last executing test programs: 50m42.324987414s ago: executing program 4 (id=334): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') close(0x3) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 50m41.963979053s ago: executing program 4 (id=336): timer_create(0x3, &(0x7f0000000140)={0x0, 0xa, 0x0, @thr={&(0x7f0000000000)="4c6d978c4804e2d6f000c6ede7bd7db2067f3d27f0723dd187cf657384ac7510455cd6bd9c58497095b975f6176e3f116c6d909f5f9511d2bc0a13e0fc9879c746e66a2fe6c3611f7cae2fa23cc61be2509fe6571d59dd6c941fa8", &(0x7f00000000c0)="dcf99bbc26176bae10c3a0977232c3a1c60d0b9588b6b80b8ed40b6dd00212df3c18669e25479c9d9749d8ab04f7435488162c8ad83b3368d7644071b5874cf0b2dd603484c6f7efd26eb8ff4228f225d6030a123d"}}, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x6e20, 0x3, 'lblcr\x00', 0x16, 0x0, 0x26}, {@loopback, 0x4e21, 0x3, 0xc25, 0x9, 0xfffffffb}}, 0x44) 50m40.821565352s ago: executing program 4 (id=341): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f40)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x123c40, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f27, 0x0, 0x10000, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x5, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x1, 0x8, 0xffffffff, 0x0, 0xfffffff8]}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) accept4(r0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x13}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r3, &(0x7f0000003240)=[{{&(0x7f0000000200)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000b80)=""/67, 0x43}, 0x4}, {{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000021c0), 0x0, &(0x7f0000002240)=""/4096, 0x1000}, 0x7}], 0x2, 0x2, 0x0) 50m38.374014805s ago: executing program 4 (id=349): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 50m38.216918037s ago: executing program 4 (id=351): timer_create(0x3, &(0x7f0000000140)={0x0, 0xa, 0x0, @thr={&(0x7f0000000000)="4c6d978c4804e2d6f000c6ede7bd7db2067f3d27f0723dd187cf657384ac7510455cd6bd9c58497095b975f6176e3f116c6d909f5f9511d2bc0a13e0fc9879c746e66a2fe6c3611f7cae2fa23cc61be2509fe6571d59dd6c941fa8", &(0x7f00000000c0)="dcf99bbc26176bae10c3a0977232c3a1c60d0b9588b6b80b8ed40b6dd00212df3c18669e25479c9d9749d8ab04f7435488162c8ad83b3368d7644071b5874cf0b2dd603484c6f7efd26eb8ff4228f225d6030a123d"}}, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000280)={{0x84, @private=0xa010100, 0x6e20, 0x3, 'lblcr\x00', 0x16, 0x0, 0x26}, {@loopback, 0x4e21, 0x3, 0xc25, 0x9, 0xfffffffb}}, 0x44) 50m37.763951446s ago: executing program 4 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000008c0)=""/31, 0x1f) 50m37.529367021s ago: executing program 32 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000008c0)=""/31, 0x1f) 49m55.437479576s ago: executing program 2 (id=584): socket$netlink(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) 49m55.167979498s ago: executing program 2 (id=586): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49m55.040460599s ago: executing program 2 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @pic={0x0, 0x1, 0x5, 0x14, 0x9, 0x7, 0xe, 0x29, 0xd, 0x3, 0xd, 0x3a, 0x0, 0x80, 0x7, 0xf8}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x8, 0x4}) 49m54.69601575s ago: executing program 2 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 49m54.548157828s ago: executing program 2 (id=599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49m54.086644851s ago: executing program 2 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 49m52.521933386s ago: executing program 33 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 49m42.804228258s ago: executing program 6 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 49m42.005683064s ago: executing program 6 (id=677): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x3a, 0x20, 0x14, 0x18, 0xb, 0x63, 0x4, 0xf5, 0x1}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x400, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000240)=0x3) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) dup(r0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) 49m41.321282805s ago: executing program 6 (id=687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x2000, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000100)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x9, 0x40001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44012}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x88, 0xc5fe, @name="e1bd211c70b88306d9f4df002b8116795efe5abdca7911a83deb7083301758b8"}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000800018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000cf4900000000000056080000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x87, 0x0, 0x0, 0x41100, 0x2e, '\x00', r5, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 49m40.974411882s ago: executing program 34 (id=687): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x2000, 0xfffffffd, 0x1}, 0x10) write(r0, &(0x7f0000000100)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x9, 0x40001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44012}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, 0x5, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x88, 0xc5fe, @name="e1bd211c70b88306d9f4df002b8116795efe5abdca7911a83deb7083301758b8"}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000800018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000cf4900000000000056080000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x87, 0x0, 0x0, 0x41100, 0x2e, '\x00', r5, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 49m23.651750764s ago: executing program 1 (id=793): openat$ptp0(0xffffffffffffff9c, 0x0, 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x104}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) close_range(r0, r0, 0x0) 49m23.352098278s ago: executing program 1 (id=796): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174, 0x0, 0x7}]}) 49m23.24346301s ago: executing program 1 (id=797): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000003c0)={@local, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x0, 0x6, 0x8}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000001840)) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') link(0x0, &(0x7f00000001c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0xaf4, @private0}, 0x1c) 49m21.98127274s ago: executing program 1 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) 49m21.864771246s ago: executing program 1 (id=800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xffffffffffffffcb, &(0x7f0000000200)=0x400000bd1) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) 49m19.427282856s ago: executing program 1 (id=824): mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000300)=0x1) 49m19.024539375s ago: executing program 35 (id=824): mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000300)=0x1) 41m43.236812827s ago: executing program 3 (id=3409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) 41m42.083113857s ago: executing program 3 (id=3412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 41m40.427851785s ago: executing program 3 (id=3417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$VT_SETMODE(r3, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring) 41m39.418342913s ago: executing program 3 (id=3421): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 41m39.347137685s ago: executing program 3 (id=3422): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 41m38.996001271s ago: executing program 3 (id=3424): syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) socket$nl_generic(0x10, 0x3, 0x10) 41m38.564811827s ago: executing program 36 (id=3424): syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) socket$nl_generic(0x10, 0x3, 0x10) 13.147049929s ago: executing program 7 (id=9515): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000b80), 0x8, 0x80540) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, 0x0, 0x0, 0x0) 11.398370463s ago: executing program 7 (id=9521): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) socketpair$unix(0x1, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 10.287125003s ago: executing program 0 (id=9522): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) syz_open_dev$media(0x0, 0x4007, 0x0) socket$kcm(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x900}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r4}, 0x38) 9.892435184s ago: executing program 7 (id=9524): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x7f}, @rr={0x7, 0x3, 0xa6}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 8.661614158s ago: executing program 7 (id=9527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r4, 0x8002}], 0x1, 0x0, 0x0, 0x0) r6 = getpgid(r2) fcntl$setown(r3, 0x8, r6) tkill(r2, 0x13) 6.166595429s ago: executing program 0 (id=9533): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce0ff000706010800"/18], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 5.401177729s ago: executing program 7 (id=9536): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200), 0x3e, 0x4004010) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) syz_open_dev$I2C(0x0, 0x1, 0x402) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$can_j1939(0x1d, 0x2, 0x7) 4.86077012s ago: executing program 7 (id=9539): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x5, 0x8, 0xfffffffc, 0x7, 0xd, 0x9}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000992000/0x2000)=nil, 0x2000, 0x2, 0x30, 0xffffffffffffffff, 0x8293a000) lseek(0xffffffffffffffff, 0x36, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000600000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x3, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) r7 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r7) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fedbdf250200000014000700fe80000000000000000000000000002806000a004e200000070001004e210000090009000000000000000000000000000000000014000900ff020000000000000000000002892e"], 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 3.923852786s ago: executing program 5 (id=9548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 3.828202973s ago: executing program 5 (id=9549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b282f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4de517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1bdb58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000041dcc4cabfc4a21604f0b80da4ec5500000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae6e5c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace201020875c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2f95b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f65918192fb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435477faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b8085b0ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e07f9581b40470a7c2fa89cc3ef72a19760b89ded2e546f4966b51c2985101f2248f60ad8119e4db4ade09ebd23fdb750ffccba20bc0e0f52c3316767bb9f67f7e714df5e462bcfc35f3a79147f62f9227441cb3ffb35f4e4c69b04b1399efbeb4b682d6facea9fe1c456a1fb9173833107a38991abac8b0e616f11a2c3e265c484fbc6522e9894dc3b5989b7d585c56778c77c6595b7482dfa90bb818ebd3b0b352d3f48ab947a1240842d592fd9c2f13df205e8974919162421548357a8823bd322e6562fa3e7fb7c56ee00e246a98710b9a710103b3df69655b38dcc196156a16fcc14d8ddb4acf3506adc95c742919b83fd57c8b52956e93104cddd1226ca85a29542b9ea606c72d5339a7d30f23ffcd665b85e4c90d526b33ed854543c2a1d189cd6f319644146c5fe91639d50f2083d46fd82e41bc7d528f18be618904d683726e3eee93388cc78d0df624361bb80afc96b823971fcbbb859d4c2de31f03f884ea774e4abe011389557b2429c85cf795e0a82c94ffc11616d7c8b6939eed3f0e8df5dcc75984430b2a497d78824e539e8f7944b459ae45e7ce803495686984aa91745b8cfb1f80c07c194c4a4327e02cea5fd2ef6041cf053ee5f9829410d150"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c6ce6b18987f7c57ee005009900", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.650730304s ago: executing program 8 (id=9551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.043023127s ago: executing program 0 (id=9552): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x81, 0xac84, 0x1, 0x204, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x4}, 0x50) 2.970688758s ago: executing program 9 (id=9553): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711833000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.919194654s ago: executing program 8 (id=9554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2.846351248s ago: executing program 5 (id=9555): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x1}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0x1, 0x40}, 0x28) 2.779998539s ago: executing program 0 (id=9556): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.779513993s ago: executing program 8 (id=9557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004dec70000000000fd27cd261c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4a0}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xffff, 0x0, r0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) 2.779133125s ago: executing program 9 (id=9558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 2.729275992s ago: executing program 8 (id=9559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.632865864s ago: executing program 5 (id=9560): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2d, 'pids'}]}, 0x6) 2.583748145s ago: executing program 9 (id=9561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000ff90000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b5d5650089000000dbaaf0ff000000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000004000008500000007000000b70000000000000095000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbee3, 0x10, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x40, 0x1fa, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) 2.583368158s ago: executing program 0 (id=9562): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0168c0761901aaaaaaaaaa1686dd60f53a0400403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe8000000000000000000000000000bb3a000000000000000001000000000000"], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="02160803050000002abd7000fde6df2502000100000004d60105140101000020010018000217abbaaa22ce035d2a7987040000"], 0x28}}, 0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x30, 0x0, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_RMID(r7, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101) 2.565626811s ago: executing program 8 (id=9563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000891) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0), 0x0, 0x4001c00) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) getpriority(0x2, 0x0) geteuid() syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.199313228s ago: executing program 5 (id=9564): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') 1.583961357s ago: executing program 9 (id=9565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0x8, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) close_range(r4, 0xffffffffffffffff, 0x400000000000000) syz_open_dev$tty1(0xc, 0x4, 0x2) 570.175376ms ago: executing program 9 (id=9566): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) 450.767939ms ago: executing program 0 (id=9567): socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x64000044) creat(&(0x7f0000000400)='./bus\x00', 0x0) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockname$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0) lseek(r2, 0x164, 0x0) 395.972667ms ago: executing program 8 (id=9568): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) 292.559028ms ago: executing program 5 (id=9569): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) setgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) dup(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 0s ago: executing program 9 (id=9570): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x488c2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) kernel console output (not intermixed with test programs): mm="syz.7.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2907.874770][ T6509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2907.904999][ T30] audit: type=1326 audit(1755122973.655:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.7.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2907.933443][ T30] audit: type=1326 audit(1755122973.715:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.7.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2908.036953][ T30] audit: type=1326 audit(1755122973.715:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.7.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2908.080204][ T30] audit: type=1326 audit(1755122973.715:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.7.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2908.109210][ T30] audit: type=1326 audit(1755122973.715:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6588 comm="syz.7.8630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2908.143760][ T6509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2908.538908][ T6510] Bluetooth: hci3: command tx timeout [ 2908.994087][ T6509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2909.016212][T31009] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 2909.170785][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 2909.222612][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 2909.229725][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2909.252902][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 2909.260012][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2909.292841][T31009] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2909.307883][T31009] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2909.324904][T31009] usb 10-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 2909.434423][T31009] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2909.456288][T31009] usb 10-1: config 0 descriptor?? [ 2910.844457][ T6509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2911.017368][T31009] usbhid 10-1:0.0: can't add hid device: -71 [ 2911.033631][ T6509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2911.047117][T31009] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2911.118193][T31009] usb 10-1: USB disconnect, device number 106 [ 2912.182453][ T6509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2912.897450][ T6637] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2913.490365][ T6509] veth0_vlan: entered promiscuous mode [ 2913.502050][ T6509] veth1_vlan: entered promiscuous mode [ 2913.519616][ T6660] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2913.713265][ T6509] veth0_macvtap: entered promiscuous mode [ 2913.743313][ T6666] ubi: mtd0 is already attached to ubi31 [ 2914.019855][ T6509] veth1_macvtap: entered promiscuous mode [ 2914.036209][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2914.056377][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2914.070601][ T1549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.081614][ T1549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.134839][ T1549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.187124][ T1549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.418908][ T1549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.437258][ T1549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2914.530423][ T7287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.538704][ T7287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2915.544649][ T1002] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2916.110575][ T6691] fuse: Bad value for 'fd' [ 2916.154371][ T1002] usb 9-1: Using ep0 maxpacket: 32 [ 2916.166798][ T1002] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 2916.178850][ T1002] usb 9-1: config 0 has no interface number 0 [ 2916.187885][ T1002] usb 9-1: config 0 interface 89 has no altsetting 0 [ 2916.205778][ T1002] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 2916.234247][ T1002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2916.243209][ T1002] usb 9-1: Product: syz [ 2916.247943][ T1002] usb 9-1: Manufacturer: syz [ 2916.299386][ T1002] usb 9-1: SerialNumber: syz [ 2916.320629][ T1002] usb 9-1: config 0 descriptor?? [ 2916.336779][ T1002] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2916.346806][ T1002] em28xx 9-1:0.89: Video interface 89 found: bulk [ 2916.803435][ T6704] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8659'. [ 2917.016901][ T1002] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 2917.435936][ T1002] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2917.561427][ T1660] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2917.608392][ T1002] em28xx 9-1:0.89: board has no eeprom [ 2917.943549][ T1660] usb 1-1: Using ep0 maxpacket: 32 [ 2918.093561][ T1002] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 2918.100807][ T1002] em28xx 9-1:0.89: analog set to bulk mode. [ 2918.119441][T23421] em28xx 9-1:0.89: Registering V4L2 extension [ 2918.129793][ T1002] usb 9-1: USB disconnect, device number 4 [ 2918.142032][ T1660] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2918.157342][ T1660] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2918.164776][ T1002] em28xx 9-1:0.89: Disconnecting em28xx [ 2918.192735][T23421] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 2918.216685][T23421] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 2918.231189][T23421] em28xx 9-1:0.89: No AC97 audio processor [ 2918.252366][T23421] usb 9-1: Decoder not found [ 2918.269170][T23421] em28xx 9-1:0.89: failed to create media graph [ 2918.285779][T23421] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 2918.305294][T23421] em28xx 9-1:0.89: Registering snapshot button... [ 2918.353510][ T1660] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2918.369887][ T1660] usb 1-1: config 0 descriptor?? [ 2918.385925][T23421] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input109 [ 2918.400937][T23421] em28xx 9-1:0.89: Remote control support is not available for this card. [ 2918.480357][ T1002] em28xx 9-1:0.89: Closing input extension [ 2918.488357][ T1002] em28xx 9-1:0.89: Deregistering snapshot button [ 2920.015291][ T1002] em28xx 9-1:0.89: Freeing device [ 2920.229813][ T1660] corsair-psu 0003:1B1C:1C09.003A: unknown main item tag 0x0 [ 2920.253109][ T1660] corsair-psu 0003:1B1C:1C09.003A: unknown main item tag 0x0 [ 2920.272227][ T1660] corsair-psu 0003:1B1C:1C09.003A: unknown main item tag 0x0 [ 2920.302296][ T1660] corsair-psu 0003:1B1C:1C09.003A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 2920.695844][ C0] usb 1-1: input irq status -75 received [ 2920.912052][ T1660] corsair-psu 0003:1B1C:1C09.003A: unable to initialize device (-71) [ 2920.944812][ T1660] corsair-psu 0003:1B1C:1C09.003A: probe with driver corsair-psu failed with error -71 [ 2921.089707][ T6743] ubi: mtd0 is already attached to ubi31 [ 2921.198545][ T1660] usb 1-1: USB disconnect, device number 3 [ 2921.731078][ T6351] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 2922.141360][ T6351] usb 10-1: Using ep0 maxpacket: 16 [ 2922.153027][ T6351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2922.165427][ T6351] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2922.188311][ T6351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2922.204602][ T6351] usb 10-1: config 0 descriptor?? [ 2924.155945][ T6351] usbhid 10-1:0.0: can't add hid device: -71 [ 2924.168846][ T6351] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2924.200941][ T6351] usb 10-1: USB disconnect, device number 107 [ 2924.250579][T23421] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2924.336004][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2924.462662][T23421] usb 1-1: config 0 has an invalid interface number: 173 but max is 0 [ 2924.499788][T23421] usb 1-1: config 0 has no interface number 0 [ 2924.744456][T23421] usb 1-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 2924.839785][T23421] usb 1-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 2924.853247][T23421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2924.863231][T23421] usb 1-1: config 0 descriptor?? [ 2924.869541][ T6768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2925.141695][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8677'. [ 2925.875476][T23421] hdpvr 1-1:0.173: unexpected answer of status request, len -71 [ 2925.889616][T23421] hdpvr 1-1:0.173: device init failed [ 2925.972744][T23421] hdpvr 1-1:0.173: probe with driver hdpvr failed with error -12 [ 2926.035102][T23421] usb 1-1: USB disconnect, device number 4 [ 2926.872046][ T6802] Mount JFS Failure: -22 [ 2928.368874][ T6817] ubi: mtd0 is already attached to ubi31 [ 2931.126907][T23421] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2931.186883][ T1002] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2931.296833][T23421] usb 9-1: Using ep0 maxpacket: 32 [ 2931.314397][T23421] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2931.330629][T23421] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2931.463700][ T1002] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 2931.475585][T23421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2931.494976][ T1002] usb 6-1: config 0 has no interface number 0 [ 2931.969506][T23421] usb 9-1: config 0 descriptor?? [ 2931.984654][ T1002] usb 6-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 2932.007096][ T1002] usb 6-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 2932.052679][ T1002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.063707][ T1002] usb 6-1: config 0 descriptor?? [ 2932.073311][ T6834] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2932.340740][ T6849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8697'. [ 2932.712930][ T1002] hdpvr 6-1:0.173: unexpected answer of status request, len -71 [ 2932.726239][T23421] corsair-psu 0003:1B1C:1C09.003B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0 [ 2932.776131][ T1002] hdpvr 6-1:0.173: device init failed [ 2932.790308][ T1002] hdpvr 6-1:0.173: probe with driver hdpvr failed with error -12 [ 2932.917723][ T1002] usb 6-1: USB disconnect, device number 87 [ 2933.318261][T23421] corsair-psu 0003:1B1C:1C09.003B: unable to initialize device (-71) [ 2933.345826][T23421] corsair-psu 0003:1B1C:1C09.003B: probe with driver corsair-psu failed with error -71 [ 2933.388917][T23421] usb 9-1: USB disconnect, device number 5 [ 2934.064451][ T6872] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8707'. [ 2937.054048][T23421] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2937.380371][T23421] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 2937.395900][T23421] usb 6-1: config 0 has no interface number 0 [ 2937.420562][T23421] usb 6-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 2937.431830][T23421] usb 6-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 2937.444809][T23421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.928259][T23421] usb 6-1: config 0 descriptor?? [ 2938.015451][ T6904] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2938.026544][ T1207] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2938.339605][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 2938.365801][ T1207] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2938.811572][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8715'. [ 2938.876745][ T1207] usb 1-1: config 4 interface 0 has no altsetting 0 [ 2939.096370][ T1207] usb 1-1: string descriptor 0 read error: -22 [ 2939.103979][ T1207] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2939.127659][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2939.264276][ T6927] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8723'. [ 2939.376384][ T1207] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2939.439679][T23421] hdpvr 6-1:0.173: unexpected answer of status request, len -71 [ 2939.466864][ T1207] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2939.515155][T23421] hdpvr 6-1:0.173: device init failed [ 2939.572702][T23421] hdpvr 6-1:0.173: probe with driver hdpvr failed with error -12 [ 2939.599849][ T1207] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2939.736626][T23421] usb 6-1: USB disconnect, device number 88 [ 2939.753184][ T1207] usb 1-1: media controller created [ 2940.017005][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2940.077871][ T1207] zl10353_read_register: readreg error (reg=127, ret==0) [ 2940.119476][ T1207] usb 1-1: USB disconnect, device number 5 [ 2940.642038][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2940.642056][ T30] audit: type=1326 audit(1755123006.732:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.0.8727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad2278ebe9 code=0x0 [ 2940.948206][ T6951] /dev/nullb0: Can't open blockdev [ 2941.757025][ T6955] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2943.199939][ T6969] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2943.622141][T23421] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2943.862398][T23421] usb 9-1: Using ep0 maxpacket: 8 [ 2943.908984][T23421] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2944.148831][T23421] usb 9-1: config 4 interface 0 has no altsetting 0 [ 2944.193480][T23421] usb 9-1: string descriptor 0 read error: -22 [ 2944.209973][T23421] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2944.256452][T23421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2944.281304][T23421] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2944.321257][T23421] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2944.423415][T23421] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2944.443399][T23421] usb 9-1: media controller created [ 2944.510110][ T1207] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2944.539771][ T6964] usb 9-1: dvb_usb_au6610: wlen=0, aborting [ 2944.697719][T23421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2944.754894][T23421] zl10353_read_register: readreg error (reg=127, ret==0) [ 2944.842202][ T1207] usb 6-1: config 0 has an invalid interface number: 173 but max is 0 [ 2944.884982][T23421] usb 9-1: USB disconnect, device number 6 [ 2944.912799][ T1207] usb 6-1: config 0 has no interface number 0 [ 2945.078466][ T1207] usb 6-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 2945.165510][ T6992] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2945.597676][ T1207] usb 6-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 2945.612129][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2945.641123][ T1207] usb 6-1: config 0 descriptor?? [ 2945.648000][ T6980] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2945.924764][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8737'. [ 2946.269611][ T6977] block nbd7: shutting down sockets [ 2946.288375][ T1207] hdpvr 6-1:0.173: unexpected answer of status request, len -71 [ 2946.310819][ T1207] hdpvr 6-1:0.173: device init failed [ 2946.316356][ T1207] hdpvr 6-1:0.173: probe with driver hdpvr failed with error -12 [ 2946.343985][ T1207] usb 6-1: USB disconnect, device number 89 [ 2948.721838][ T1002] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2948.931935][ T1002] usb 1-1: Using ep0 maxpacket: 8 [ 2948.944115][ T1002] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2948.972806][ T1002] usb 1-1: config 4 interface 0 has no altsetting 0 [ 2949.197855][ T1002] usb 1-1: string descriptor 0 read error: -22 [ 2949.241434][ T7038] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2949.671968][ T1002] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2949.719207][ T1002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.741141][ T1002] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2949.776783][ T1002] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2949.825210][ T1002] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2949.913003][ T1002] usb 1-1: media controller created [ 2949.940011][ T1002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2950.871671][ T7063] fuse: Unknown parameter '0x0000000000000005' [ 2951.090894][ T1002] zl10353_read_register: readreg error (reg=127, ret==0) [ 2951.255396][ T1002] usb 1-1: USB disconnect, device number 6 [ 2953.159133][ T7094] overlayfs: missing 'lowerdir' [ 2953.703660][ T7104] overlayfs: missing 'lowerdir' [ 2956.949854][ T7137] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2957.534495][ T7144] netlink: 'syz.9.8782': attribute type 12 has an invalid length. [ 2957.933714][ T7144] netlink: 'syz.9.8782': attribute type 29 has an invalid length. [ 2957.982874][ T7144] netlink: 148 bytes leftover after parsing attributes in process `syz.9.8782'. [ 2958.006234][ T7144] netlink: 59 bytes leftover after parsing attributes in process `syz.9.8782'. [ 2958.739419][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2962.027239][ T1002] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2962.191421][ T1002] usb 6-1: Using ep0 maxpacket: 8 [ 2962.208455][ T1002] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2962.374208][ T1002] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2962.469645][ T1002] usb 6-1: string descriptor 0 read error: -22 [ 2962.478298][ T1002] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2962.489554][ T1002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.505018][ T1002] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2962.514694][ T1002] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2962.527397][ T1002] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2962.535354][ T1002] usb 6-1: media controller created [ 2962.580792][ T1002] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2963.721892][ T7214] /dev/nullb0: Can't open blockdev [ 2964.956922][ T1002] usb 6-1: USB disconnect, device number 90 [ 2968.045631][ T7259] Mount JFS Failure: -22 [ 2969.021404][ T7268] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8815'. [ 2969.075089][ T30] audit: type=1326 audit(1755123035.266:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2969.211473][ T30] audit: type=1326 audit(1755123035.266:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.208375][ T30] audit: type=1326 audit(1755123035.266:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.339899][ T30] audit: type=1326 audit(1755123035.266:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.422279][ T30] audit: type=1326 audit(1755123035.266:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.514147][ T30] audit: type=1326 audit(1755123035.266:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.636866][ T30] audit: type=1326 audit(1755123035.266:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.752616][ T30] audit: type=1326 audit(1755123035.266:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.876555][ T30] audit: type=1326 audit(1755123035.266:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2971.951932][ T30] audit: type=1326 audit(1755123035.266:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7261 comm="syz.8.8816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b898ebe9 code=0x7ffc0000 [ 2972.252035][ T7290] ubi: mtd0 is already attached to ubi31 [ 2975.055030][ T7317] overlayfs: missing 'lowerdir' [ 2975.313831][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2975.313848][ T30] audit: type=1326 audit(1755123041.459:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2975.454867][ T30] audit: type=1326 audit(1755123041.459:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2975.567759][ T30] audit: type=1326 audit(1755123041.459:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2975.607941][ T30] audit: type=1326 audit(1755123041.459:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2975.944156][ T30] audit: type=1326 audit(1755123041.459:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2975.968527][ T30] audit: type=1326 audit(1755123041.459:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2975.993636][ T30] audit: type=1326 audit(1755123041.459:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2976.024416][ T9903] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 2976.035857][ T30] audit: type=1326 audit(1755123041.459:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2976.109414][ T30] audit: type=1326 audit(1755123041.469:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2976.194097][ T30] audit: type=1326 audit(1755123041.469:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7318 comm="syz.7.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f786958ebe9 code=0x7ffc0000 [ 2976.256735][ T9903] usb 10-1: config 0 has an invalid interface number: 173 but max is 0 [ 2976.453536][ T9903] usb 10-1: config 0 has no interface number 0 [ 2976.481649][ T9903] usb 10-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 2976.543288][ T9903] usb 10-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 2976.564280][ T9903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2976.583244][ T9903] usb 10-1: config 0 descriptor?? [ 2976.634583][ T7331] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2976.760967][ T1660] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2977.090590][ T1660] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2977.114088][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8837'. [ 2977.235361][ T1660] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2977.267011][ T9903] hdpvr 10-1:0.173: unexpected answer of status request, len -71 [ 2977.270244][ T1660] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2977.285531][ T1660] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2977.296818][ T1660] usb 6-1: Product: syz [ 2977.395789][ T1660] usb 6-1: Manufacturer: syz [ 2977.400908][ T1660] usb 6-1: SerialNumber: syz [ 2977.409191][ T1660] usb 6-1: config 0 descriptor?? [ 2977.420951][ T1660] usb 6-1: selecting invalid altsetting 0 [ 2977.426860][ T9903] hdpvr 10-1:0.173: device init failed [ 2977.432382][ T9903] hdpvr 10-1:0.173: probe with driver hdpvr failed with error -12 [ 2977.903466][ T9903] usb 10-1: USB disconnect, device number 108 [ 2978.433169][ T1660] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 2978.934438][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2978.945562][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.084392][ T1660] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2979.094695][ T1660] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2979.208625][ T1660] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2979.264504][ T1660] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2979.277834][ T1660] usb 8-1: Product: syz [ 2979.417050][ T1660] usb 8-1: Manufacturer: syz [ 2979.421790][ T1660] usb 8-1: SerialNumber: syz [ 2979.523734][ T7371] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2979.903670][ T1660] usb 8-1: config 0 descriptor?? [ 2979.914893][ T1660] usb 8-1: selecting invalid altsetting 0 [ 2981.333626][ T1660] usb 6-1: USB disconnect, device number 91 [ 2981.384585][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2981.454573][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2981.797711][ T7383] overlayfs: failed to resolve './file1': -2 [ 2983.310511][ T5959] usb 8-1: USB disconnect, device number 119 [ 2983.840551][ T1660] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2984.165419][ T1660] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2984.204956][ T1660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2984.424581][ T1660] usb 6-1: Product: syz [ 2984.433294][ T1660] usb 6-1: Manufacturer: syz [ 2984.437977][ T1660] usb 6-1: SerialNumber: syz [ 2984.488378][ T1660] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2984.623369][ T5959] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2985.287589][ T5904] usb 6-1: USB disconnect, device number 92 [ 2985.458880][ T7422] overlayfs: missing 'lowerdir' [ 2985.747464][ T5959] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2985.759620][ T5959] ath9k_htc: Failed to initialize the device [ 2985.782795][ T5904] usb 6-1: ath9k_htc: USB layer deinitialized [ 2986.204694][ T7434] syzkaller1: entered promiscuous mode [ 2986.226629][ T7434] syzkaller1: entered allmulticast mode [ 2987.698587][ T5904] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2987.968732][ T5904] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2987.978583][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.312616][ T5904] usb 6-1: Product: syz [ 2988.317995][ T5904] usb 6-1: Manufacturer: syz [ 2988.334335][ T5904] usb 6-1: SerialNumber: syz [ 2988.338317][T23421] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2988.366391][ T5904] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2988.382217][ T1660] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2988.489942][T23421] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2988.504168][T23421] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2988.515983][T23421] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2988.537089][T23421] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2988.546438][T23421] usb 9-1: Product: syz [ 2988.553653][T23421] usb 9-1: Manufacturer: syz [ 2988.580230][T23421] usb 9-1: SerialNumber: syz [ 2988.614890][T23421] usb 9-1: config 0 descriptor?? [ 2988.742598][T23421] usb 9-1: selecting invalid altsetting 0 [ 2988.978875][ T5904] usb 6-1: USB disconnect, device number 93 [ 2989.089559][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8874'. [ 2989.369563][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2989.450132][ T1660] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2989.475717][ T1660] ath9k_htc: Failed to initialize the device [ 2989.492170][ T5904] usb 6-1: ath9k_htc: USB layer deinitialized [ 2989.532570][ T7473] overlayfs: missing 'lowerdir' [ 2989.867958][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2990.208480][ T5904] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 2990.274603][ T1660] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2990.388975][ T5904] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2990.399050][ T5904] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2990.407452][ T5904] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2990.416610][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2990.426948][ T5904] usb 8-1: Product: syz [ 2990.431654][ T5904] usb 8-1: Manufacturer: syz [ 2990.436308][ T5904] usb 8-1: SerialNumber: syz [ 2990.441051][ T1660] usb 6-1: Using ep0 maxpacket: 16 [ 2990.449956][ T1660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2990.462850][ T5904] usb 8-1: config 0 descriptor?? [ 2990.470468][ T1660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2990.549655][ T5904] usb 8-1: selecting invalid altsetting 0 [ 2990.561179][ T1660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2990.586694][ T1660] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2990.598317][ T1660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2990.610174][ T1660] usb 6-1: config 0 descriptor?? [ 2991.034643][ T1660] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003C/input/input110 [ 2991.063916][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2991.072878][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2991.183705][T23421] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 2991.348487][T23421] usb 10-1: Using ep0 maxpacket: 16 [ 2991.374390][T23421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2991.389099][T23421] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2991.435193][ T5904] usb 9-1: USB disconnect, device number 7 [ 2991.439288][T23421] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2991.459704][T23421] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2991.470515][T23421] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2991.548266][T23421] usb 10-1: config 0 descriptor?? [ 2991.974090][T23421] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.003D/input/input111 [ 2992.299675][ T1660] microsoft 0003:045E:07DA.003C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2992.321613][ T1660] usb 6-1: USB disconnect, device number 94 [ 2992.348963][ T7510] fuse: Bad value for 'fd' [ 2992.595254][T23421] microsoft 0003:045E:07DA.003D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 2993.097230][ T9903] usb 10-1: USB disconnect, device number 109 [ 2993.182974][ T5904] usb 8-1: USB disconnect, device number 120 [ 2995.064835][ T5904] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 2995.234591][ T7544] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2995.842593][ T5904] usb 8-1: Using ep0 maxpacket: 16 [ 2996.018594][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2996.034948][ T5904] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2996.054925][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.091874][ T5904] usb 8-1: config 0 descriptor?? [ 2996.905727][ T5904] usbhid 8-1:0.0: can't add hid device: -71 [ 2996.922096][ T5904] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2996.936179][ T5904] usb 8-1: USB disconnect, device number 121 [ 2997.751868][ T7564] ALSA: mixer_oss: invalid OSS volume 'DI' [ 2998.524540][ T7569] fuse: Bad value for 'fd' [ 2998.992976][ T1660] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2999.651863][ T1660] usb 6-1: Using ep0 maxpacket: 16 [ 2999.670940][ T1660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2999.732719][ T1660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2999.892869][ T1660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2999.962400][ T1660] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3000.232520][ T1660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3000.252399][ T1002] usb 8-1: new low-speed USB device number 122 using dummy_hcd [ 3000.271792][ T1660] usb 6-1: config 0 descriptor?? [ 3000.542472][ T1002] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3000.582110][ T1002] usb 8-1: config 0 has no interface number 0 [ 3000.610899][ T1002] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3000.691220][ T1660] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003E/input/input112 [ 3000.708761][ T1002] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3001.565468][ T1002] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3001.577216][ T1002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3001.607481][ T1002] usb 8-1: config 0 descriptor?? [ 3001.652359][ T7588] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3001.666229][ T1002] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3001.922175][ T1002] usb 8-1: USB disconnect, device number 122 [ 3002.477296][ T1660] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 3002.550094][ T1660] usb 6-1: USB disconnect, device number 95 [ 3004.342634][T31290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3004.358419][T31290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3004.374326][T31290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3004.431438][T31290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3004.446798][T31290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3005.078577][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 3005.139986][ T1660] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 3005.309736][ T1660] usb 9-1: Using ep0 maxpacket: 16 [ 3005.343822][ T1660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3005.363329][ T1660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3005.376086][ T1660] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3005.389851][ T1660] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3005.399072][ T1660] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3005.416482][ T1660] usb 9-1: config 0 descriptor?? [ 3005.579985][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 3005.587164][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 3005.599742][ T7627] bridge_slave_0: entered allmulticast mode [ 3005.611095][ T7627] bridge_slave_0: entered promiscuous mode [ 3005.627833][ T7627] bridge0: port 2(bridge_slave_1) entered blocking state [ 3005.638237][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 3005.649318][ T7627] bridge_slave_1: entered allmulticast mode [ 3005.686595][ T7627] bridge_slave_1: entered promiscuous mode [ 3005.837389][ T1660] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.003F/input/input113 [ 3006.514484][ T7627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3006.628562][ T7627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3006.639278][ T6510] Bluetooth: hci0: command tx timeout [ 3007.562951][ T1660] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 3007.586862][ T7627] team0: Port device team_slave_0 added [ 3007.626780][ T7659] block nbd5: shutting down sockets [ 3007.632366][ T1660] usb 9-1: USB disconnect, device number 8 [ 3007.654436][ T7627] team0: Port device team_slave_1 added [ 3008.492430][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3008.505055][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3008.680000][ T7627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3008.718328][ T6510] Bluetooth: hci0: command tx timeout [ 3008.909240][ T7627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3008.916320][ T7627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3009.199006][ T7627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3009.503106][ T7627] hsr_slave_0: entered promiscuous mode [ 3009.557708][ T7627] hsr_slave_1: entered promiscuous mode [ 3009.563716][ T7627] debugfs: 'hsr0' already exists in 'hsr' [ 3009.598461][ T7627] Cannot create hsr debugfs directory [ 3009.905424][ T7693] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8931'. [ 3009.997114][ T7697] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3010.607310][ T7627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.625319][ T7699] fuse: Bad value for 'fd' [ 3010.821547][ T7627] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3010.854237][ T6510] Bluetooth: hci0: command tx timeout [ 3011.820276][ T7627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3011.873638][ T7627] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3012.883610][ T6510] Bluetooth: hci0: command tx timeout [ 3013.027235][ T7627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.071720][ T7627] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3013.197278][ T7627] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3013.219036][ T7627] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3013.529687][ T5904] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 3013.553239][ T7627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3013.583399][ T7627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3013.614151][ T7627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3013.653297][ T7627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3013.692538][ T5904] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3013.803050][ T5904] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3013.915866][ T5904] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3013.983702][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3014.038539][ T5904] usb 9-1: Product: syz [ 3014.076100][ T5904] usb 9-1: Manufacturer: syz [ 3014.136308][ T5904] usb 9-1: SerialNumber: syz [ 3014.261541][ T5904] usb 9-1: config 0 descriptor?? [ 3014.481565][ T5904] usb 9-1: selecting invalid altsetting 0 [ 3014.781613][ T7627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3015.271177][ T36] bridge_slave_1: left allmulticast mode [ 3015.277308][ T36] bridge_slave_1: left promiscuous mode [ 3015.284446][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 3015.333564][ T36] bridge_slave_0: left allmulticast mode [ 3015.346907][ T36] bridge_slave_0: left promiscuous mode [ 3015.362996][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 3015.568288][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3015.603963][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.742615][ T5959] usb 9-1: USB disconnect, device number 9 [ 3018.273383][ T9903] usb 8-1: new low-speed USB device number 123 using dummy_hcd [ 3018.456428][ T9903] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3018.465608][ T9903] usb 8-1: config 0 has no interface number 0 [ 3018.471810][ T9903] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3018.483296][ T9903] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3018.494801][ T9903] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3018.527726][ T9903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.538999][ T9903] usb 8-1: config 0 descriptor?? [ 3018.575520][ T7767] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3018.586800][ T9903] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3018.608053][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3018.624089][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3018.634757][ T36] bond0 (unregistering): Released all slaves [ 3018.678865][ T7627] 8021q: adding VLAN 0 to HW filter on device team0 [ 3018.699685][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 3018.706813][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3018.782003][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 3018.789164][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3018.841914][T23421] usb 8-1: USB disconnect, device number 123 [ 3019.035283][ T7627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3019.045827][ T7627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3020.152409][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.414509][ T36] hsr_slave_0: left promiscuous mode [ 3021.474459][ T36] hsr_slave_1: left promiscuous mode [ 3021.480273][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3021.492216][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3021.500861][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3021.531400][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3021.556581][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 3021.634689][ T36] veth1_macvtap: left promiscuous mode [ 3021.657010][ T36] veth0_macvtap: left promiscuous mode [ 3021.722033][ T36] veth1_vlan: left promiscuous mode [ 3021.727395][ T36] veth0_vlan: left promiscuous mode [ 3022.382867][ T6510] Bluetooth: hci3: command 0x0406 tx timeout [ 3023.278118][ T36] team0 (unregistering): Port device team_slave_1 removed [ 3023.340132][ T36] team0 (unregistering): Port device team_slave_0 removed [ 3024.498260][ T7627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3024.587396][ T7816] usb usb8: usbfs: process 7816 (syz.8.8961) did not claim interface 0 before use [ 3024.835373][ T7627] veth0_vlan: entered promiscuous mode [ 3024.853179][ T7627] veth1_vlan: entered promiscuous mode [ 3025.190614][ T7627] veth0_macvtap: entered promiscuous mode [ 3025.220624][ T7627] veth1_macvtap: entered promiscuous mode [ 3025.523360][ T7825] overlayfs: missing 'lowerdir' [ 3025.554429][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3025.675836][ T7627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3025.794566][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.807652][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.872258][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.905917][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.469183][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3026.469196][ T30] audit: type=1326 audit(1755123092.594:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7826 comm="syz.8.8964" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90b898ebe9 code=0x0 [ 3026.761398][ T7835] fuse: Invalid rootmode [ 3026.891341][ T1549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3026.951036][ T1549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3027.002801][T23861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3027.038746][T23861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3028.212831][ T7864] fuse: Bad value for 'fd' [ 3029.113137][ T7871] overlayfs: failed to resolve './file0': -2 [ 3030.642751][ T7890] input: syz1 as /devices/virtual/input/input114 [ 3031.309633][ T7896] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3033.067507][ T30] audit: type=1326 audit(1755123099.288:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7909 comm="syz.7.8983" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f786958ebe9 code=0x0 [ 3037.743502][ T5904] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 3038.113301][ T5904] usb 8-1: device not accepting address 124, error -71 [ 3038.513216][ T5904] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 3038.940982][ T5904] usb 8-1: Using ep0 maxpacket: 16 [ 3039.003690][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3039.111767][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3039.122574][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3039.136416][ T5904] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3039.145506][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3039.158968][ T5904] usb 8-1: config 0 descriptor?? [ 3039.934194][ T5904] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0040/input/input115 [ 3040.336622][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.509905][ T7981] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9001'. [ 3040.830868][ T5904] microsoft 0003:045E:07DA.0040: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 3040.921148][ T7987] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3041.309690][ T5904] usb 8-1: USB disconnect, device number 125 [ 3041.894161][ T8000] overlayfs: missing 'lowerdir' [ 3043.072425][ T5904] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 3043.231046][T23421] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 3043.284624][ T5904] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3043.290770][ T9903] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 3043.292829][ T5904] usb 1-1: config 0 has no interface number 0 [ 3043.306478][ T5904] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3043.360726][ T5904] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3043.425566][ T5904] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3043.429475][T23421] usb 9-1: Using ep0 maxpacket: 16 [ 3043.459152][T23421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3043.474326][T23421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3043.484554][T23421] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3043.498108][T23421] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3043.507345][T23421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.530996][T23421] usb 9-1: config 0 descriptor?? [ 3043.568930][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.573011][ T9903] usb 8-1: Using ep0 maxpacket: 32 [ 3043.608038][ T9903] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 3043.627527][ T9903] usb 8-1: config 0 has no interface number 0 [ 3043.649874][ T9903] usb 8-1: config 0 interface 12 has no altsetting 0 [ 3043.673449][ T5904] usb 1-1: config 0 descriptor?? [ 3043.674599][ T9903] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 3043.705235][ T9903] usb 8-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 3043.726290][ T9903] usb 8-1: Product: syz [ 3043.746250][ T9903] usb 8-1: Manufacturer: syz [ 3043.769993][ T9903] usb 8-1: SerialNumber: syz [ 3043.789642][ T9903] usb 8-1: config 0 descriptor?? [ 3043.799023][ T8006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3043.880625][ T5904] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3043.968270][T23421] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0041/input/input116 [ 3044.426340][T23421] microsoft 0003:045E:07DA.0041: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 3044.748508][ T5959] usb 9-1: USB disconnect, device number 10 [ 3044.960576][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9016'. [ 3045.249855][ T6351] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 3045.503384][ T8041] overlayfs: failed to resolve './file1': -2 [ 3045.902194][ T9903] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 3045.909769][ T9903] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 3045.917123][ T9903] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 3045.925038][ T9903] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 3045.938096][ T9903] usb 8-1: USB disconnect, device number 126 [ 3045.994355][ T6351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3046.005504][ T6351] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3046.020769][ T6351] usb 10-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3046.030939][ T6351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.039025][ T6351] usb 10-1: Product: syz [ 3046.043617][ T6351] usb 10-1: Manufacturer: syz [ 3046.048301][ T6351] usb 10-1: SerialNumber: syz [ 3046.061726][ T6351] usb 10-1: config 0 descriptor?? [ 3046.153378][ T8046] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9020'. [ 3046.279966][ T6351] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 3046.306416][ T6351] usb 10-1: USB disconnect, device number 110 [ 3046.392390][ T5959] usb 1-1: USB disconnect, device number 7 [ 3046.563758][ T30] audit: type=1804 audit(1755123112.795:1537): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.9022" name="/newroot/395/file1" dev="fuse" ino=1 res=1 errno=0 [ 3046.703390][ T30] audit: type=1800 audit(1755123112.795:1538): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.9022" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3046.738760][ T8057] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9024'. [ 3047.058993][ T5959] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 3047.067242][ T1660] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 3047.142685][ T8065] fuse: Bad value for 'fd' [ 3047.151470][ T30] audit: type=1800 audit(1755123113.395:1539): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.9028" name="file1" dev="tmpfs" ino=452 res=0 errno=0 [ 3047.209934][ T9903] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3047.228955][ T5959] usb 8-1: Using ep0 maxpacket: 8 [ 3047.235804][ T5959] usb 8-1: unable to get BOS descriptor or descriptor too short [ 3047.244404][ T5959] usb 8-1: config 4 interface 0 has no altsetting 0 [ 3047.252586][ T1660] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3047.263639][ T1660] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3047.312390][ T5959] usb 8-1: string descriptor 0 read error: -22 [ 3047.350325][ T1660] usb 9-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3047.362503][ T5959] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 3047.384468][ T1660] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.395686][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.417032][ T8074] No buffer was provided with the request [ 3047.465879][ T9903] usb 1-1: Using ep0 maxpacket: 8 [ 3047.465887][ T1660] usb 9-1: Product: syz [ 3047.465905][ T1660] usb 9-1: Manufacturer: syz [ 3047.494846][ T5959] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 3047.511620][ T9903] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 3047.522861][ T9903] usb 1-1: config 0 has no interface number 0 [ 3047.529782][ T1660] usb 9-1: SerialNumber: syz [ 3047.537864][ T5959] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3047.551893][ T9903] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3047.567896][ T5959] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 3047.577767][ T5959] usb 8-1: media controller created [ 3047.627251][ T9903] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3047.627977][ T1660] usb 9-1: config 0 descriptor?? [ 3047.640471][ T9903] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3047.688358][ T9903] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3047.700359][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3047.775804][ T9903] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3047.795065][ T6351] usb 10-1: new low-speed USB device number 111 using dummy_hcd [ 3047.828663][ T9903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3047.861133][ T9903] usb 1-1: config 0 descriptor?? [ 3047.884198][ T9903] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3047.917259][ T1660] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3047.944236][ T1660] usb 9-1: USB disconnect, device number 11 [ 3047.956898][ T5959] usb 8-1: USB disconnect, device number 127 [ 3047.974992][ T6351] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 3047.983774][ T6351] usb 10-1: config 0 has no interface number 0 [ 3048.015811][ T6351] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3048.027324][ T6351] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3048.308560][ T6351] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3048.329989][ T9903] usb 1-1: USB disconnect, device number 8 [ 3048.337386][ T9903] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 3048.362506][ T6351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3048.389686][ T6351] usb 10-1: config 0 descriptor?? [ 3048.401151][ T8073] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 3048.419917][ T6351] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3048.984103][ T6351] usb 10-1: USB disconnect, device number 111 [ 3051.419285][ T30] audit: type=1326 audit(1755123117.637:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8095 comm="syz.5.9036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89b258ebe9 code=0x0 [ 3051.499340][ T30] audit: type=1800 audit(1755123117.747:1541): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.9037" name="file1" dev="tmpfs" ino=90 res=0 errno=0 [ 3054.959217][ T8142] No buffer was provided with the request [ 3055.068216][ T8144] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9047'. [ 3057.771368][ T1002] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 3058.043603][ T1002] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3058.065355][ T1002] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3058.108091][ T1002] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3058.147778][ T1002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3058.195172][ T8167] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3058.213451][ T1002] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3058.711329][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9059'. [ 3058.720441][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9059'. [ 3059.888234][ T1002] usb 9-1: USB disconnect, device number 12 [ 3060.083964][ T1660] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 3060.332244][ T1660] usb 10-1: Using ep0 maxpacket: 32 [ 3060.357782][ T1660] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 3060.364392][ T8210] overlayfs: missing 'workdir' [ 3060.378829][ T1660] usb 10-1: config 0 has no interface number 0 [ 3060.386739][ T1660] usb 10-1: config 0 interface 12 has no altsetting 0 [ 3060.399747][ T1660] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 3060.409502][ T1660] usb 10-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 3060.425648][ T1660] usb 10-1: Product: syz [ 3060.429947][ T1660] usb 10-1: Manufacturer: syz [ 3060.439974][ T1660] usb 10-1: SerialNumber: syz [ 3060.447692][ T1660] usb 10-1: config 0 descriptor?? [ 3060.461506][ T8211] No buffer was provided with the request [ 3061.631195][ T8221] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3062.893643][ T1660] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 3062.936939][ T1660] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 3062.961439][ T1660] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 3063.423441][ T1660] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 3063.570388][ T1660] usb 10-1: USB disconnect, device number 112 [ 3064.499892][ T8247] kvm: pic: non byte write [ 3065.170674][ T8262] fuse: Bad value for 'fd' [ 3065.713209][ T8268] kvm: pic: non byte write [ 3065.749546][ T5959] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3065.965790][ T5959] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3066.041089][ T5959] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3066.083344][ T5959] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3066.116930][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3066.135332][ T5959] usb 1-1: Product: syz [ 3066.159122][ T5959] usb 1-1: Manufacturer: syz [ 3066.188783][ T5959] usb 1-1: SerialNumber: syz [ 3066.419905][ T5959] usb 1-1: config 0 descriptor?? [ 3066.468655][ T5959] usb 1-1: selecting invalid altsetting 0 [ 3066.528934][ T8276] No buffer was provided with the request [ 3067.127143][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3067.279487][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3067.838700][ T1002] usb 6-1: new low-speed USB device number 96 using dummy_hcd [ 3068.013894][ T1002] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3068.062586][ T1002] usb 6-1: config 0 has no interface number 0 [ 3068.097785][ T1002] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3068.264590][ T1002] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3068.339375][ T1002] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3068.426530][ T1002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3068.608893][ T1002] usb 6-1: config 0 descriptor?? [ 3068.743740][ T8302] usb usb8: usbfs: process 8302 (syz.8.9091) did not claim interface 0 before use [ 3068.921192][ T8286] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3068.979118][ T1660] usb 1-1: USB disconnect, device number 9 [ 3069.024226][ T1002] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3069.091677][ T8304] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9092'. [ 3069.317369][ T1660] usb 6-1: USB disconnect, device number 96 [ 3069.487919][ T5959] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 3069.500515][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 3069.879317][ T5959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3069.924397][ T8311] fuse: Bad value for 'fd' [ 3069.935554][ T5959] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3069.969110][ T5959] usb 8-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3069.982094][ T5959] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.998937][ T5959] usb 8-1: Product: syz [ 3070.007368][ T5959] usb 8-1: Manufacturer: syz [ 3070.109233][ T5959] usb 8-1: SerialNumber: syz [ 3070.126145][ T5959] usb 8-1: config 0 descriptor?? [ 3070.343431][ T5959] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 3070.413538][ T5959] usb 8-1: USB disconnect, device number 2 [ 3070.606585][ T8315] syzkaller1: entered promiscuous mode [ 3070.616771][ T8315] syzkaller1: entered allmulticast mode [ 3070.691372][ T8317] fuse: Bad value for 'fd' [ 3072.162215][ T8339] No buffer was provided with the request [ 3073.138606][ T8358] overlayfs: missing 'lowerdir' [ 3074.393360][ T8362] usb usb8: usbfs: process 8362 (syz.8.9108) did not claim interface 0 before use [ 3074.506842][ T8373] fuse: Invalid rootmode [ 3076.840198][ T8408] syz_tun: entered allmulticast mode [ 3076.903159][ T8405] fuse: Bad value for 'fd' [ 3077.469459][ T8413] fuse: Invalid rootmode [ 3078.088222][ T8399] syz_tun: left allmulticast mode [ 3078.604417][ T8428] syzkaller1: entered promiscuous mode [ 3078.609916][ T8428] syzkaller1: entered allmulticast mode [ 3080.062283][ T8445] fuse: Bad value for 'fd' [ 3080.357041][ T8454] fuse: Bad value for 'fd' [ 3081.084266][ T8452] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9134'. [ 3081.158479][ T8464] fuse: Bad value for 'fd' [ 3081.578960][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.608166][ T1660] usb 6-1: new low-speed USB device number 97 using dummy_hcd [ 3082.794617][ T1660] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3082.811453][ T1660] usb 6-1: config 0 has no interface number 0 [ 3082.995697][ T1660] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3083.046592][ T8492] netlink: 'syz.9.9144': attribute type 12 has an invalid length. [ 3083.057528][ T8492] netlink: 'syz.9.9144': attribute type 29 has an invalid length. [ 3083.077894][ T8492] netlink: 148 bytes leftover after parsing attributes in process `syz.9.9144'. [ 3083.101280][ T1660] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3083.119704][ T1660] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3083.138625][ T1660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.358404][ T1660] usb 6-1: config 0 descriptor?? [ 3083.520861][ T8483] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3083.535111][ T1660] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3083.765883][ T9903] usb 6-1: USB disconnect, device number 97 [ 3083.945089][ T8503] fuse: Invalid rootmode [ 3086.115065][ T8530] fuse: Bad value for 'fd' [ 3086.519128][ T1660] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 3086.709508][ T8538] netdevsim netdevsim9 : renamed from netdevsim0 (while UP) [ 3086.861324][ T1660] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3086.869485][ T1660] usb 8-1: config 0 has no interface number 0 [ 3086.878370][ T1660] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3086.977471][ T1660] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3087.056749][ T1660] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3087.080085][ T1660] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3087.133461][ T1660] usb 8-1: config 0 descriptor?? [ 3087.180283][ T8531] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3087.192396][ T1660] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3087.440421][ T1660] usb 8-1: USB disconnect, device number 3 [ 3089.477953][ T1660] usb 10-1: new low-speed USB device number 113 using dummy_hcd [ 3089.738333][ T1660] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 3089.749763][ T1660] usb 10-1: config 0 has no interface number 0 [ 3089.771685][ T1660] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3089.782878][ T1660] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3089.805254][ T1660] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3089.821857][ T1660] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3089.844642][ T1660] usb 10-1: config 0 descriptor?? [ 3089.854080][ T8561] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 3089.870558][ T1660] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3090.116405][ T6351] usb 10-1: USB disconnect, device number 113 [ 3090.349892][ T1660] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 3090.518320][ T1660] usb 8-1: Using ep0 maxpacket: 8 [ 3090.532021][ T1660] usb 8-1: config 0 has an invalid interface number: 130 but max is 0 [ 3090.675468][ T1660] usb 8-1: config 0 has no interface number 0 [ 3090.691538][ T1660] usb 8-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 3090.700873][ T1660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.709081][ T1660] usb 8-1: Product: syz [ 3090.713315][ T1660] usb 8-1: Manufacturer: syz [ 3090.718046][ T1660] usb 8-1: SerialNumber: syz [ 3090.725809][ T1660] usb 8-1: config 0 descriptor?? [ 3090.736304][ T1660] as10x_usb: device has been detected [ 3090.742639][ T1660] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 3090.766042][ T1660] usb 8-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 3090.912591][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9175'. [ 3091.168599][ T1660] as10x_usb: error during firmware upload part1 [ 3091.175690][ T1660] Registered device PCTV Systems picoStick (74e) [ 3091.959229][T23421] usb 8-1: USB disconnect, device number 4 [ 3092.003984][T23421] Unregistered device PCTV Systems picoStick (74e) [ 3092.006174][T23421] as10x_usb: device has been disconnected [ 3092.306743][ T8618] fuse: Unknown parameter '00000000000000000000003' [ 3094.435597][T23421] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 3094.623658][ T8645] No buffer was provided with the request [ 3094.688229][T23421] usb 8-1: device descriptor read/64, error -71 [ 3095.069082][ T8650] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3095.524396][T23421] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 3095.784686][T23421] usb 8-1: device descriptor read/64, error -71 [ 3095.959158][T23421] usb usb8-port1: attempt power cycle [ 3096.318975][T23421] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 3096.357709][T23421] usb 8-1: device descriptor read/8, error -71 [ 3096.604935][T23421] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 3096.795276][T23421] usb 8-1: device descriptor read/8, error -71 [ 3096.850054][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9197'. [ 3096.905020][T23421] usb usb8-port1: unable to enumerate USB device [ 3097.158019][ T59] bridge_slave_1: left allmulticast mode [ 3097.209432][ T59] bridge_slave_1: left promiscuous mode [ 3097.254198][ T5904] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3097.353967][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 3098.715036][ T59] bridge_slave_0: left allmulticast mode [ 3098.722342][ T59] bridge_slave_0: left promiscuous mode [ 3098.749892][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3098.750267][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 3098.760928][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3098.793043][ T5904] usb 6-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3098.802635][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3098.980630][ T5904] usb 6-1: Product: syz [ 3099.066796][ T5904] usb 6-1: Manufacturer: syz [ 3099.117544][ T5904] usb 6-1: SerialNumber: syz [ 3099.276797][ T5904] usb 6-1: config 0 descriptor?? [ 3099.517921][ T5904] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3099.728207][ T8685] fuse: Bad value for 'rootmode' [ 3100.005822][ T5904] usb 6-1: USB disconnect, device number 98 [ 3100.202994][ T9903] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 3100.357208][ T9903] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3100.375927][ T9903] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3100.384931][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3100.447257][ T9903] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3100.461536][ T9903] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3100.474278][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3100.483370][ T9903] usb 10-1: Product: syz [ 3100.489250][ T59] bond0 (unregistering): Released all slaves [ 3100.497646][ T9903] usb 10-1: Manufacturer: syz [ 3100.503981][ T9903] usb 10-1: SerialNumber: syz [ 3100.531432][ T9903] usb 10-1: config 0 descriptor?? [ 3100.540411][ T9903] usb 10-1: selecting invalid altsetting 0 [ 3101.167692][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3101.184385][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3101.624750][ T8713] syz_tun: entered allmulticast mode [ 3101.963835][ T59] hsr_slave_0: left promiscuous mode [ 3101.979451][ T59] hsr_slave_1: left promiscuous mode [ 3101.995409][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3102.016529][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3102.037956][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3102.050301][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3102.087923][ T59] veth1_macvtap: left promiscuous mode [ 3102.100075][ T59] veth0_macvtap: left promiscuous mode [ 3102.123676][ T59] veth1_vlan: left promiscuous mode [ 3102.139066][ T59] veth0_vlan: left promiscuous mode [ 3105.763059][T23421] usb 10-1: USB disconnect, device number 114 [ 3106.189881][ T30] audit: type=1326 audit(1755123172.454:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.8.9216" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90b898ebe9 code=0x0 [ 3107.045565][ T59] team0 (unregistering): Port device team_slave_1 removed [ 3107.103656][ T59] team0 (unregistering): Port device team_slave_0 removed [ 3108.736248][ T8786] overlayfs: failed to resolve './file1': -2 [ 3109.148060][ T8788] usb usb8: usbfs: process 8788 (syz.7.9222) did not claim interface 0 before use [ 3109.729164][ T8794] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3111.896581][T31009] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3112.006657][ T8816] usb usb8: usbfs: process 8816 (syz.5.9231) did not claim interface 0 before use [ 3112.133649][T31009] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3112.153408][T31009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3112.183754][T31009] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3112.196583][T31009] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3112.213617][T31009] usb 1-1: Product: syz [ 3112.228536][T31009] usb 1-1: Manufacturer: syz [ 3112.236437][T31009] usb 1-1: SerialNumber: syz [ 3112.244960][T31009] usb 1-1: config 0 descriptor?? [ 3112.261462][T31009] usb 1-1: selecting invalid altsetting 0 [ 3112.887185][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3112.896840][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3113.418757][ T8828] usb usb8: usbfs: process 8828 (syz.7.9233) did not claim interface 0 before use [ 3113.945435][T23421] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 3114.135629][T23421] usb 9-1: device descriptor read/64, error -71 [ 3114.459333][T23421] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 3114.625241][T23421] usb 9-1: device descriptor read/64, error -71 [ 3114.736619][T23421] usb usb9-port1: attempt power cycle [ 3114.843584][ T5904] usb 1-1: USB disconnect, device number 10 [ 3115.254874][T23421] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 3115.275322][T23421] usb 9-1: device descriptor read/8, error -71 [ 3115.605743][T23421] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 3115.661543][T23421] usb 9-1: device descriptor read/8, error -71 [ 3115.940168][T23421] usb usb9-port1: unable to enumerate USB device [ 3117.206943][ T8872] usb usb8: usbfs: process 8872 (syz.8.9244) did not claim interface 0 before use [ 3119.636189][ T8884] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9243'. [ 3119.827959][ T30] audit: type=1326 audit(1755123186.101:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8893 comm="syz.7.9249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f786958ebe9 code=0x0 [ 3120.047807][ T8904] No buffer was provided with the request [ 3121.381851][ T5904] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3121.431768][ T6351] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 3121.561588][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 3121.617097][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3121.635876][ T6351] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3121.647592][ T6351] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3121.668838][ T6351] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3121.688310][ T6351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3121.704553][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3121.714682][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3121.729565][ T5904] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3121.740593][ T8919] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 3121.748604][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3121.751094][ T6351] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3121.759233][ T5904] usb 1-1: config 0 descriptor?? [ 3121.981512][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3121.995859][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3122.297795][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 3122.304195][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3122.317760][ T5904] usb 1-1: USB disconnect, device number 11 [ 3122.427503][ T5959] usb 9-1: USB disconnect, device number 17 [ 3122.464254][ T8939] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9259'. [ 3122.976152][ T8947] syz_tun: entered allmulticast mode [ 3122.995823][ T8946] syz_tun: left allmulticast mode [ 3123.121114][ T5959] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3123.540318][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3123.730140][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3123.907567][ T5959] usb 1-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3124.187382][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3124.236121][ T8960] syz_tun: entered allmulticast mode [ 3124.280980][ T5959] usb 1-1: Product: syz [ 3124.285277][ T5959] usb 1-1: Manufacturer: syz [ 3124.290050][ T5959] usb 1-1: SerialNumber: syz [ 3124.297314][ T5959] usb 1-1: config 0 descriptor?? [ 3124.526092][ T5959] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3124.570158][ T5904] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 3124.806663][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3124.933896][ T5959] usb 1-1: USB disconnect, device number 12 [ 3124.940177][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3124.960045][ T6351] usb 6-1: new low-speed USB device number 99 using dummy_hcd [ 3125.178606][ T5904] usb 8-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3125.256885][ T8971] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3125.645756][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.653841][ T5904] usb 8-1: Product: syz [ 3125.658002][ T5904] usb 8-1: Manufacturer: syz [ 3125.686242][ T5904] usb 8-1: SerialNumber: syz [ 3125.691085][ T6351] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3125.700177][ T6351] usb 6-1: config 0 has no interface number 0 [ 3125.706708][ T6351] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3125.718184][ T6351] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3125.758981][ T6351] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3126.160469][ T5904] usb 8-1: config 0 descriptor?? [ 3126.219247][ T6351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3126.242830][ T6351] usb 6-1: config 0 descriptor?? [ 3126.260550][ T8967] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3126.304153][ T6351] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3126.411564][ T5904] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 3126.517166][ T6351] usb 6-1: USB disconnect, device number 99 [ 3126.675812][ T5904] usb 8-1: USB disconnect, device number 9 [ 3127.078917][T23421] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 3127.228759][T23421] usb 9-1: Using ep0 maxpacket: 16 [ 3127.287725][T23421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3127.300917][T23421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3127.317383][T23421] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3127.458867][T23421] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3127.471414][T23421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3127.488767][T23421] usb 9-1: config 0 descriptor?? [ 3127.563348][ T8998] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3128.208262][T23421] usbhid 9-1:0.0: can't add hid device: -71 [ 3128.214256][T23421] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 3128.245460][T23421] usb 9-1: USB disconnect, device number 18 [ 3129.767731][T31290] Bluetooth: hci0: command 0x0406 tx timeout [ 3129.987046][ T9019] kvm: pic: non byte write [ 3130.898394][ T9009] syz.5.9277 (9009): drop_caches: 1 [ 3133.045949][ T5976] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 3133.299203][ T9066] fuse: Invalid rootmode [ 3133.622002][ T5976] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3133.643597][ T5976] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3133.700974][ T5976] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3133.725904][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.765801][ T9056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3133.777356][ T5976] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3134.542950][ T9086] No buffer was provided with the request [ 3134.592160][ T9056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.605379][ T9056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3135.222124][ T6351] usb 6-1: USB disconnect, device number 100 [ 3137.174150][ T5976] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 3137.407278][ T5976] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3137.425905][ T5976] usb 1-1: config 0 has no interface number 0 [ 3137.437706][ T5976] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3137.581921][ T5976] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3137.598773][ T5976] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3137.608753][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.678688][ T5976] usb 1-1: config 0 descriptor?? [ 3137.708712][ T9122] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3137.787316][ T5976] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3138.016058][ T5904] usb 1-1: USB disconnect, device number 13 [ 3138.705864][ T9149] syz.7.9316 (9149): drop_caches: 1 [ 3138.938396][ T9149] syz.7.9316 (9149): drop_caches: 1 [ 3140.121328][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9321'. [ 3140.485870][ T9168] kvm: pic: non byte write [ 3140.727766][ T30] audit: type=1326 audit(1755123206.992:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9173 comm="syz.7.9325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f786958ebe9 code=0x0 [ 3141.900814][ T9192] geneve2: entered promiscuous mode [ 3141.937880][ T9192] geneve2: entered allmulticast mode [ 3141.980308][ T59] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3142.481242][ T8999] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3142.514115][ T8999] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3142.530699][ T8999] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3142.958378][ T9206] netlink: 204 bytes leftover after parsing attributes in process `syz.8.9332'. [ 3143.028324][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.191753][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9334'. [ 3144.113271][ T9232] overlayfs: missing 'lowerdir' [ 3144.183544][ T9234] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3145.547435][ T9230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3145.590534][ T9245] syz.0.9343 (9245): drop_caches: 1 [ 3145.912613][ T9245] syz.0.9343 (9245): drop_caches: 1 [ 3146.543991][ T9240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3146.669613][T23421] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 3146.989223][T23421] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3146.997953][T23421] usb 8-1: config 0 has no interface number 0 [ 3147.007169][T23421] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3147.208838][T23421] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3147.338752][T23421] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3147.353474][ T9266] netlink: 68 bytes leftover after parsing attributes in process `syz.9.9346'. [ 3147.438927][T23421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3147.461642][T23421] usb 8-1: config 0 descriptor?? [ 3147.483078][ T9250] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3147.498198][T23421] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3147.811050][ T5976] usb 8-1: USB disconnect, device number 10 [ 3148.328381][ T5959] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 3148.518308][ T5959] usb 1-1: Using ep0 maxpacket: 32 [ 3148.529873][ T5959] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 3148.538728][ T5959] usb 1-1: config 0 has no interface number 0 [ 3148.548513][ T5959] usb 1-1: config 0 interface 12 has no altsetting 0 [ 3148.573926][ T5959] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 3148.587659][ T5959] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 3148.656108][ T5959] usb 1-1: Product: syz [ 3148.736150][ T9288] syz_tun: entered allmulticast mode [ 3148.759220][ T5959] usb 1-1: Manufacturer: syz [ 3148.765729][ T5959] usb 1-1: SerialNumber: syz [ 3148.789468][ T5959] usb 1-1: config 0 descriptor?? [ 3149.092916][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.7.9358'. [ 3149.524413][ T5904] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 3149.733499][ T5904] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3149.749943][ T5904] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3149.888254][ T5904] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3149.897512][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3149.905742][ T5904] usb 8-1: Product: syz [ 3149.910052][ T5904] usb 8-1: Manufacturer: syz [ 3149.915197][ T5904] usb 8-1: SerialNumber: syz [ 3149.951011][ T5904] usb 8-1: config 0 descriptor?? [ 3149.996183][ T5904] usb 8-1: selecting invalid altsetting 0 [ 3150.327368][ T6351] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 3150.687220][ T9309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3150.816979][ T6351] usb 10-1: Using ep0 maxpacket: 32 [ 3150.850101][ T6351] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 3150.858796][ T6351] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3150.867514][ T6351] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3150.920051][ T6351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3151.033634][ T6351] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3151.034273][ T5959] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 3151.071549][ T6351] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3151.103322][ T5959] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 3151.132714][ T5959] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 3151.144421][ T6351] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3151.154180][ T5959] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 3151.317908][ T6351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3151.329812][ T5959] usb 1-1: USB disconnect, device number 14 [ 3151.470162][ T6351] usb 10-1: config 0 descriptor?? [ 3151.764257][ T6351] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3151.855313][ T6351] usb 10-1: USB disconnect, device number 115 [ 3151.884792][ T6351] usblp0: removed [ 3152.370702][ T9328] overlayfs: missing 'lowerdir' [ 3152.438608][ T6351] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 3152.709729][ T5959] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 3152.769924][ T5976] usb 8-1: USB disconnect, device number 11 [ 3152.885980][ T6351] usb 10-1: Using ep0 maxpacket: 32 [ 3152.892757][ T5959] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3152.909524][ T5959] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3152.927502][ T5959] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3152.937493][ T5959] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3152.960408][ T5959] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3152.975490][ T5959] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3152.987231][ T5959] usb 9-1: Product: syz [ 3152.991466][ T5959] usb 9-1: Manufacturer: syz [ 3153.009046][ T5959] cdc_wdm 9-1:1.0: skipping garbage [ 3153.024826][ T6351] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 3153.033866][ T6351] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3153.034480][ T5959] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3153.044902][ T6351] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3153.060633][ T6351] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3153.070829][ T6351] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3153.096973][ T6351] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3153.161739][ T6351] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3153.194582][ T6351] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3153.218051][ T6351] usb 10-1: config 0 descriptor?? [ 3153.236453][ T6351] usb 10-1: can't set config #0, error -71 [ 3154.092862][ T6351] usb 10-1: USB disconnect, device number 116 [ 3154.596274][ T9903] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 3154.815358][ T6351] usb 10-1: new full-speed USB device number 117 using dummy_hcd [ 3154.849271][ T9903] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3154.962157][ T9903] usb 1-1: config 0 has no interface number 0 [ 3154.971766][ T6351] usb 10-1: config 0 has an invalid interface number: 93 but max is 0 [ 3154.980296][ T6351] usb 10-1: config 0 has no interface number 0 [ 3155.003479][ T6351] usb 10-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 3155.026290][ T9903] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3155.039849][ T6351] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 3155.061957][ T6351] usb 10-1: Product: syz [ 3155.070754][ T9903] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3155.089786][ T6351] usb 10-1: Manufacturer: syz [ 3155.102153][ T6351] usb 10-1: SerialNumber: syz [ 3155.115187][ T9903] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3155.127344][ T6351] usb 10-1: config 0 descriptor?? [ 3155.132465][ T9903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3155.204951][ T9903] usb 1-1: config 0 descriptor?? [ 3155.219940][ T9339] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3155.234460][ T9903] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3155.388743][ T6351] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 3155.400595][ T6351] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 3155.417894][ T6351] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 3155.509692][ T6351] usb 10-1: media controller created [ 3155.518718][ T6351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3155.554759][ T9368] geneve2: entered promiscuous mode [ 3155.561867][ T9368] geneve2: entered allmulticast mode [ 3155.568768][ T7287] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3155.584154][ T7287] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3155.657146][ T7287] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3155.687203][ T7287] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3155.727911][ T6351] DVB: Unable to find symbol dib7000p_attach() [ 3155.734152][ T6351] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 3155.760338][ T6351] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 3155.908693][ T6351] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 3155.925035][ T5904] usb 9-1: USB disconnect, device number 19 [ 3155.931299][ T6351] usb 10-1: media controller created [ 3155.959251][ T6351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3155.972878][ T9362] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9378'. [ 3156.016388][ T6351] dib0700: the master dib7090 has to be initialized first [ 3156.023639][ T6351] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 3156.147666][ T6351] rc_core: IR keymap rc-dib0700-rc5 not found [ 3156.173732][ T6351] Registered IR keymap rc-empty [ 3156.187051][ T6351] dvb-usb: could not initialize remote control. [ 3156.208396][ T6351] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 3156.256052][ T6351] usb 10-1: USB disconnect, device number 117 [ 3156.304287][T23421] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 3156.356369][ T6351] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 3156.575550][T23421] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3156.586240][T23421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3156.597290][T23421] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3156.653703][T23421] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3156.761116][T23421] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3156.770938][T23421] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3156.785211][T23421] usb 6-1: Product: syz [ 3156.789478][T23421] usb 6-1: Manufacturer: syz [ 3156.814470][ T5976] usb 1-1: USB disconnect, device number 15 [ 3156.900134][T23421] cdc_wdm 6-1:1.0: skipping garbage [ 3156.907424][T23421] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3159.703091][ T5904] usb 6-1: USB disconnect, device number 101 [ 3160.808609][ T5904] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3161.583880][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 3161.601271][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3161.651740][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3161.691678][ T5904] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 3161.721503][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3162.119947][ T5904] usb 6-1: config 0 descriptor?? [ 3162.221818][ T9422] syz_tun: entered allmulticast mode [ 3162.447604][ T9429] 9pnet_fd: Insufficient options for proto=fd [ 3162.573780][ T5904] sony 0003:054C:024B.0042: unexpected long global item [ 3162.656333][ T5904] sony 0003:054C:024B.0042: parse failed [ 3162.697409][ T5904] sony 0003:054C:024B.0042: probe with driver sony failed with error -22 [ 3162.721026][T23421] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 3163.262160][T23421] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3163.273776][T23421] usb 8-1: config 0 has no interface number 0 [ 3163.321225][T23421] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3163.376279][T23421] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3163.442309][T23421] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3163.768571][T23421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3163.791581][T23421] usb 8-1: config 0 descriptor?? [ 3163.798753][ T9430] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3163.810636][T23421] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3163.938617][T23421] usb 6-1: USB disconnect, device number 102 [ 3164.069777][ T9903] usb 8-1: USB disconnect, device number 12 [ 3164.155741][ T30] audit: type=1326 audit(1755123230.433:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.5.9400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89b258ebe9 code=0x0 [ 3166.248077][ T9482] overlayfs: missing 'lowerdir' [ 3168.281628][T23421] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 3168.516139][T23421] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3168.581199][ T9903] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 3168.772667][T23421] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3168.858113][T23421] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3168.873601][ T9903] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 3168.886239][T23421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.895584][ T9903] usb 1-1: config 0 has no interface number 0 [ 3168.913739][ T9903] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 3168.933803][ T9500] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3168.943732][T23421] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3169.162717][ T9500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3169.176092][ T9500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3169.203299][ T9903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 3169.223553][ T9903] usb 1-1: Product: syz [ 3169.233759][ T9903] usb 1-1: Manufacturer: syz [ 3169.272401][ T9903] usb 1-1: SerialNumber: syz [ 3169.282881][ T9903] usb 1-1: config 0 descriptor?? [ 3169.316032][ T9514] syzkaller1: entered promiscuous mode [ 3169.322201][ T9514] syzkaller1: entered allmulticast mode [ 3169.524347][ T9903] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 3169.630364][ T9903] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 3169.644502][ T9903] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 3169.667855][ T9903] usb 1-1: media controller created [ 3169.684121][ T1002] usb 9-1: USB disconnect, device number 20 [ 3169.715603][ T9903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3169.911089][ T9903] DVB: Unable to find symbol dib7000p_attach() [ 3169.923817][ T9903] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 3169.988269][ T9903] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 3170.045187][ T9903] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 3170.065189][ T9903] usb 1-1: media controller created [ 3170.099229][ T9903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3170.152185][ T9903] dib0700: the master dib7090 has to be initialized first [ 3171.126835][ T9903] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 3171.197262][ T9903] rc_core: IR keymap rc-dib0700-rc5 not found [ 3171.427479][ T9903] Registered IR keymap rc-empty [ 3171.432596][ T9903] dvb-usb: could not initialize remote control. [ 3171.454700][ T9903] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 3172.115486][ T9546] ALSA: mixer_oss: invalid OSS volume 'DI' [ 3172.601336][ T9903] usb 1-1: USB disconnect, device number 16 [ 3172.726573][ T9903] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 3173.272165][ T9903] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 3173.294628][ T9538] syz.7.9426 (9538): drop_caches: 1 [ 3173.400889][ T9538] syz.7.9426 (9538): drop_caches: 1 [ 3173.588222][ T9903] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 3173.598432][ T9903] usb 1-1: config 0 has no interface number 0 [ 3173.655890][ T9903] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 3173.962916][ T9903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 3174.061824][ T9903] usb 1-1: Product: syz [ 3174.082426][ T9903] usb 1-1: Manufacturer: syz [ 3174.101009][ T9903] usb 1-1: SerialNumber: syz [ 3174.203839][ T9903] usb 1-1: config 0 descriptor?? [ 3174.210285][ T9903] usb 1-1: can't set config #0, error -71 [ 3174.233466][ T9903] usb 1-1: USB disconnect, device number 17 [ 3174.823778][ T9579] syz.0.9435 (9579): drop_caches: 1 [ 3175.083241][ T9579] syz.0.9435 (9579): drop_caches: 1 [ 3175.124795][ T5959] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 3175.647465][ T5959] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3175.661311][ T5959] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3175.671307][ T5959] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3175.681418][ T5959] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3175.703909][ T9577] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3175.806864][ T5959] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 3176.179353][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3176.198229][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3176.591346][ T5959] usb 9-1: USB disconnect, device number 21 [ 3177.090974][ T9586] syz.9.9438 (9586): drop_caches: 1 [ 3177.329275][ T9586] syz.9.9438 (9586): drop_caches: 1 [ 3178.325410][ T9611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3180.453306][ T9638] fuse: Invalid rootmode [ 3180.480611][ T30] audit: type=1800 audit(1755123246.782:1546): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.9453" name="file1" dev="tmpfs" ino=547 res=0 errno=0 [ 3180.502579][ T1002] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3180.762012][ T1002] usb 6-1: Using ep0 maxpacket: 8 [ 3180.768932][ T1002] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 3180.780187][ T1002] usb 6-1: config 0 has no interface number 0 [ 3180.789392][ T1002] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 3180.881510][ T1002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3180.901311][ T1002] usb 6-1: Product: syz [ 3181.031895][ T6351] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 3181.040112][ T1002] usb 6-1: Manufacturer: syz [ 3181.069917][ T1002] usb 6-1: SerialNumber: syz [ 3181.077186][ T1002] usb 6-1: config 0 descriptor?? [ 3181.089535][ T1002] as10x_usb: device has been detected [ 3181.098070][ T1002] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 3181.123323][ T1002] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 3181.139474][ T1002] as10x_usb: error during firmware upload part1 [ 3181.212969][ T1002] Registered device PCTV Systems picoStick (74e) [ 3181.246975][ T6351] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3181.270220][ T6351] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3181.280565][ T6351] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3181.319822][ T1002] usb 6-1: USB disconnect, device number 103 [ 3181.328934][ T6351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3181.360309][ T9646] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3181.373048][ T6351] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 3181.414563][ T1002] Unregistered device PCTV Systems picoStick (74e) [ 3181.415557][ T1002] as10x_usb: device has been disconnected [ 3181.655102][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3181.668442][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3182.000036][ T5904] usb 8-1: USB disconnect, device number 13 [ 3182.681217][ T9903] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 3183.442031][ T9903] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 3183.466569][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3183.701512][ T9903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3183.721636][ T9903] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 3183.730798][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.750068][ T9903] usb 6-1: config 0 descriptor?? [ 3184.111692][ T9674] syzkaller1: entered promiscuous mode [ 3184.119127][ T9674] syzkaller1: entered allmulticast mode [ 3184.237804][ T9677] fuse: Unknown parameter '0x0000000000000004' [ 3185.220138][ T5976] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 3185.521957][ T9903] usbhid 6-1:0.0: can't add hid device: -71 [ 3185.527924][ T9903] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3185.537417][ T9903] usb 6-1: USB disconnect, device number 104 [ 3185.675696][ T5976] usb 10-1: Using ep0 maxpacket: 8 [ 3185.696308][ T5976] usb 10-1: config 0 has an invalid interface number: 130 but max is 0 [ 3185.746012][ T5976] usb 10-1: config 0 has no interface number 0 [ 3185.793015][ T5976] usb 10-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 3185.823134][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3185.879448][ T5976] usb 10-1: Product: syz [ 3186.071536][ T5976] usb 10-1: Manufacturer: syz [ 3186.090991][ T5976] usb 10-1: SerialNumber: syz [ 3186.100782][ T5976] usb 10-1: config 0 descriptor?? [ 3186.129403][ T5976] as10x_usb: device has been detected [ 3186.140371][ T5976] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 3186.186982][ T5976] usb 10-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 3186.385796][ T5976] as10x_usb: error during firmware upload part1 [ 3186.393916][ T5976] Registered device PCTV Systems picoStick (74e) [ 3186.664112][ T5976] usb 10-1: USB disconnect, device number 118 [ 3186.697050][ T5976] Unregistered device PCTV Systems picoStick (74e) [ 3186.704479][ T5976] as10x_usb: device has been disconnected [ 3186.914057][ T9703] netlink: 96 bytes leftover after parsing attributes in process `syz.8.9471'. [ 3188.286715][ T1002] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 3188.361384][ T9722] overlayfs: missing 'lowerdir' [ 3188.969860][ T1002] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3189.023105][ T1002] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3189.071111][ T1002] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3189.157955][ T1002] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3189.228175][ T1002] usb 10-1: Product: syz [ 3189.232709][ T1002] usb 10-1: Manufacturer: syz [ 3189.386263][ T1002] usb 10-1: SerialNumber: syz [ 3189.435668][ T1002] usb 10-1: config 0 descriptor?? [ 3189.747472][ T1002] usb 10-1: selecting invalid altsetting 0 [ 3189.804721][ T9737] input: syz1 as /devices/virtual/input/input122 [ 3190.070791][ T9742] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9483'. [ 3192.393364][ T1002] usb 10-1: USB disconnect, device number 119 [ 3192.556127][T23421] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 3192.707792][T23421] usb 1-1: config 0 has no interfaces? [ 3192.713344][T23421] usb 1-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 3192.723039][T23421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.732812][T23421] usb 1-1: config 0 descriptor?? [ 3192.737887][ T9903] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 3192.782663][ T1002] usb 10-1: new full-speed USB device number 120 using dummy_hcd [ 3192.950740][ T9903] usb 8-1: Using ep0 maxpacket: 8 [ 3193.016856][ T1002] usb 10-1: config 0 has an invalid interface number: 93 but max is 0 [ 3193.035901][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9486'. [ 3193.055155][ T9903] usb 8-1: config 0 has an invalid interface number: 130 but max is 0 [ 3193.070741][ T1002] usb 10-1: config 0 has no interface number 0 [ 3193.104801][ T9903] usb 8-1: config 0 has no interface number 0 [ 3193.145855][ T1002] usb 10-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 3193.221985][ T9903] usb 8-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 3193.245637][ T1002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 3193.281591][ T9903] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3193.416007][ T1002] usb 10-1: Product: syz [ 3193.420878][ T9903] usb 8-1: Product: syz [ 3193.425046][ T9903] usb 8-1: Manufacturer: syz [ 3193.445675][ T1002] usb 10-1: Manufacturer: syz [ 3193.450406][ T1002] usb 10-1: SerialNumber: syz [ 3193.466322][ T6351] usb 1-1: USB disconnect, device number 18 [ 3193.497023][ T9903] usb 8-1: SerialNumber: syz [ 3193.504671][ T1002] usb 10-1: config 0 descriptor?? [ 3193.527278][ T9903] usb 8-1: config 0 descriptor?? [ 3193.538797][ T9903] as10x_usb: device has been detected [ 3193.544641][ T9903] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 3193.560091][ T9903] usb 8-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 3193.574145][ T9903] as10x_usb: error during firmware upload part1 [ 3193.586640][ T9903] Registered device PCTV Systems picoStick (74e) [ 3193.738994][ T1002] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 3193.833647][ T5904] usb 8-1: USB disconnect, device number 14 [ 3193.892293][ T5904] Unregistered device PCTV Systems picoStick (74e) [ 3193.894435][ T5904] as10x_usb: device has been disconnected [ 3193.920204][ T1002] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3193.928926][ T1002] dib0700: firmware download failed at 7 with -22 [ 3193.951332][ T1002] usb 10-1: USB disconnect, device number 120 [ 3195.094853][ T5904] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 3195.296356][ T5904] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 3195.332494][ T5904] usb 9-1: config 0 has no interface number 0 [ 3195.348324][ T5904] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3195.411836][ T5904] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3195.435589][ T5904] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3195.452576][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3195.592139][ T5904] usb 9-1: config 0 descriptor?? [ 3195.623410][ T9782] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3195.640996][ T5904] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3195.954446][ T9903] usb 9-1: USB disconnect, device number 22 [ 3196.114408][ T1002] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 3196.299695][ T1002] usb 8-1: config 0 has an invalid interface number: 173 but max is 0 [ 3196.348571][ T1002] usb 8-1: config 0 has no interface number 0 [ 3196.383102][ T1002] usb 8-1: config 0 interface 173 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 514 [ 3196.393669][ T1002] usb 8-1: config 0 interface 173 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3196.404228][ T1002] usb 8-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3 [ 3196.413302][ T1002] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3196.442131][ T1002] usb 8-1: config 0 descriptor?? [ 3196.447701][ T9798] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3196.775774][ T9807] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9500'. [ 3197.609862][ T1002] hdpvr 8-1:0.173: unexpected answer of status request, len -71 [ 3197.618186][ T1002] hdpvr 8-1:0.173: device init failed [ 3197.624032][ T1002] hdpvr 8-1:0.173: probe with driver hdpvr failed with error -12 [ 3197.636034][ T1002] usb 8-1: USB disconnect, device number 15 [ 3198.473170][ T9823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3198.857593][ T9831] ubi: mtd0 is already attached to ubi31 [ 3200.022357][ T9903] usb 6-1: new low-speed USB device number 105 using dummy_hcd [ 3200.450575][ T9903] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3200.497773][ T9903] usb 6-1: config 0 has no interface number 0 [ 3200.512497][ T9903] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3200.545360][ T9903] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3200.624379][ T9903] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3200.647280][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3200.749020][ T9903] usb 6-1: config 0 descriptor?? [ 3200.767074][ T9838] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3200.892164][ T9903] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3201.141818][ T5904] usb 6-1: USB disconnect, device number 105 [ 3202.145337][ T5959] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 3202.438806][ T5959] usb 8-1: Using ep0 maxpacket: 8 [ 3202.445834][ T5959] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 3202.460198][ T5959] usb 8-1: config 0 has no interface number 0 [ 3202.466609][ T5959] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3202.488816][ T5959] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3202.517299][ T5959] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3202.530633][ T5959] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3202.552459][ T5959] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3202.580543][ T5959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3202.599576][ T5959] usb 8-1: config 0 descriptor?? [ 3202.615577][ T5959] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3202.921330][ T9903] usb 8-1: USB disconnect, device number 16 [ 3202.923491][ T9903] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 3203.361024][ T30] audit: type=1326 audit(1755123269.673:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.8.9520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90b898ebe9 code=0x0 [ 3203.675860][ T9883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3203.770528][T23421] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3204.041995][T23421] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3204.052186][T23421] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3204.107870][T23421] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3204.127582][T23421] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3204.136342][T23421] usb 6-1: Product: syz [ 3204.149414][T23421] usb 6-1: Manufacturer: syz [ 3204.154142][T23421] usb 6-1: SerialNumber: syz [ 3204.176210][T23421] usb 6-1: config 0 descriptor?? [ 3204.188360][T23421] usb 6-1: selecting invalid altsetting 0 [ 3204.378323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.841085][ T9899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3204.849592][ T9899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3204.959033][ T9901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9901 comm=syz.9.9523 [ 3204.990590][ T5976] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 3205.151312][ T5976] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3205.162190][ T5976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3205.195105][ T5976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3205.223285][ T5976] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3205.928415][ T5976] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3205.961668][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3205.999357][ T5976] usb 1-1: Product: syz [ 3206.009548][ T5976] usb 1-1: Manufacturer: syz [ 3206.031181][ T5976] cdc_wdm 1-1:1.0: skipping garbage [ 3206.036440][ T5976] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 3207.061196][T23421] usb 6-1: USB disconnect, device number 106 [ 3207.428734][ T5976] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 3207.588565][ T5976] usb 10-1: Using ep0 maxpacket: 16 [ 3207.601920][ T5976] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 3207.612959][ T5976] usb 10-1: config 0 has no interface number 0 [ 3207.626237][ T5976] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3207.645470][ T5976] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3207.664600][ T5976] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3207.680648][ T5976] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3207.695618][ T5976] usb 10-1: Product: syz [ 3207.702995][ T5976] usb 10-1: SerialNumber: syz [ 3207.732308][ T5976] usb 10-1: config 0 descriptor?? [ 3207.927446][ T5976] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 3208.116041][ T5976] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input123 [ 3208.181187][ T9935] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9530'. [ 3208.376485][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.383751][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.392215][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.399417][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.406609][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.413781][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.420969][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.428156][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.435331][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.442484][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 3208.460839][ T5976] usb 10-1: USB disconnect, device number 121 [ 3208.460874][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 3208.501372][ T5976] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 3208.722370][ T1002] usb 1-1: USB disconnect, device number 19 [ 3209.555702][ T1002] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 3209.824266][ T1002] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 3209.872245][ T1002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3209.924921][ T1002] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3209.982083][ T1002] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 3210.040068][ T1002] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.063429][ T1002] usb 1-1: config 0 descriptor?? [ 3210.537159][ T5904] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 3211.225847][ T5904] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 3211.252391][ T5904] usb 8-1: config 0 has no interface number 0 [ 3211.266746][ T5904] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 3211.313261][ T5904] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 3211.330240][ T5904] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3211.339415][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3211.357826][ T5904] usb 8-1: config 0 descriptor?? [ 3211.864159][ T1002] usbhid 1-1:0.0: can't add hid device: -71 [ 3211.878428][ T1002] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 3211.891340][ T9965] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3211.911499][ T1002] usb 1-1: USB disconnect, device number 20 [ 3211.952361][ T5904] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 3212.224972][ T5904] usb 8-1: USB disconnect, device number 17 [ 3213.514175][ T30] audit: type=1400 audit(1755123279.838:1548): avc: denied { create } for pid=10020 comm="syz.5.9564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3214.765363][ T30] audit: type=1400 audit(1755123281.069:1549): avc: denied { create } for pid=10032 comm="syz.0.9567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 3265.828837][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3309.969735][ T31] sched: DL replenish lagged too much [ 3319.968963][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3319.975941][ C0] rcu: 1-...!: (1 GPs behind) idle=260c/0/0x1 softirq=280088/280089 fqs=655 [ 3319.985925][ C0] rcu: (detected by 0, t=10505 jiffies, g=242737, q=281 ncpus=2) [ 3319.993736][ C0] Sending NMI from CPU 0 to CPUs 1: [ 3319.993773][ C1] NMI backtrace for cpu 1 [ 3319.993795][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 3319.993820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3319.993832][ C1] RIP: 0010:timerqueue_add+0x6c/0x330 [ 3319.993870][ C1] Code: df e8 38 14 2c f6 48 39 eb 0f 85 47 02 00 00 e8 7a 19 2c f6 48 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 4b 02 00 00 48 8b 04 24 48 8b 18 48 85 db 0f 84 56 01 00 00 [ 3319.993889][ C1] RSP: 0018:ffffc90000a08e00 EFLAGS: 00000046 [ 3319.993905][ C1] RAX: dffffc0000000000 RBX: ffff888065b1f340 RCX: ffffffff8b8f7998 [ 3319.993919][ C1] RDX: 1ffff110170a4fba RSI: ffffffff8b8f79a6 RDI: 0000000000000006 [ 3319.993932][ C1] RBP: ffff888065b1f340 R08: 0000000000000006 R09: ffff888065b1f340 [ 3319.993945][ C1] R10: ffff888065b1f340 R11: ffffffff9b0edaa0 R12: ffff8880b8527c80 [ 3319.993958][ C1] R13: 0000000000000000 R14: ffff888065b1f340 R15: 0000000000000001 [ 3319.993971][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 3319.993994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3319.994007][ C1] CR2: 000000110c309640 CR3: 00000000427aa000 CR4: 00000000003526f0 [ 3319.994020][ C1] Call Trace: [ 3319.994027][ C1] [ 3319.994037][ C1] __hrtimer_run_queues+0x8ff/0xad0 [ 3319.994068][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3319.994090][ C1] ? read_tsc+0x9/0x20 [ 3319.994119][ C1] hrtimer_interrupt+0x397/0x8e0 [ 3319.994148][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 3319.994171][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 3319.994202][ C1] [ 3319.994208][ C1] [ 3319.994215][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3319.994236][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3319.994255][ C1] Code: 9c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3319.994273][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 3319.994288][ C1] RAX: 000000000d8bef71 RBX: 0000000000000001 RCX: ffffffff8b935c29 [ 3319.994301][ C1] RDX: 0000000000000000 RSI: ffffffff8de4f235 RDI: ffffffff8c162500 [ 3319.994313][ C1] RBP: ffffed1003cdf488 R08: 0000000000000001 R09: ffffed10170a6655 [ 3319.994326][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 3319.994338][ C1] R13: ffff88801e6fa440 R14: ffffffff90ab3590 R15: 0000000000000000 [ 3319.994355][ C1] ? ct_kernel_exit+0x139/0x190 [ 3319.994378][ C1] default_idle+0x13/0x20 [ 3319.994399][ C1] default_idle_call+0x6d/0xb0 [ 3319.994421][ C1] do_idle+0x391/0x510 [ 3319.994445][ C1] ? __pfx_do_idle+0x10/0x10 [ 3319.994467][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 3319.994491][ C1] cpu_startup_entry+0x4f/0x60 [ 3319.994514][ C1] start_secondary+0x21d/0x2b0 [ 3319.994542][ C1] ? __pfx_start_secondary+0x10/0x10 [ 3319.994573][ C1] common_startup_64+0x13e/0x148 [ 3319.994602][ C1] [ 3319.994762][ C0] rcu: rcu_preempt kthread starved for 7145 jiffies! g242737 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3320.301344][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3320.311295][ C0] rcu: RCU grace-period kthread stack dump: [ 3320.317163][ C0] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 3320.330664][ C0] Call Trace: [ 3320.334021][ C0] [ 3320.336942][ C0] __schedule+0x1190/0x5de0 [ 3320.341469][ C0] ? __pfx___schedule+0x10/0x10 [ 3320.346326][ C0] ? find_held_lock+0x2b/0x80 [ 3320.351012][ C0] ? schedule+0x2d7/0x3a0 [ 3320.355343][ C0] schedule+0xe7/0x3a0 [ 3320.359411][ C0] schedule_timeout+0x123/0x290 [ 3320.364260][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 3320.369629][ C0] ? __pfx_process_timeout+0x10/0x10 [ 3320.374914][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 3320.380726][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 3320.386211][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 3320.390979][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3320.396253][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 3320.401443][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 3320.406367][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 3320.411216][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3320.417027][ C0] rcu_gp_kthread+0x270/0x380 [ 3320.421693][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3320.426876][ C0] ? rcu_is_watching+0x12/0xc0 [ 3320.431635][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 3320.436826][ C0] ? __kthread_parkme+0x19e/0x250 [ 3320.441850][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3320.447038][ C0] kthread+0x3c5/0x780 [ 3320.451100][ C0] ? __pfx_kthread+0x10/0x10 [ 3320.455689][ C0] ? rcu_is_watching+0x12/0xc0 [ 3320.460444][ C0] ? __pfx_kthread+0x10/0x10 [ 3320.465023][ C0] ret_from_fork+0x5d7/0x6f0 [ 3320.469609][ C0] ? __pfx_kthread+0x10/0x10 [ 3320.474187][ C0] ret_from_fork_asm+0x1a/0x30 [ 3320.478961][ C0] [ 3320.481963][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 3320.488292][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 3320.499906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3320.509947][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3320.515660][ C0] Code: 9c 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 b2 16 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 3320.535272][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 3320.541342][ C0] RAX: 000000000aeafd45 RBX: 0000000000000000 RCX: ffffffff8b935c29 [ 3320.549308][ C0] RDX: 0000000000000000 RSI: ffffffff8de4f235 RDI: ffffffff8c162500 [ 3320.557284][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 3320.565261][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 3320.573224][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab3590 R15: 0000000000000000 [ 3320.581270][ C0] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 3320.590207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3320.596789][ C0] CR2: 000055558533e5c8 CR3: 0000000032775000 CR4: 00000000003526f0 [ 3320.604759][ C0] Call Trace: [ 3320.608038][ C0] [ 3320.610955][ C0] default_idle+0x13/0x20 [ 3320.615279][ C0] default_idle_call+0x6d/0xb0 [ 3320.620037][ C0] do_idle+0x391/0x510 [ 3320.624106][ C0] ? __pfx_do_idle+0x10/0x10 [ 3320.628695][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 3320.633891][ C0] cpu_startup_entry+0x4f/0x60 [ 3320.638661][ C0] rest_init+0x16b/0x2b0 [ 3320.642910][ C0] ? acpi_subsystem_init+0x133/0x180 [ 3320.648274][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 3320.653861][ C0] start_kernel+0x3ee/0x4d0 [ 3320.658375][ C0] x86_64_start_reservations+0x18/0x30 [ 3320.663842][ C0] x86_64_start_kernel+0x130/0x190 [ 3320.668963][ C0] common_startup_64+0x13e/0x148 [ 3320.673914][ C0] [ 3327.264979][ T1300] ieee802154 phy1 wpan1: encryption failed: -22