type=1326 audit(1751441551.253:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9774 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 374.724029][ T6941] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 374.832637][ T30] audit: type=1326 audit(1751441551.253:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9774 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 374.941598][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1181'. [ 374.943922][ T6941] usb 1-1: device not accepting address 31, error -71 [ 374.981300][ T6941] usb usb1-port1: unable to enumerate USB device [ 374.994598][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 375.014084][ T5986] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 375.036640][ T9790] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 375.050807][ T9790] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 375.184799][ T5986] usb 5-1: Using ep0 maxpacket: 8 [ 375.199007][ T5986] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 375.223665][ T5986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.240353][ T5986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.252023][ T5986] usb 5-1: config 1 has no interface number 0 [ 375.260428][ T5986] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.490674][ T5986] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.504297][ T5986] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.705802][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.723886][ T5986] usb 5-1: Product: syz [ 375.728194][ T5986] usb 5-1: Manufacturer: syz [ 375.732898][ T5986] usb 5-1: SerialNumber: syz [ 375.765360][ T5986] cdc_wdm 5-1:1.128: skipping garbage [ 375.801602][ T5986] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 375.888135][ T9804] No such timeout policy "syz0" [ 376.690616][ T5986] cdc_wdm 5-1:1.128: Unknown control protocol [ 376.806725][ T5986] usb 5-1: USB disconnect, device number 17 [ 377.018180][ T9808] bond2: entered promiscuous mode [ 377.023694][ T9808] bond2: entered allmulticast mode [ 377.030034][ T9808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.454729][ T9808] bond2 (unregistering): Released all slaves [ 377.846404][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 378.064017][ T10] usb 2-1: device descriptor read/64, error -71 [ 378.608555][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 378.718305][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.724765][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.923896][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 379.167884][ T10] usb 2-1: device descriptor read/64, error -71 [ 379.284406][ T10] usb usb2-port1: attempt power cycle [ 379.481921][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1197'. [ 380.105476][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 380.579319][ T9846] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 380.725717][ T10] usb 2-1: device not accepting address 25, error -71 [ 381.842431][ T9878] tipc: Enabling of bearer rejected, failed to enable media [ 382.237474][ T9886] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.941260][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 383.372547][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 383.381621][ T9895] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 383.389217][ T9895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.003656][ T9893] overlayfs: failed to resolve './file1': -2 [ 385.727587][ T9932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1226'. [ 385.807080][ T5911] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 386.288451][ T9945] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1231'. [ 386.369767][ T5911] usb 4-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [ 386.380848][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.399636][ T5911] usb 4-1: Product: syz [ 386.407399][ T5911] usb 4-1: Manufacturer: syz [ 386.412056][ T5911] usb 4-1: SerialNumber: syz [ 386.434481][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 386.469442][ T9957] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1234'. [ 386.515069][ T5911] usb 4-1: config 0 descriptor?? [ 386.525294][ T9952] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 386.528076][ T5911] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 386.536395][ T9952] batman_adv: batadv0: Adding interface: gretap3 [ 386.550528][ T9952] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.576423][ T9952] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 387.162503][ T5933] usb 4-1: USB disconnect, device number 25 [ 387.190536][ T9963] lo: left allmulticast mode [ 387.195922][ T9963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.320222][ T10] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 387.347825][ T10] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 387.370640][ T10] usb 1-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config [ 387.389405][ T10] usb 1-1: config 8 has no interface number 0 [ 387.398567][ T10] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 387.416017][ T10] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.577469][ T10] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 388.224018][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.232055][ T10] usb 1-1: Product: syz [ 388.237452][ T10] usb 1-1: Manufacturer: syz [ 388.242071][ T10] usb 1-1: SerialNumber: syz [ 388.445777][ T9974] binder: BINDER_SET_CONTEXT_MGR already set [ 388.464809][ T9974] binder: 9964:9974 ioctl 4018620d 200000000040 returned -16 [ 389.066741][ T9979] binder: 9964:9979 ioctl c0306201 2000000003c0 returned -14 [ 389.238733][ T10] usb 1-1: can't set config #8, error -71 [ 389.323495][ T10] usb 1-1: USB disconnect, device number 32 [ 389.644700][ T9982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1240'. [ 389.654851][ T9982] netlink: 'syz.1.1240': attribute type 6 has an invalid length. [ 389.854851][ T9982] netlink: 'syz.1.1240': attribute type 5 has an invalid length. [ 389.944045][ T9982] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 390.207281][ T9994] overlayfs: workdir and upperdir must be separate subtrees [ 390.555767][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 392.606493][T10012] xt_cgroup: invalid path, errno=-2 [ 392.739129][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'. [ 392.827254][T10021] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 392.835280][T10021] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1251'. [ 393.094090][ T10] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 394.125732][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.136680][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 394.160358][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 394.180356][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.394456][ T10] usb 2-1: config 0 descriptor?? [ 394.420777][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 395.354512][ T30] audit: type=1326 audit(1751441572.053:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.363440][ T30] audit: type=1326 audit(1751441572.063:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.367502][ T30] audit: type=1326 audit(1751441572.073:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.367781][ T30] audit: type=1326 audit(1751441572.073:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.368242][ T30] audit: type=1326 audit(1751441572.073:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.368611][ T30] audit: type=1326 audit(1751441572.073:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.368653][ T30] audit: type=1326 audit(1751441572.073:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.369634][ T30] audit: type=1326 audit(1751441572.073:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56f238d290 code=0x7ffc0000 [ 395.369678][ T30] audit: type=1326 audit(1751441572.073:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56f238d290 code=0x7ffc0000 [ 395.369716][ T30] audit: type=1326 audit(1751441572.073:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10051 comm="syz.2.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f238e929 code=0x7ffc0000 [ 395.408337][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 395.411680][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 395.434327][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 395.434388][ T10] usb 2-1: media controller created [ 395.436822][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.445268][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 395.445351][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 395.453380][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 395.699828][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 395.699853][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 395.707780][ T10] usb 2-1: USB disconnect, device number 27 [ 396.639286][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 397.034801][ T5933] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 397.355351][ T5933] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 397.355556][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.355649][ T5933] usb 1-1: config 0 has no interface number 0 [ 397.356021][ T5933] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 397.356105][ T5933] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.482836][ T5933] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 397.482869][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.482887][ T5933] usb 1-1: Product: syz [ 397.482940][ T5933] usb 1-1: Manufacturer: syz [ 397.482998][ T5933] usb 1-1: SerialNumber: syz [ 398.381452][ T5933] usb 1-1: config 0 descriptor?? [ 401.044618][T10071] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 401.114885][ T5911] usb 1-1: USB disconnect, device number 33 [ 401.223954][T10071] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1266'. [ 401.306131][T10080] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1269'. [ 401.386254][T10081] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1271'. [ 401.386254][T10085] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1271'. [ 401.406703][T10087] netlink: 'syz.0.1270': attribute type 10 has an invalid length. [ 401.417517][T10087] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 401.461153][T10081] xt_TCPMSS: Only works on TCP SYN packets [ 401.515092][ T10] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 401.803339][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.020970][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 402.252238][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 402.285229][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.355137][ T10] usb 2-1: config 0 descriptor?? [ 402.455207][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 402.464217][T10097] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 402.471793][T10097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.539880][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 402.683129][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 403.022195][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 403.039136][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 403.052145][ T10] usb 2-1: media controller created [ 403.067897][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 403.083156][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 403.843270][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 403.858542][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 404.591667][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 404.618319][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 404.650335][ T10] usb 2-1: USB disconnect, device number 28 [ 404.852984][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 404.945196][T10126] binder: BINDER_SET_CONTEXT_MGR already set [ 404.966659][T10126] binder: 10125:10126 ioctl 4018620d 200000000040 returned -16 [ 405.069815][T10135] Invalid logical block size (33423360) [ 405.335444][T10148] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1286'. [ 406.579696][T10162] netlink: 'syz.1.1296': attribute type 1 has an invalid length. [ 406.597776][T10162] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1296'. [ 406.674274][ T5911] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 406.953687][ T5911] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 406.962160][ T5911] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 406.971651][T10166] syz.0.1295 (10166): attempted to duplicate a private mapping with mremap. This is not supported. [ 406.991501][ T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 407.009814][ T5911] usb 4-1: config 8 has an invalid descriptor of length 101, skipping remainder of the config [ 407.030846][ T5911] usb 4-1: config 8 has no interface number 0 [ 407.166208][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.278373][ T5911] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 407.296394][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 407.324516][ T5911] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.338346][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 407.350287][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.362491][ T5911] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 407.372342][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.385531][ T10] usb 2-1: config 0 descriptor?? [ 407.410795][ T5911] usb 4-1: Product: syz [ 407.420552][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 407.435744][ T5911] usb 4-1: Manufacturer: syz [ 407.498136][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 407.498351][ T5911] usb 4-1: SerialNumber: syz [ 407.946637][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 408.094717][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 408.101876][ T10] usb 2-1: media controller created [ 408.435546][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.513411][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 408.551101][ T5911] usb 4-1: USB disconnect, device number 26 [ 408.558296][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 408.583917][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 408.619611][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 408.628730][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 408.637832][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 408.714161][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 408.744014][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 408.791398][ T10] usb 2-1: USB disconnect, device number 29 [ 409.045136][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 409.714926][T10205] netlink: 'syz.3.1309': attribute type 9 has an invalid length. [ 409.774229][T10205] netlink: 'syz.3.1309': attribute type 9 has an invalid length. [ 410.592475][T10216] overlay: Unknown parameter '\' [ 410.816505][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1314'. [ 412.109230][T10229] input: syz1 as /devices/virtual/input/input27 [ 412.209697][T10232] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 412.224861][T10236] lo speed is unknown, defaulting to 1000 [ 412.610789][T10248] ubi: mtd0 is already attached to ubi31 [ 413.685926][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 413.719965][T10256] 9pnet: Could not find request transport: f.]~gp䧊DTr7ُؗ˧$ ӯf0xffffffffffffffff [ 413.742437][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 413.844058][T10259] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1327'. [ 413.893677][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 413.923860][ T5986] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 413.973672][T10236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1319'. [ 414.007232][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1319'. [ 414.110709][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.235323][ T5986] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 414.492320][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.539054][ T5986] usb 2-1: config 0 descriptor?? [ 414.563289][ T30] kauditd_printk_skb: 2516 callbacks suppressed [ 414.563306][ T30] audit: type=1804 audit(1751441591.263:2634): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1331" name="file0" dev="ramfs" ino=23335 res=1 errno=0 [ 414.602257][ T5986] pwc: Askey VC010 type 2 USB webcam detected. [ 414.752122][T10271] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 414.991526][ T5986] pwc: recv_control_msg error -32 req 02 val 2b00 [ 414.999890][ T5986] pwc: recv_control_msg error -32 req 02 val 2700 [ 415.011409][ T5986] pwc: recv_control_msg error -32 req 02 val 2c00 [ 415.026845][ T5986] pwc: recv_control_msg error -32 req 04 val 1000 [ 415.034647][ T5986] pwc: recv_control_msg error -32 req 04 val 1300 [ 415.453453][T10289] NILFS (nbd1): device size too small [ 415.466618][ T6941] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 416.607212][ T6941] usb 4-1: Using ep0 maxpacket: 8 [ 416.618602][ T6941] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 416.629953][ T6941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 1024 [ 416.643599][ T6941] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 416.719931][ T5986] pwc: recv_control_msg error -71 req 02 val 2000 [ 416.731304][ T6941] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 416.744646][ T5986] pwc: recv_control_msg error -71 req 02 val 2100 [ 416.751453][ T5986] pwc: recv_control_msg error -71 req 04 val 1500 [ 416.765366][ T5986] pwc: recv_control_msg error -71 req 02 val 2500 [ 416.777126][ T5986] pwc: recv_control_msg error -71 req 02 val 2400 [ 416.785675][ T5986] pwc: recv_control_msg error -71 req 02 val 2600 [ 416.793507][ T6941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 416.804727][ T6941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.822647][ T6941] usb 4-1: Product: syz [ 416.837220][ T6941] usb 4-1: Manufacturer: syz [ 416.850445][ T6941] usb 4-1: SerialNumber: syz [ 416.857043][ T5986] pwc: recv_control_msg error -71 req 02 val 2900 [ 416.913216][ T5986] pwc: recv_control_msg error -71 req 02 val 2800 [ 416.934197][ T5986] pwc: recv_control_msg error -71 req 04 val 1100 [ 416.942861][T10285] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 416.962501][ T5986] pwc: recv_control_msg error -71 req 04 val 1200 [ 416.975081][ T6941] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 417.001208][ T5986] pwc: Registered as video103. [ 417.024838][ T6941] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 417.042671][ T6941] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 417.045547][T10301] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1340'. [ 417.063541][ T5986] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 417.115649][ T5986] usb 2-1: USB disconnect, device number 30 [ 417.372116][ T6941] usb 4-1: USB disconnect, device number 27 [ 417.472331][ T30] audit: type=1804 audit(1751441594.173:2635): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1342" name="file0" dev="ramfs" ino=24298 res=1 errno=0 [ 417.960064][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 418.687235][T10324] batadv0: entered promiscuous mode [ 418.692820][T10324] macsec1: entered promiscuous mode [ 418.707660][T10324] batadv0: left promiscuous mode [ 419.455316][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 419.477162][T10332] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 419.491970][T10332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.976306][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 421.121260][T10346] binder: 10343:10346 ioctl c0306201 2000000003c0 returned -14 [ 422.156376][ T30] audit: type=1804 audit(1751441598.863:2636): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1357" name="file0" dev="ramfs" ino=24423 res=1 errno=0 [ 423.322190][T10360] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 423.539373][T10380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1363'. [ 423.593499][T10379] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 423.625735][T10379] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1362'. [ 423.903828][ T5986] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 423.973837][ T6941] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 424.003946][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 424.056438][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.066939][ T5986] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 424.076213][ T5986] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 424.085796][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.098317][ T5986] usb 2-1: config 0 descriptor?? [ 424.108279][ T5986] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 424.115238][ T5986] dvb-usb: bulk message failed: -22 (3/0) [ 424.125392][ T5986] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 424.133945][ T6941] usb 4-1: Using ep0 maxpacket: 32 [ 424.140401][ T5986] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 424.148506][ T6941] usb 4-1: config 1 has an invalid interface number: 242 but max is 0 [ 424.157642][ T5986] usb 2-1: media controller created [ 424.161104][ T10] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 424.162875][ T6941] usb 4-1: config 1 has no interface number 0 [ 424.162930][ T6941] usb 4-1: config 1 interface 242 has no altsetting 0 [ 424.175712][ T10] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 424.180045][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 424.185926][ T10] usb 5-1: Product: syz [ 424.203618][ T6941] usb 4-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 424.217934][ T10] usb 5-1: Manufacturer: syz [ 424.222707][ T10] usb 5-1: SerialNumber: syz [ 424.224206][ T6941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.236943][ T6941] usb 4-1: Product: syz [ 424.244450][ T10] usb 5-1: config 0 descriptor?? [ 424.247088][ T5986] dvb-usb: bulk message failed: -22 (6/0) [ 424.269990][ T5986] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 424.297784][ T6941] usb 4-1: Manufacturer: syz [ 424.322515][ T6941] usb 4-1: SerialNumber: syz [ 424.332639][ T5986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 424.368597][ T5986] dvb-usb: schedule remote query interval to 150 msecs. [ 424.376707][ T5986] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 424.401868][ T5986] usb 2-1: USB disconnect, device number 31 [ 424.633773][ T6941] aqc111 4-1:1.242: probe with driver aqc111 failed with error -71 [ 424.645594][ T5986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 424.738634][T10393] No such timeout policy "syz1" [ 424.956656][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 425.082292][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 425.176733][ T6941] usb 4-1: USB disconnect, device number 28 [ 425.197843][ T10] usb 5-1: USB disconnect, device number 18 [ 425.456720][T10397] netlink: 'syz.1.1368': attribute type 1 has an invalid length. [ 425.484702][ T30] audit: type=1804 audit(1751441602.193:2637): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1370" name="file0" dev="ramfs" ino=25620 res=1 errno=0 [ 425.491080][T10397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.531209][T10397] bond2: (slave gretap1): making interface the new active one [ 425.548469][T10397] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 425.608607][T10397] syz.1.1368 (10397) used greatest stack depth: 20136 bytes left [ 425.748584][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1372'. [ 425.990845][T10408] overlayfs: failed to clone upperpath [ 426.244741][T10411] tipc: Enabling of bearer rejected, failed to enable media [ 426.721037][T10422] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1377'. [ 426.735371][T10422] overlayfs: overlapping lowerdir path [ 426.815082][T10425] netlink: 'syz.1.1378': attribute type 1 has an invalid length. [ 426.837446][T10425] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1378'. [ 426.948464][T10428] netlink: 'syz.2.1379': attribute type 9 has an invalid length. [ 427.163337][ T5986] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 427.197243][ T30] audit: type=1804 audit(1751441603.893:2638): pid=10434 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1381" name="file0" dev="ramfs" ino=25685 res=1 errno=0 [ 427.327952][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.386761][ T5986] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 427.396216][ T5986] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 427.406378][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.435060][ T5986] usb 2-1: config 0 descriptor?? [ 427.460176][ T5986] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 427.486419][ T5986] dvb-usb: bulk message failed: -22 (3/0) [ 427.513684][ T5986] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 427.874554][ T5986] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 427.884261][ T5986] usb 2-1: media controller created [ 427.904890][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.930662][ T5986] dvb-usb: bulk message failed: -22 (6/0) [ 427.939593][ T5986] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 427.976086][ T5986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 428.002123][ T5986] dvb-usb: schedule remote query interval to 150 msecs. [ 428.027309][ T5986] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 428.070250][ T5986] usb 2-1: USB disconnect, device number 32 [ 428.140482][ T5986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 428.502321][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'. [ 428.621344][T10460] vlan2: entered promiscuous mode [ 428.637646][T10460] hsr0: entered promiscuous mode [ 428.690889][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 431.513783][T10495] netlink: 'syz.1.1399': attribute type 1 has an invalid length. [ 431.513806][T10495] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1399'. [ 431.520820][T10494] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 431.774053][ T6941] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 431.881396][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 431.882103][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 431.906700][T10496] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1394'. [ 431.919327][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'. [ 431.953287][ T6941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.953354][ T6941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 431.953570][ T6941] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 431.953631][ T6941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.515524][ T6941] usb 2-1: config 0 descriptor?? [ 432.517688][ T6941] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 432.517715][ T6941] dvb-usb: bulk message failed: -22 (3/0) [ 432.522310][ T6941] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 432.523695][ T6941] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 432.523784][ T6941] usb 2-1: media controller created [ 432.532801][ T6941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.557468][ T6941] dvb-usb: bulk message failed: -22 (6/0) [ 432.681987][ T6941] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 432.693561][ T6941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 432.845541][ T6941] dvb-usb: schedule remote query interval to 150 msecs. [ 432.845560][ T6941] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 432.866696][ T6941] usb 2-1: USB disconnect, device number 33 [ 432.917385][T10520] binder: BINDER_SET_CONTEXT_MGR already set [ 432.917409][T10520] binder: 10519:10520 ioctl 4018620d 200000000040 returned -16 [ 432.968935][ T6941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 433.113471][T10525] ubi: mtd0 is already attached to ubi31 [ 434.007736][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 434.407657][T10531] netlink: 'syz.3.1406': attribute type 5 has an invalid length. [ 435.064636][T10538] lo speed is unknown, defaulting to 1000 [ 436.039369][T10548] netlink: 'syz.0.1412': attribute type 3 has an invalid length. [ 436.047724][T10548] netlink: 'syz.0.1412': attribute type 3 has an invalid length. [ 436.064645][T10548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1412'. [ 436.515202][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 436.530564][T10551] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 437.091490][T10561] --map-set only usable from mangle table [ 437.729991][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1408'. [ 437.762086][T10570] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 437.772265][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1408'. [ 437.786743][T10570] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1418'. [ 438.019076][ T30] audit: type=1326 audit(1751441614.723:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10573 comm="syz.2.1420" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f238e929 code=0x0 [ 438.113950][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 438.644578][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.681996][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 438.708206][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 438.736964][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.940803][ T10] usb 5-1: config 0 descriptor?? [ 438.959119][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 438.970063][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 439.525871][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 439.536821][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 439.550913][T10581] tipc: Enabling of bearer rejected, failed to enable media [ 439.565067][ T10] usb 5-1: media controller created [ 439.598867][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.644508][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 439.674036][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 439.708141][T10592] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 439.721610][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 439.754986][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 439.783692][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 439.794016][T10595] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 439.813850][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 439.826886][T10595] veth0_vlan: left promiscuous mode [ 439.835920][ T10] usb 5-1: USB disconnect, device number 19 [ 439.864514][T10595] veth0_vlan: entered promiscuous mode [ 439.911201][T10595] team0: Device veth0_vlan failed to register rx_handler [ 439.918960][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 439.970386][T10598] Invalid logical block size (50331648) [ 440.002179][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.008713][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.079526][T10600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.549049][T10595] syz.0.1426 (10595) used greatest stack depth: 18648 bytes left [ 440.938854][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 440.977760][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1432'. [ 442.615247][T10622] sp0: Synchronizing with TNC [ 444.131921][T10637] binder: 10636:10637 ioctl 4018620d 0 returned -22 [ 444.153516][T10639] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 444.166748][T10639] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1440'. [ 444.186187][T10641] tipc: Started in network mode [ 444.191186][T10641] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711 [ 444.200674][T10641] tipc: Enabling of bearer rejected, failed to enable media [ 444.209879][T10637] binder: 10636:10637 ioctl c0306201 200000000240 returned -11 [ 444.294351][ T6941] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 444.348847][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 444.465054][ T6941] usb 2-1: Using ep0 maxpacket: 16 [ 444.476486][ T6941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.494055][ T5822] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 444.503287][ T6941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.523518][ T6941] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 444.544578][ T6941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.568188][ T6941] usb 2-1: config 0 descriptor?? [ 444.670548][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.687866][ T5822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 444.712195][ T5822] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 444.739421][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.771276][ T5822] usb 5-1: config 0 descriptor?? [ 444.851633][ T5822] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 444.851681][ T5822] dvb-usb: bulk message failed: -22 (3/0) [ 445.108717][ T5822] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.161046][ T5822] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.193952][ T5822] usb 5-1: media controller created [ 445.285926][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.395054][ T6941] hid (null): global environment stack underflow [ 445.414816][ T5822] dvb-usb: bulk message failed: -22 (6/0) [ 445.437146][ T5822] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 445.472813][ T5822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 445.524350][ T5822] dvb-usb: schedule remote query interval to 150 msecs. [ 445.622902][ T6941] usb 2-1: string descriptor 0 read error: -71 [ 445.654820][ T5822] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 445.657593][ T6941] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 445.671141][ T6941] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32 [ 445.747424][T10671] No such timeout policy "syz1" [ 445.801839][ T5822] usb 5-1: USB disconnect, device number 20 [ 446.209077][ T6941] usb 2-1: USB disconnect, device number 34 [ 446.259426][ T5822] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 447.803976][ T5911] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 448.733893][ T5911] usb 5-1: device descriptor read/64, error -71 [ 449.016283][T10701] binder: 10700:10701 ioctl c0306201 2000000003c0 returned -14 [ 449.036671][ T5911] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 450.034660][ T5911] usb 5-1: device descriptor read/64, error -71 [ 450.218535][ T5911] usb usb5-port1: attempt power cycle [ 450.575290][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.344910][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.373896][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 451.605344][T10735] netlink: 'syz.1.1469': attribute type 9 has an invalid length. [ 451.643486][ T5911] usb 5-1: device descriptor read/8, error -71 [ 452.084738][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 453.150435][ T30] audit: type=1804 audit(1751441629.853:2640): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1475" name="file0" dev="ramfs" ino=26233 res=1 errno=0 [ 453.170209][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.465315][T10764] tipc: Enabling of bearer rejected, failed to enable media [ 453.943944][ T5911] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 454.733800][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 454.745465][ T5911] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.778831][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 454.802940][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 2.00 [ 454.983749][ T5911] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 454.992436][ T5911] usb 4-1: Manufacturer: syz [ 455.004632][ T5911] usb 4-1: config 0 descriptor?? [ 455.122742][T10784] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 455.748596][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 455.779477][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 455.837532][ T5911] usb 4-1: USB disconnect, device number 29 [ 455.970003][T10793] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1486'. [ 456.764568][T10801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1489'. [ 457.552178][T10813] block device autoloading is deprecated and will be removed. [ 457.692223][T10818] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.053812][ T5933] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 458.203850][ T5933] usb 2-1: device descriptor read/64, error -71 [ 458.273817][ T6941] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 458.359468][T10848] netlink: 'syz.4.1503': attribute type 10 has an invalid length. [ 458.369320][T10848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1503'. [ 458.461806][ T5933] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 458.475373][ T6941] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 458.483585][ T6941] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 458.512265][ T6941] usb 4-1: config 8 has no interface number 0 [ 458.526292][ T6941] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 458.544697][ T6941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.552724][ T6941] usb 4-1: Product: syz [ 458.561930][T10852] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024b71f80 pfn:0x31ed2 [ 458.703983][ T5933] usb 2-1: device descriptor read/64, error -71 [ 458.834160][T10852] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 458.842979][T10852] memcg:ffff88807fa31900 [ 458.844088][ T5933] usb usb2-port1: attempt power cycle [ 458.873143][ T6941] usb 4-1: Manufacturer: syz [ 458.880666][ T6941] usb 4-1: SerialNumber: syz [ 458.885370][T10852] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 458.893580][T10852] raw: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 458.943848][T10852] raw: ffff888024b71f80 0000000000000000 00000001ffffffff ffff88807fa31900 [ 458.952488][T10852] head: 00fff00000000041 0000000000000000 dead000000000122 0000000000000000 [ 459.003750][T10852] head: ffff888024b71f80 0000000000000000 00000001ffffffff ffff88807fa31900 [ 459.012733][T10852] head: 00fff00000000201 ffffea0000c7b481 00000000ffffffff 00000000ffffffff [ 459.028850][T10852] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 459.041438][T10852] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 459.056069][T10852] page_owner tracks the page as allocated [ 459.062199][T10852] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 10852, tgid 10850 (syz.4.1504), ts 458561909028, free_ts 458320767636 [ 459.090717][T10852] post_alloc_hook+0x240/0x2a0 [ 459.095897][T10852] get_page_from_freelist+0x21d5/0x22b0 [ 459.121939][T10852] __alloc_frozen_pages_noprof+0x181/0x370 [ 459.145251][ T6941] usb 4-1: USB disconnect, device number 30 [ 459.163879][T10852] alloc_pages_mpol+0x232/0x4a0 [ 459.168754][T10852] alloc_pages_noprof+0xa9/0x190 [ 459.194182][T10852] folio_alloc_noprof+0x1e/0x30 [ 459.194418][ T5933] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 459.199069][T10852] filemap_alloc_folio_noprof+0xdf/0x470 [ 459.240916][T10852] page_cache_ra_order+0x5e5/0xc70 [ 459.254672][ T5933] usb 2-1: device descriptor read/8, error -71 [ 459.261129][T10852] filemap_fault+0x59e/0x1200 [ 459.273774][T10852] __do_fault+0x135/0x390 [ 459.278146][T10852] __handle_mm_fault+0x198b/0x5620 [ 459.283268][T10852] handle_mm_fault+0x2d5/0x7f0 [ 459.298662][T10852] do_user_addr_fault+0x764/0x1390 [ 459.304927][T10852] exc_page_fault+0x76/0xf0 [ 459.309765][T10852] asm_exc_page_fault+0x26/0x30 [ 459.315737][T10852] page last free pid 10840 tgid 10840 stack trace: [ 459.323004][T10852] __free_frozen_pages+0xc65/0xe60 [ 459.328902][T10852] pagetable_dtor_free+0x2d2/0x3b0 [ 459.335113][T10852] __mmdrop+0xb5/0x460 [ 459.339445][T10852] exit_mm+0x1da/0x2c0 [ 459.345683][T10852] do_exit+0x648/0x22e0 [ 459.350409][T10852] do_group_exit+0x21c/0x2d0 [ 459.352703][T10859] tmpfs: Bad value for 'mpol' [ 459.375109][T10852] __x64_sys_exit_group+0x3f/0x40 [ 459.380146][T10852] x64_sys_call+0x21ba/0x21c0 [ 459.385289][T10852] do_syscall_64+0xfa/0x3b0 [ 459.389871][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.400553][T10852] ------------[ cut here ]------------ [ 459.406119][T10852] kernel BUG at mm/filemap.c:868! [ 459.411745][T10852] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 459.418012][T10852] CPU: 1 UID: 0 PID: 10852 Comm: syz.4.1504 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 459.430072][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 459.440123][T10852] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 459.446179][T10852] Code: fe c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 4b 99 0e 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 34 99 0e 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 1d 99 0e 00 [ 459.465777][T10852] RSP: 0018:ffffc9001cdb7320 EFLAGS: 00010246 [ 459.471840][T10852] RAX: ba93d548d2ede600 RBX: 0000000000000001 RCX: 0000000000000000 [ 459.479807][T10852] RDX: 0000000000000007 RSI: ffffffff8d96e77b RDI: 00000000ffffffff [ 459.487772][T10852] RBP: ffffc9001cdb7488 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 459.495735][T10852] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffffea0000c7b480 [ 459.503701][T10852] R13: dffffc0000000000 R14: ffffea0000c7b488 R15: 0000000000000004 [ 459.511676][T10852] FS: 00007f404c1be6c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 459.520597][T10852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.527165][T10852] CR2: 00007f33d31d5d58 CR3: 0000000058f60000 CR4: 00000000003526f0 [ 459.535127][T10852] Call Trace: [ 459.538393][T10852] [ 459.541319][T10852] ? percpu_ref_put+0x19/0x180 [ 459.546081][T10852] ? __pfx___filemap_add_folio+0x10/0x10 [ 459.551707][T10852] ? percpu_ref_put+0xf9/0x180 [ 459.556465][T10852] filemap_add_folio+0xd5/0x270 [ 459.561299][T10852] page_cache_ra_order+0x74c/0xc70 [ 459.566408][T10852] filemap_fault+0x59e/0x1200 [ 459.571073][T10852] ? __pfx_filemap_fault+0x10/0x10 [ 459.576173][T10852] __do_fault+0x135/0x390 [ 459.580494][T10852] __handle_mm_fault+0x198b/0x5620 [ 459.585596][T10852] ? __pfx___handle_mm_fault+0x10/0x10 [ 459.591045][T10852] ? find_vma+0xe7/0x160 [ 459.595278][T10852] ? __pfx_find_vma+0x10/0x10 [ 459.599947][T10852] handle_mm_fault+0x2d5/0x7f0 [ 459.604704][T10852] do_user_addr_fault+0x764/0x1390 [ 459.609813][T10852] exc_page_fault+0x76/0xf0 [ 459.614312][T10852] asm_exc_page_fault+0x26/0x30 [ 459.619149][T10852] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 459.624945][T10852] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 459.644545][T10852] RSP: 0018:ffffc9001cdb7b88 EFLAGS: 00050246 [ 459.650629][T10852] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 459.658674][T10852] RDX: 0000000000000000 RSI: ffffc9001cdb7c20 RDI: 0000200000019680 [ 459.666636][T10852] RBP: ffffc9001cdb7c90 R08: ffffc9001cdb7c27 R09: 1ffff920039b6f84 [ 459.674596][T10852] R10: dffffc0000000000 R11: fffff520039b6f85 R12: 0000200000019688 [ 459.682560][T10852] R13: 00007ffffffff000 R14: ffffc9001cdb7c20 R15: 0000200000019680 [ 459.690534][T10852] _copy_to_user+0x8a/0xb0 [ 459.694962][T10852] msr_read+0x177/0x250 [ 459.699113][T10852] ? __pfx_msr_read+0x10/0x10 [ 459.703788][T10852] ? security_file_permission+0x75/0x290 [ 459.709411][T10852] ? rw_verify_area+0x258/0x650 [ 459.714250][T10852] ? __pfx_msr_read+0x10/0x10 [ 459.718914][T10852] vfs_read+0x1fd/0x980 [ 459.723059][T10852] ? __pfx_vfs_read+0x10/0x10 [ 459.727724][T10852] ? __fget_files+0x2a/0x420 [ 459.732304][T10852] ? __fget_files+0x2a/0x420 [ 459.736882][T10852] ? __fget_files+0x3a0/0x420 [ 459.741553][T10852] ? __fget_files+0x2a/0x420 [ 459.746228][T10852] ksys_read+0x145/0x250 [ 459.750461][T10852] ? __pfx_ksys_read+0x10/0x10 [ 459.755211][T10852] ? rcu_is_watching+0x15/0xb0 [ 459.759970][T10852] ? do_syscall_64+0xbe/0x3b0 [ 459.764649][T10852] do_syscall_64+0xfa/0x3b0 [ 459.769158][T10852] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.774358][T10852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.780436][T10852] ? clear_bhb_loop+0x60/0xb0 [ 459.785117][T10852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.791024][T10852] RIP: 0033:0x7f404b38e929 [ 459.795432][T10852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.815032][T10852] RSP: 002b:00007f404c1be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.823434][T10852] RAX: ffffffffffffffda RBX: 00007f404b5b6080 RCX: 00007f404b38e929 [ 459.831390][T10852] RDX: 0000000000018ff0 RSI: 0000200000019680 RDI: 0000000000000009 [ 459.839348][T10852] RBP: 00007f404b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 459.847311][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.855267][T10852] R13: 0000000000000000 R14: 00007f404b5b6080 R15: 00007ffdce7348c8 [ 459.863235][T10852] [ 459.866250][T10852] Modules linked in: [ 459.871177][T10852] ---[ end trace 0000000000000000 ]--- [ 459.951250][T10852] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0 [ 459.957378][T10852] Code: fe c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 4b 99 0e 00 90 0f 0b e8 03 fe c8 ff 4c 89 e7 48 c7 c6 00 2e 94 8b e8 34 99 0e 00 90 <0f> 0b e8 ec fd c8 ff 4c 89 e7 48 c7 c6 20 37 94 8b e8 1d 99 0e 00 [ 459.977265][T10852] RSP: 0018:ffffc9001cdb7320 EFLAGS: 00010246 [ 459.983349][T10852] RAX: ba93d548d2ede600 RBX: 0000000000000001 RCX: 0000000000000000 [ 459.991638][T10852] RDX: 0000000000000007 RSI: ffffffff8d96e77b RDI: 00000000ffffffff [ 459.999724][T10852] RBP: ffffc9001cdb7488 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 460.007968][ T5933] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 460.015820][T10852] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffffea0000c7b480 [ 460.023994][T10852] R13: dffffc0000000000 R14: ffffea0000c7b488 R15: 0000000000000004 [ 460.034235][T10852] FS: 00007f404c1be6c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 460.043504][T10852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.051729][T10852] CR2: 0000001b2f71eff8 CR3: 0000000058f60000 CR4: 00000000003526f0 [ 460.063638][T10852] Kernel panic - not syncing: Fatal exception [ 460.069976][T10852] Kernel Offset: disabled [ 460.074294][T10852] Rebooting in 86400 seconds..