last executing test programs: 11.13628952s ago: executing program 4 (id=6489): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x458, 0x500f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x2, 0xf, 0x1, {0x22, 0xca8}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x8, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x5}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0xfb, 0x80, 0x10, 0xff, 0xf}, 0x3f, &(0x7f0000000440)={0x5, 0xf, 0x3f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xfc, "021ea98e0b6d41d52e0ff841ed874443"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x33, 0xc0, 0x5, 0xff00, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "8467815df52ad6ef9f281f13709b567a"}]}, 0x9, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2801}}, {0xba, &(0x7f00000005c0)=@string={0xba, 0x3, "cf14526d82d4059e5fcb66b83788ad28da675e51ba7e072462cf9631aa7d740f89af00cd680988571ddd1f49b435a43a56bbdf766139730a58970df4ed72879fc0ae12315bf76c9a9cf2ad069395483bda195ac59b15924b18af730a83cc918ae1cb2022ce5c0bdb17efa8ec4d0a02742aab0e10a41a6155c43b7ed684966e65bf2a8b88f2a2f578e3a2822cc653b6eb4e08893236f9c7f1ad5d0a487913f49a848cbb8d0e0950869eb79b9c9d120ab55afeead64e16b413"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x40c}}, {0xd, &(0x7f00000006c0)=@string={0xd, 0x3, "1524ea7f80f6877822b9f0"}}, {0x8d, &(0x7f0000000700)=@string={0x8d, 0x3, "772b64bbaa758a6b6faaa4ab60732962f296c2076e348a470eacc785a6da21ca9941f2a2b5b53a48290fa1560951ecbc676ff3827b5413b6edb8cc4a438b961e738dea74b8986ad755e3b3f0423db115f131d3aff9bbbb74af95e1c0f3592cb03aa7ad2c047268c23a0b5d1e898560a20ccab7cc215e385efb69a55aab88dccf1b9f809a2dabc6e00ac39f"}}, {0xe, &(0x7f00000007c0)=@string={0xe, 0x3, "aad6cadf353576f4e1fe5c65"}}, {0x31, &(0x7f0000000800)=@string={0x31, 0x3, "a73ef46139d64e2d288076d0ddcbbc5e73dc44378efe4b8da1968592745d6789429edd520af69efc0e779470929b8c"}}, {0xe0, &(0x7f0000000840)=@string={0xe0, 0x3, "e13758a534c8dadfecc30faefb575c5fe9bd7879e827db69d67535b15436fa82199c3c51b5458673a9e1226a296fbab94d774f84417b838f0199b0afd02b51d65fc160282b0e6d8d5333b6ceb5ff90028e04f4f678cd84632dcf02d2f06c73dc09b83f8844af4b46f181b761393338a635e7353c89f4473e40c30bdece6da01e741ad61ce9e53004868d5633d9c842da5ed5018506abf452995270626da435a1280a222f495861622a718f24dbdbb20c8a4401db7a30ec1738baac180ab0d5bafe4c00e6e24e8e329e06d1d2554bb2fb2caecc662071560ee515a0987c70"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000b40)={0x24, &(0x7f0000000a00)={0x0, 0xa, 0x46, {0x46, 0x3, "9dcf9bf339ff29354641868fc280ae397945b7fd329156b36e8aec61270a28251e91ab6228005a65c0b8e3317c58623776d86564c6f22a5093818446556f974f47551a13"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000ac0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "95316ede"}]}}, &(0x7f0000000b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x581c, 0xe2, 0x1, {0x22, 0xd13}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b80)={0x20, 0x14, 0xd6, "072086044b684d8782fbd1a794bc73ceae495d90b4672cc30217002ecb7118ea469905d91e8f61885890d5afe6008095cb5f05e1cd098bcc1557bcd8402d922d07e62744dec05c77736702b833c27ce1434ba58e0599149167e8b9627c4543377e3dc02eb7e46abd38314123e04383e7477c85ab266a87dbd00738cfd96ecc49b718ddc116b2c0e23c6e2ad956101de32a629fb3be2ed3523468ce90f1c9625fde202fd3a7f07edd3c55f626ef25b90bfed4085b54089f44265dbf048bcc4ad9ba4cc4704d26938d4769fb2d5e3ee2ba32b4cfde45a0"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xa1}, &(0x7f0000000d00)={0x20, 0x1, 0x56, "c229a20179961778bfd0d37adc6200717c1eefcb228eea9a381e3ad318bf87b86ff4aeaef3dd0e0f1b893a22409d1e920ef5a5b2caffe6e3886797d4e039a9a74792189adf7a42433b1df8c63946bb6ff6e6e40966b4"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x1}}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 9.3398558s ago: executing program 4 (id=6500): geteuid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe3b) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000011000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) 8.648500953s ago: executing program 1 (id=6502): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x110}}, 0x40040) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0xfffffffffffffee8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000dfff000000000100000a14000000020a05ffff00000000000000000000801400000011000100ffffffff00c47a0000000000000a"], 0x3c}, 0x1, 0x1200}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.587976518s ago: executing program 4 (id=6503): syz_usb_connect(0x0, 0x286, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000a1f169405909d02b9848000000010902740201000000000904a80010ff8a3700090505104000057f030905"], 0x0) 7.001357081s ago: executing program 1 (id=6505): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_GET_CPUID(0x1011) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) keyctl$revoke(0x3, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.196485958s ago: executing program 3 (id=6511): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sg(0x0, 0x0, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mkdirat(r5, &(0x7f0000000080)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x7}, 0x8) 5.096969807s ago: executing program 1 (id=6514): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 4.930128105s ago: executing program 0 (id=6515): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf5ffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}}, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x6a) 4.733743345s ago: executing program 0 (id=6516): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100677265746170000024000280080007006401010006000300"], 0x5c}}, 0x40) 4.702154472s ago: executing program 4 (id=6517): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="f04a2bb7000003"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4.371152186s ago: executing program 0 (id=6518): syz_open_dev$loop(0x0, 0x400000040000006, 0x400a00) r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c) memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x6, @sliced={0x3, [0x0, 0x9, 0x405, 0x7, 0xe72b, 0x3, 0x5, 0x80, 0x3b2e, 0x8, 0x4, 0x800, 0xe81d, 0x6e, 0x1, 0x5, 0xd842, 0x7, 0xfff, 0x6, 0x5, 0xffff, 0xfffd, 0x100, 0x7, 0x1, 0x2, 0xa, 0x12, 0x400, 0x5, 0xacf, 0x4, 0x7, 0xfdfa, 0x800, 0x6433, 0x4, 0x2, 0x7e3, 0x9, 0x477a, 0x1dc, 0x8, 0xa4, 0x65, 0x1d47, 0x6], 0xffffffff}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000400000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=0x24) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="57957ec0f252a84416c89e9e470bd925ce1fd85a542b4b872c28be46001f62aebb2bfb9e510b7ac22be7682df3bf33dcc59c18a8b93271f5e3ef718f2542e5dc94dbc4d37637c069388e8c6de00231e0ad327a868b69706051a54283006a53d17235126aacd6ef70b31f0975550bd3200663b0c605312ad8d6d798540b09d85996e6af74649ef440e3847e825003381ed66be88531f6dc1eee6ffc2881f4cf28acd480bc85a635e9bd4a7814c6025e1ea6c0a47a142e84e16624e298a880e6de395aa4605a4d00d8ce1a2d133733322570ec0000000000", @ANYRES32=0x0], 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x15, 0x88, 0xc000067}, 0x2c) sendmsg$RDMA_NLDEV_CMD_SET(r4, 0x0, 0x40810) 4.137202836s ago: executing program 1 (id=6520): geteuid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffe3b) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000011000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) 3.779405908s ago: executing program 0 (id=6521): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$phonet_pipe(0x23, 0x5, 0x2) accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @bcast, @remote, @null, @default, @remote, @netrom, @default]}, &(0x7f0000000100)=0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0x19]}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$midi(0xffffffffffffffff, 0x0, 0x43) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000000)={0xe, 0xa, 0xbb9b}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 3.448107497s ago: executing program 1 (id=6522): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x8, r4}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5002, 0x3000, 0x8, r4}) 3.406903869s ago: executing program 3 (id=6524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_GET_CPUID(0x1011) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) keyctl$revoke(0x3, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.820946104s ago: executing program 2 (id=6525): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) 2.805758392s ago: executing program 3 (id=6526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe79, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, r7}) 2.61688589s ago: executing program 2 (id=6527): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf5ffffff}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}}, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x6a) 2.117734792s ago: executing program 1 (id=6528): r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x4, 0x5, 0x4001, 0x7, 0x0, 0x7, 0x0, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x554, 0x101000) getpeername(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000002c0)=0x80) r2 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000003c0)=""/116) syz_usb_connect(0x0, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x19, 0xf7, 0x20, 0x471, 0x312, 0x9469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xb4, 0xc7, 0x6a, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}]}], [{{0x9, 0x5, 0x7, 0x19, 0x200, 0x8, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @generic={0x10, 0x3b, "a64ca5eab9884d11a74913391d1d"}]}}]}}]}}]}}, 0x0) 2.110882464s ago: executing program 2 (id=6529): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0x3, 0x0, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x1, 0x0, 0x9, 0x0, 0x8000, 0x0, r2, 0xee01, 0xfffffffd, 0x1}}}}, 0x0, 0x0}) 2.0676732s ago: executing program 0 (id=6530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x220, 0x2a8, 0x2a8, 0x220, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x7fffffff, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@physdev={{0x68}, {'veth0_to_batadv\x00', {}, 'macsec0\x00', {0x1fe}, 0x10, 0x10}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4000, [0x1, 0x2, 0x2, 0x1, 0x1], 0x1}, {0x1, [0x0, 0x0, 0x0, 0x6, 0x3, 0x2], 0x4, 0x1}}}}, {{@ip={@multicast2, @loopback, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x79, 0x2}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) userfaultfd(0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f00000004c0)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x7, "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", 0x3, 0x8, 0xf, 0x6, 0x3, 0x6, 0x5}, r6}}, 0x128) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xfffd, 0xa}, 0x8) 2.024764114s ago: executing program 2 (id=6531): syz_open_dev$loop(0x0, 0x400000040000006, 0x400a00) r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0xfffc, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc}, 0x1c) memfd_create(&(0x7f0000000100)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x6, @sliced={0x3, [0x0, 0x9, 0x405, 0x7, 0xe72b, 0x3, 0x5, 0x80, 0x3b2e, 0x8, 0x4, 0x800, 0xe81d, 0x6e, 0x1, 0x5, 0xd842, 0x7, 0xfff, 0x6, 0x5, 0xffff, 0xfffd, 0x100, 0x7, 0x1, 0x2, 0xa, 0x12, 0x400, 0x5, 0xacf, 0x4, 0x7, 0xfdfa, 0x800, 0x6433, 0x4, 0x2, 0x7e3, 0x9, 0x477a, 0x1dc, 0x8, 0xa4, 0x65, 0x1d47, 0x6], 0xffffffff}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000400000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=0x24) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="57957ec0f252a84416c89e9e470bd925ce1fd85a542b4b872c28be46001f62aebb2bfb9e510b7ac22be7682df3bf33dcc59c18a8b93271f5e3ef718f2542e5dc94dbc4d37637c069388e8c6de00231e0ad327a868b69706051a54283006a53d17235126aacd6ef70b31f0975550bd3200663b0c605312ad8d6d798540b09d85996e6af74649ef440e3847e825003381ed66be88531f6dc1eee6ffc2881f4cf28acd480bc85a635e9bd4a7814c6025e1ea6c0a47a142e84e16624e298a880e6de395aa4605a4d00d8ce1a2d133733322570ec0000000000", @ANYRES32=0x0], 0x44}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @empty}, 0x19) sendmmsg(r6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x15, 0x88, 0xc000067}, 0x2c) sendmsg$RDMA_NLDEV_CMD_SET(r4, 0x0, 0x40810) 985.694993ms ago: executing program 3 (id=6532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 858.798939ms ago: executing program 4 (id=6533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 783.765852ms ago: executing program 2 (id=6534): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa1c) 732.539596ms ago: executing program 4 (id=6535): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1d) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_open_procfs(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) unshare(0x24020400) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[], 0x11) sendfile(r0, r1, 0x0, 0x20000023896) r6 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) 728.985863ms ago: executing program 3 (id=6536): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_GET_CPUID(0x1011) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x100000000000f7) keyctl$revoke(0x3, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 288.212825ms ago: executing program 0 (id=6537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) 52.270296ms ago: executing program 3 (id=6538): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12) chdir(&(0x7f0000000000)='./file0\x00') 0s ago: executing program 2 (id=6539): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x8, r4}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5002, 0x3000, 0x8, r4}) kernel console output (not intermixed with test programs): [ 1458.099818][T20713] usb 1-1: device descriptor read/64, error -71 [ 1458.129928][T24965] program syz.2.5912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1458.170060][T24964] xt_hashlimit: size too large, truncated to 1048576 [ 1458.255367][T15801] usb 5-1: USB disconnect, device number 105 [ 1458.339647][T20713] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1458.479683][T20713] usb 1-1: device descriptor read/64, error -71 [ 1458.601608][T20713] usb usb1-port1: attempt power cycle [ 1458.944675][T24973] vlan3: entered promiscuous mode [ 1458.953420][T24973] vlan3: entered allmulticast mode [ 1458.958724][T24973] hsr_slave_1: entered allmulticast mode [ 1459.107355][T20713] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1459.108376][T24973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5916'. [ 1459.143195][T20713] usb 1-1: device descriptor read/8, error -71 [ 1459.399846][T20713] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1459.451383][T20713] usb 1-1: device descriptor read/8, error -71 [ 1459.571113][T20713] usb usb1-port1: unable to enumerate USB device [ 1460.840665][T24991] netlink: 'syz.0.5920': attribute type 4 has an invalid length. [ 1460.894002][T24992] netlink: 'syz.0.5920': attribute type 4 has an invalid length. [ 1461.240214][ T10] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1461.410806][ T10] usb 3-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 1461.429524][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1461.461372][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1461.469704][T20713] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1461.479500][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.496833][ T10] usb 3-1: Product: syz [ 1461.505407][ T10] usb 3-1: Manufacturer: syz [ 1461.519507][ T10] usb 3-1: SerialNumber: syz [ 1461.528972][ T10] usb 3-1: config 0 descriptor?? [ 1461.641371][T20713] usb 1-1: device descriptor read/64, error -71 [ 1461.662603][T18303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1461.673035][T18303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1461.685805][T18303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1461.697476][T18303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1461.706225][T18303] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1461.825305][T25003] lo speed is unknown, defaulting to 1000 [ 1462.237164][T25011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5926'. [ 1462.397327][T20713] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1462.456559][ T10] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1462.490602][ T10] usb 3-1: USB disconnect, device number 116 [ 1462.540887][T20713] usb 1-1: device descriptor read/64, error -71 [ 1462.561618][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.572427][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1462.742580][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.754408][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1462.788113][T25018] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 1462.797747][T25018] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 1462.808208][T20713] usb usb1-port1: attempt power cycle [ 1462.814145][T25018] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 1462.824696][T25018] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 1462.888164][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.901108][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1463.095711][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.106208][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1463.220334][T25023] overlay: ./file0 is not a directory [ 1463.226591][T20713] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1463.470351][T20713] usb 1-1: device descriptor read/8, error -71 [ 1463.496727][T19060] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1463.545102][T25003] chnl_net:caif_netlink_parms(): no params data found [ 1463.709747][T19060] usb 4-1: Using ep0 maxpacket: 8 [ 1463.789907][T18303] Bluetooth: hci0: command tx timeout [ 1463.815036][T15802] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1463.823599][T20713] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1463.860425][T20713] usb 1-1: device descriptor read/8, error -71 [ 1463.868895][T25031] fuse: Unknown parameter 'group_i00000000000000000000' [ 1463.907057][T19060] usb 4-1: config 8 has an invalid interface number: 249 but max is 2 [ 1463.933559][T19060] usb 4-1: config 8 has an invalid interface number: 243 but max is 2 [ 1463.946153][T19060] usb 4-1: config 8 has an invalid interface number: 79 but max is 2 [ 1463.957665][T19060] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.969632][T15802] usb 3-1: device descriptor read/64, error -71 [ 1463.983875][T19060] usb 4-1: config 8 has no interface number 0 [ 1463.990589][T19060] usb 4-1: config 8 has no interface number 1 [ 1463.993366][T20713] usb usb1-port1: unable to enumerate USB device [ 1463.996731][T19060] usb 4-1: config 8 has no interface number 2 [ 1463.996788][T19060] usb 4-1: config 8 interface 249 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1463.996810][T19060] usb 4-1: config 8 interface 249 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1463.996835][T19060] usb 4-1: config 8 interface 249 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1463.996858][T19060] usb 4-1: config 8 interface 249 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1463.996878][T19060] usb 4-1: config 8 interface 249 altsetting 0 endpoint 0xC has an invalid bInterval 252, changing to 7 [ 1463.996900][T19060] usb 4-1: config 8 interface 249 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 10 [ 1463.996923][T19060] usb 4-1: too many endpoints for config 8 interface 243 altsetting 16: 139, using maximum allowed: 30 [ 1464.124718][T19060] usb 4-1: config 8 interface 243 altsetting 16 has a duplicate endpoint with address 0x7, skipping [ 1464.143018][T19060] usb 4-1: config 8 interface 243 altsetting 16 endpoint 0x8 has invalid maxpacket 1536, setting to 64 [ 1464.154200][T19060] usb 4-1: config 8 interface 243 altsetting 16 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1464.165807][T19060] usb 4-1: config 8 interface 243 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 139 [ 1464.179202][T19060] usb 4-1: config 8 interface 79 altsetting 240 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1464.190911][T19060] usb 4-1: config 8 interface 79 altsetting 240 has a duplicate endpoint with address 0x2, skipping [ 1464.229506][T19060] usb 4-1: config 8 interface 79 altsetting 240 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 1464.240692][T15802] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1464.307297][T19060] usb 4-1: config 8 interface 243 has no altsetting 0 [ 1464.429662][T15802] usb 3-1: device descriptor read/64, error -71 [ 1464.460243][T19060] usb 4-1: config 8 interface 79 has no altsetting 0 [ 1464.520369][T25043] binder: 25042:25043 ioctl c0306201 0 returned -14 [ 1464.542426][T15802] usb usb3-port1: attempt power cycle [ 1464.653701][T25045] overlayfs: missing 'lowerdir' [ 1464.746393][T19060] usb 4-1: New USB device found, idVendor=2040, idProduct=b111, bcdDevice= d.12 [ 1464.779223][T19060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.787398][T19060] usb 4-1: Product: syz [ 1464.795895][T19060] usb 4-1: Manufacturer: syz [ 1464.801703][T19060] usb 4-1: SerialNumber: syz [ 1464.907159][ T30] audit: type=1400 audit(1746371514.333:698): avc: denied { override_creds } for pid=25046 comm="syz.0.5938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1464.909957][T15802] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1465.077909][T15802] usb 3-1: device descriptor read/8, error -71 [ 1465.250073][ T13] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1465.272136][ T13] bond0 (unregistering): Released all slaves [ 1465.307363][T25003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.319275][T25003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.335782][T25003] bridge_slave_0: entered allmulticast mode [ 1465.349593][T15802] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1465.361255][T25003] bridge_slave_0: entered promiscuous mode [ 1465.388054][T25003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.402870][T25003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.412670][T25003] bridge_slave_1: entered allmulticast mode [ 1465.424265][T25003] bridge_slave_1: entered promiscuous mode [ 1465.470288][T15802] usb 3-1: device descriptor read/8, error -71 [ 1465.579963][T15802] usb usb3-port1: unable to enumerate USB device [ 1465.610879][T25012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1465.631956][T19060] usb 4-1: USB disconnect, device number 112 [ 1465.869529][T18303] Bluetooth: hci0: command tx timeout [ 1465.965284][ T13] tipc: Disabling bearer [ 1465.997241][T25003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.009474][ T13] tipc: Left network mode [ 1466.080162][T25003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1466.358447][T25003] team0: Port device team_slave_0 added [ 1466.489372][T25003] team0: Port device team_slave_1 added [ 1466.580915][T25067] overlayfs: missing 'workdir' [ 1467.563806][T25003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.609885][T25003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.679841][T25003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.782454][T25003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.789419][T25003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.959632][T18303] Bluetooth: hci0: command tx timeout [ 1467.991146][T25098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5950'. [ 1468.050134][T25003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.179908][ T30] audit: type=1400 audit(1746371517.593:699): avc: denied { ioctl } for pid=25102 comm="syz.0.5951" path="socket:[89044]" dev="sockfs" ino=89044 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1468.279642][ T13] hsr_slave_0: left promiscuous mode [ 1468.380514][ T13] veth1_macvtap: left promiscuous mode [ 1468.386386][ T13] veth0_macvtap: left promiscuous mode [ 1468.397266][ T13] veth1_vlan: left promiscuous mode [ 1468.407961][ T13] veth0_vlan: left promiscuous mode [ 1468.861755][T19060] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1469.022897][T19060] usb 4-1: Using ep0 maxpacket: 8 [ 1469.037095][T19060] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.058639][T19060] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1469.077564][T19060] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.510762][T25119] overlayfs: missing 'lowerdir' [ 1469.603059][T25003] hsr_slave_0: entered promiscuous mode [ 1469.617309][T25003] hsr_slave_1: entered promiscuous mode [ 1469.623944][T25003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1469.632543][T25003] Cannot create hsr debugfs directory [ 1469.880009][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1470.039620][T18303] Bluetooth: hci0: command tx timeout [ 1470.050881][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1470.065310][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1470.110951][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1470.189754][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1470.215862][ T13] IPVS: stop unused estimator thread 0... [ 1470.245588][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1470.303727][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1470.366442][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1470.378851][ T10] usb 3-1: Product: syz [ 1470.384724][ T10] usb 3-1: Manufacturer: syz [ 1470.399177][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1470.408266][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1470.417162][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1470.439169][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 1471.665877][ T10] usb 4-1: USB disconnect, device number 113 [ 1471.703578][T25003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1471.989340][T25003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1472.122190][T25003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1472.138509][T25158] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5963'. [ 1472.331083][T25003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1473.106495][T25164] lo speed is unknown, defaulting to 1000 [ 1473.279559][ T10] usb 3-1: USB disconnect, device number 121 [ 1473.666533][T25003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.714842][T25003] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.865879][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.873037][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.018993][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.026143][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.043171][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5967'. [ 1474.065049][T25199] overlayfs: missing 'lowerdir' [ 1474.697836][T25192] team0: Port device vlan0 removed [ 1474.850562][T25208] overlayfs: missing 'lowerdir' [ 1475.404751][T25221] overlay: ./file0 is not a directory [ 1476.352567][T25003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.273870][T25250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1477.320442][T25248] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5978'. [ 1477.868638][T25255] lo speed is unknown, defaulting to 1000 [ 1478.565407][T25003] veth0_vlan: entered promiscuous mode [ 1478.775054][T25003] veth1_vlan: entered promiscuous mode [ 1478.920903][T25003] veth0_macvtap: entered promiscuous mode [ 1478.965629][T25003] veth1_macvtap: entered promiscuous mode [ 1479.223372][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.419498][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.425651][T25292] program syz.1.5984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1479.499487][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.559918][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.585730][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.633888][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.647229][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.657910][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.668239][T25290] xt_hashlimit: size too large, truncated to 1048576 [ 1479.676593][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.705206][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.724760][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.739616][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.754635][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.783698][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.826646][T25003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.859136][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1479.929512][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.978543][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.029730][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.078748][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.103777][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.153741][T25003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.182164][T25003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.220826][T25003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.267949][T25003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.290969][T25003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.309539][T25003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.356968][T25003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.867279][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.893088][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.028173][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.046199][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.209604][T10407] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1481.379619][T10407] usb 3-1: Using ep0 maxpacket: 32 [ 1481.396255][T10407] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1481.428796][T10407] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1481.442795][T10407] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1481.464044][T10407] usb 3-1: Product: syz [ 1481.484312][T10407] usb 3-1: Manufacturer: syz [ 1481.491605][T10407] usb 3-1: SerialNumber: syz [ 1481.510489][T10407] usb 3-1: config 0 descriptor?? [ 1481.532232][T25306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1481.540749][T25314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1482.049734][T10407] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1482.222936][T10407] usb 5-1: config 0 has no interfaces? [ 1482.280895][T10407] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1482.309548][T10407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.375161][T10407] usb 5-1: Product: syz [ 1482.465145][T10407] usb 5-1: Manufacturer: syz [ 1482.488819][T10407] usb 5-1: SerialNumber: syz [ 1482.557097][T10407] usb 5-1: config 0 descriptor?? [ 1482.677059][T25328] overlayfs: missing 'lowerdir' [ 1483.209375][T19060] usb 3-1: USB disconnect, device number 122 [ 1483.541530][T25341] netlink: 'syz.3.5996': attribute type 12 has an invalid length. [ 1483.916403][ T5902] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1484.069229][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.075756][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.398732][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.519205][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.586575][ T5902] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1484.621156][T25357] Set syz1 is full, maxelem 65536 reached [ 1484.629530][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.684680][ T5902] usb 4-1: config 0 descriptor?? [ 1485.013708][T15801] usb 5-1: USB disconnect, device number 106 [ 1485.181213][ T5902] steelseries 0003:1038:12B6.001F: unknown main item tag 0x0 [ 1485.228754][ T5902] steelseries 0003:1038:12B6.001F: unknown main item tag 0x0 [ 1485.292166][ T5902] steelseries 0003:1038:12B6.001F: unknown main item tag 0x6 [ 1485.312318][T25369] overlayfs: missing 'lowerdir' [ 1485.384952][ T5902] steelseries 0003:1038:12B6.001F: item fetching failed at offset 4/7 [ 1485.446502][ T5902] steelseries 0003:1038:12B6.001F: probe with driver steelseries failed with error -22 [ 1485.822844][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1485.874545][T25379] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1486.002028][T25378] team0: Port device vlan0 removed [ 1486.287845][T25386] lo speed is unknown, defaulting to 1000 [ 1486.662156][T10407] usb 4-1: USB disconnect, device number 114 [ 1487.180359][T25402] team0: Unable to change to the same mode the team is in [ 1487.241617][T25402] tipc: Started in network mode [ 1487.246973][T25402] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1487.342031][T25402] tipc: Enabled bearer , priority 0 [ 1487.349542][T10407] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1487.388070][T25407] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1487.554128][T10407] usb 4-1: config 0 has no interfaces? [ 1487.573069][T10407] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1487.593383][T10407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.612847][T10407] usb 4-1: Product: syz [ 1487.617021][T10407] usb 4-1: Manufacturer: syz [ 1487.639503][T10407] usb 4-1: SerialNumber: syz [ 1487.657319][T10407] usb 4-1: config 0 descriptor?? [ 1487.987129][T10407] usb 4-1: USB disconnect, device number 115 [ 1488.348320][T25418] lo speed is unknown, defaulting to 1000 [ 1488.360001][T11168] tipc: Node number set to 11578026 [ 1488.513254][ T5864] kworker/0:4 (5864) used greatest stack depth: 18040 bytes left [ 1489.859656][T11168] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1489.903408][ T30] audit: type=1400 audit(1746371539.323:700): avc: denied { ioctl } for pid=25441 comm="syz.3.6025" path="socket:[90836]" dev="sockfs" ino=90836 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1489.915154][T25444] overlayfs: missing 'workdir' [ 1490.089787][T11168] usb 3-1: Using ep0 maxpacket: 16 [ 1490.111835][T11168] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1490.123764][T11168] usb 3-1: config 8 has an invalid interface number: 64 but max is 0 [ 1490.141492][T11168] usb 3-1: config 8 has no interface number 0 [ 1490.148343][T11168] usb 3-1: config 8 interface 64 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1490.179861][T11168] usb 3-1: config 8 interface 64 has no altsetting 0 [ 1490.188979][T11168] usb 3-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 1490.226228][T11168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.256552][T11168] usb 3-1: Product: syz [ 1490.262670][T11168] usb 3-1: Manufacturer: syz [ 1490.274559][T11168] usb 3-1: SerialNumber: syz [ 1490.299576][T15801] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1490.464587][T15801] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1490.486222][T15801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.646587][T11168] cdc_ether 3-1:8.64: invalid descriptor buffer length [ 1490.655517][T15801] usb 4-1: Product: syz [ 1490.655528][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1490.662302][T25456] bridge_slave_0: left allmulticast mode [ 1490.670700][T11168] usb 3-1: bad CDC descriptors [ 1490.676030][T25456] bridge_slave_0: left promiscuous mode [ 1490.685992][T25456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.689216][T15801] usb 4-1: Manufacturer: syz [ 1490.700964][T25456] bridge_slave_1: left allmulticast mode [ 1490.707089][T25456] bridge_slave_1: left promiscuous mode [ 1490.713266][T25456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.715981][T11168] usb 3-1: USB disconnect, device number 123 [ 1490.727388][T15801] usb 4-1: SerialNumber: syz [ 1490.727468][T25459] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6031'. [ 1490.745904][T15801] usb 4-1: config 0 descriptor?? [ 1490.783446][T25456] bond0: (slave bond_slave_0): Releasing backup interface [ 1490.813626][T25456] bond0: (slave bond_slave_1): Releasing backup interface [ 1490.888027][T25456] team0: Port device team_slave_0 removed [ 1490.922604][T25456] team0: Port device team_slave_1 removed [ 1490.948282][T25456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.987177][T25456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.996518][T11168] usb 4-1: USB disconnect, device number 116 [ 1491.052451][T25456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1491.100634][T25456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.940021][ T92] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1492.113425][T10407] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1492.299708][T10407] usb 5-1: Using ep0 maxpacket: 32 [ 1492.895848][ T92] usb 3-1: no configurations [ 1492.913696][ T92] usb 3-1: can't read configurations, error -22 [ 1492.934422][T10407] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1492.970016][T10407] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1492.992914][T10407] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1493.001179][T10407] usb 5-1: Product: syz [ 1493.005335][T10407] usb 5-1: Manufacturer: syz [ 1493.009998][T10407] usb 5-1: SerialNumber: syz [ 1493.060790][T10407] usb 5-1: config 0 descriptor?? [ 1493.081388][T25478] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1493.109567][ T92] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1493.277333][ T30] audit: type=1400 audit(1746371542.703:701): avc: denied { getopt } for pid=25500 comm="syz.3.6045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1493.320566][ T92] usb 3-1: no configurations [ 1493.335003][ T92] usb 3-1: can't read configurations, error -22 [ 1493.496781][ T92] usb usb3-port1: attempt power cycle [ 1493.539599][T11168] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1493.731754][T11168] usb 1-1: config 0 has no interfaces? [ 1493.740247][T11168] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1493.754330][T11168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.781063][T11168] usb 1-1: Product: syz [ 1493.793164][T11168] usb 1-1: Manufacturer: syz [ 1493.808103][T11168] usb 1-1: SerialNumber: syz [ 1493.859564][ T92] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1493.872090][T11168] usb 1-1: config 0 descriptor?? [ 1493.965697][ T92] usb 3-1: no configurations [ 1493.999683][ T92] usb 3-1: can't read configurations, error -22 [ 1494.103983][T25499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.139734][ T92] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1494.157457][T25499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.185018][ T92] usb 3-1: no configurations [ 1494.270674][ T92] usb 3-1: can't read configurations, error -22 [ 1494.290862][ T92] usb usb3-port1: unable to enumerate USB device [ 1494.297516][T11168] usb 5-1: USB disconnect, device number 107 [ 1494.328021][ T92] usb 1-1: USB disconnect, device number 114 [ 1494.459691][T25510] netlink: 'syz.3.6047': attribute type 21 has an invalid length. [ 1494.488252][T25510] netlink: 'syz.3.6047': attribute type 1 has an invalid length. [ 1494.563643][T25478] syzkaller1: entered promiscuous mode [ 1494.586614][T25478] syzkaller1: entered allmulticast mode [ 1494.614912][T25510] netlink: 'syz.3.6047': attribute type 21 has an invalid length. [ 1494.644683][T25510] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1494.724180][T25513] usb usb7: usbfs: process 25513 (syz.3.6047) did not claim interface 0 before use [ 1494.941740][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6050'. [ 1495.160575][T11168] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1495.206201][T25522] 9pnet_fd: Insufficient options for proto=fd [ 1495.378480][T11168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.432798][T11168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.453181][T11168] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1495.463737][T11168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.499875][T11168] usb 3-1: config 0 descriptor?? [ 1495.575965][ T30] audit: type=1400 audit(1746371544.993:702): avc: denied { setopt } for pid=25527 comm="syz.4.6054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1495.936979][T11168] steelseries 0003:1038:12B6.0020: unknown main item tag 0x0 [ 1495.978227][T11168] steelseries 0003:1038:12B6.0020: unknown main item tag 0x0 [ 1496.008867][T11168] steelseries 0003:1038:12B6.0020: unknown main item tag 0x6 [ 1496.037776][T11168] steelseries 0003:1038:12B6.0020: item fetching failed at offset 4/7 [ 1496.039581][T19060] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1496.056654][T11168] steelseries 0003:1038:12B6.0020: probe with driver steelseries failed with error -22 [ 1496.242624][T19060] usb 5-1: config 0 has no interfaces? [ 1496.254987][T19060] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1496.277174][T19060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1496.350215][T19060] usb 5-1: Product: syz [ 1496.359556][T19060] usb 5-1: Manufacturer: syz [ 1496.364969][T19060] usb 5-1: SerialNumber: syz [ 1496.412537][T19060] usb 5-1: config 0 descriptor?? [ 1496.939735][T10407] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1497.023133][ T5902] usb 5-1: USB disconnect, device number 108 [ 1497.091367][T10407] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1497.101143][T10407] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1497.116381][T10407] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1497.125606][T10407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.137887][T10407] usb 1-1: Product: syz [ 1497.139565][T15801] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1497.142318][T10407] usb 1-1: Manufacturer: syz [ 1497.154732][T10407] usb 1-1: SerialNumber: syz [ 1497.301863][T15801] usb 4-1: config 0 has no interfaces? [ 1497.310511][T15801] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1497.320173][T15801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.328496][T15801] usb 4-1: Product: syz [ 1497.333059][T15801] usb 4-1: Manufacturer: syz [ 1497.337968][T15801] usb 4-1: SerialNumber: syz [ 1497.345185][T15801] usb 4-1: config 0 descriptor?? [ 1497.570384][T25546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.580368][T25546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.642583][T15801] usb 4-1: USB disconnect, device number 117 [ 1497.835656][ T5902] usb 3-1: USB disconnect, device number 2 [ 1499.635201][ T5902] usb 1-1: USB disconnect, device number 115 [ 1500.354093][T10407] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1500.572758][T10407] usb 5-1: Using ep0 maxpacket: 16 [ 1500.642869][T10407] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 1500.866555][ T30] audit: type=1326 audit(1746371550.273:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea98f8e969 code=0x7ffc0000 [ 1500.891389][T15801] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1500.939619][ T30] audit: type=1326 audit(1746371550.273:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea98f8e969 code=0x7ffc0000 [ 1501.073357][T15801] usb 3-1: config 0 has no interfaces? [ 1501.089931][T15801] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1501.121356][ T30] audit: type=1326 audit(1746371550.273:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea98f8e969 code=0x7ffc0000 [ 1501.162144][T15801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.183535][T10407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1501.186869][T15801] usb 3-1: Product: syz [ 1501.202253][T15801] usb 3-1: Manufacturer: syz [ 1501.212883][T10407] usb 5-1: can't read configurations, error -61 [ 1501.212985][ T30] audit: type=1326 audit(1746371550.273:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea98f8e969 code=0x7ffc0000 [ 1501.254260][T15801] usb 3-1: SerialNumber: syz [ 1501.287306][ T30] audit: type=1326 audit(1746371550.273:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea98f8e969 code=0x7ffc0000 [ 1501.338324][T15801] usb 3-1: config 0 descriptor?? [ 1501.399729][ T30] audit: type=1326 audit(1746371550.273:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea98f90887 code=0x7ffc0000 [ 1501.430337][ T30] audit: type=1326 audit(1746371550.273:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fea98f907fc code=0x7ffc0000 [ 1501.430635][T10407] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1501.453661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1501.455300][ T30] audit: type=1326 audit(1746371550.273:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fea98f90734 code=0x7ffc0000 [ 1501.550011][ T30] audit: type=1326 audit(1746371550.273:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fea98f90734 code=0x7ffc0000 [ 1501.643416][T25592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.685976][T25592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.765511][ T30] audit: type=1326 audit(1746371550.273:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25590 comm="syz.0.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fea98f8d5ca code=0x7ffc0000 [ 1501.801298][ T92] usb 3-1: USB disconnect, device number 3 [ 1501.820375][T10407] usb 5-1: Using ep0 maxpacket: 16 [ 1501.838876][T10407] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 1501.935945][T10407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1501.979616][T10407] usb 5-1: can't read configurations, error -61 [ 1501.997614][T10407] usb usb5-port1: attempt power cycle [ 1502.399515][T10407] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1502.437318][T10407] usb 5-1: Using ep0 maxpacket: 16 [ 1502.443425][T10407] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 1502.461857][T10407] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1502.476585][T10407] usb 5-1: can't read configurations, error -61 [ 1502.531727][T15801] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1502.630203][T10407] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1502.653264][T25624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1502.726668][T25624] tipc: Resetting bearer [ 1502.750416][T15801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1502.799778][T15801] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1502.961571][T15801] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1502.971756][T15801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.013108][T10407] usb 5-1: device descriptor read/8, error -71 [ 1503.029000][T25632] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1503.034679][T15801] usb 4-1: Product: syz [ 1503.051717][T15801] usb 4-1: Manufacturer: syz [ 1503.056728][T15801] usb 4-1: SerialNumber: syz [ 1503.115442][T25632] netlink: zone id is out of range [ 1503.141679][T25632] netlink: get zone limit has 8 unknown bytes [ 1503.178756][T10407] usb usb5-port1: unable to enumerate USB device [ 1503.335733][T25638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6086'. [ 1503.370554][T25638] bridge_slave_0: left allmulticast mode [ 1503.376283][T25638] bridge_slave_0: left promiscuous mode [ 1503.406678][T25638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.434052][T25638] bridge_slave_1: left allmulticast mode [ 1503.482280][T25638] bridge_slave_1: left promiscuous mode [ 1503.488929][T25638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.514148][T25638] bond0: (slave bond_slave_0): Releasing backup interface [ 1503.535318][T25638] bond0: (slave bond_slave_1): Releasing backup interface [ 1503.591547][T25638] team0: Port device team_slave_0 removed [ 1503.646626][T25638] team0: Port device team_slave_1 removed [ 1503.654991][T25638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.663174][T25638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.689559][ T92] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1503.793808][ T36] tipc: Resetting bearer [ 1503.879982][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 1503.917005][T25650] ALSA: mixer_oss: invalid index 40000 [ 1503.924889][ T92] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1503.950867][ T92] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1503.974616][ T92] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1503.992716][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.001533][ T92] usb 1-1: Product: syz [ 1504.011898][ T92] usb 1-1: Manufacturer: syz [ 1504.022116][ T92] usb 1-1: SerialNumber: syz [ 1504.312375][T25627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.321966][T25627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.380114][ T92] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1504.404011][ T92] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1504.427495][ T92] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1504.435335][ T92] usb 1-1: media controller created [ 1504.492147][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1504.542725][ T92] zl10353_read_register: readreg error (reg=127, ret==0) [ 1504.570975][ T92] usb 1-1: USB disconnect, device number 116 [ 1504.784019][T15801] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1504.802108][T25655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1504.951524][T15801] usb 5-1: config 0 has no interfaces? [ 1504.975722][T15801] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1505.006639][T15801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.017145][T15801] usb 5-1: Product: syz [ 1505.029616][T15801] usb 5-1: Manufacturer: syz [ 1505.035149][T15801] usb 5-1: SerialNumber: syz [ 1505.054392][T15801] usb 5-1: config 0 descriptor?? [ 1505.130061][T15801] usb 4-1: USB disconnect, device number 118 [ 1505.317769][T25653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.367267][T25653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.535292][ T5902] usb 5-1: USB disconnect, device number 113 [ 1505.707539][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.739522][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1505.785091][T24064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1505.798964][T24064] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1505.808609][T24064] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1505.820290][T24064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1505.829006][T24064] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1505.882324][T25673] lo speed is unknown, defaulting to 1000 [ 1506.215217][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.235871][T25682] fuse: Invalid rootmode [ 1506.254616][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1506.475768][T25673] chnl_net:caif_netlink_parms(): no params data found [ 1506.626796][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.637260][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1507.310273][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.321238][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1507.628677][T25673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.657518][T25673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.673740][T25673] bridge_slave_0: entered allmulticast mode [ 1507.682509][T25673] bridge_slave_0: entered promiscuous mode [ 1507.693943][T25673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.704607][T25673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.712612][T25673] bridge_slave_1: entered allmulticast mode [ 1507.719487][T25673] bridge_slave_1: entered promiscuous mode [ 1507.840156][T11168] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1507.869553][T24064] Bluetooth: hci2: command tx timeout [ 1507.950642][T25673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.982157][T25673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.070132][T11168] usb 5-1: Using ep0 maxpacket: 16 [ 1508.076774][T11168] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1508.085398][T11168] usb 5-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1508.109506][T11168] usb 5-1: config 0 has no interface number 0 [ 1508.122939][T11168] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1508.146502][T11168] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1508.158963][T11168] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1508.198949][T11168] usb 5-1: Product: syz [ 1508.203893][T11168] usb 5-1: SerialNumber: syz [ 1508.216270][T11168] usb 5-1: config 0 descriptor?? [ 1508.241388][T11168] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 1508.419539][T10407] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1508.466086][T19060] usb 5-1: USB disconnect, device number 114 [ 1508.574295][ T36] bond0 (unregistering): Released all slaves [ 1508.591006][T10407] usb 4-1: Using ep0 maxpacket: 32 [ 1508.607812][T10407] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1508.630234][T10407] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1508.645067][T10407] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1508.677670][T10407] usb 4-1: Product: syz [ 1508.685604][T10407] usb 4-1: Manufacturer: syz [ 1508.692416][T25673] team0: Port device team_slave_0 added [ 1508.698930][T10407] usb 4-1: SerialNumber: syz [ 1508.705986][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1508.717759][T25673] team0: Port device team_slave_1 added [ 1508.727652][T10407] usb 4-1: config 0 descriptor?? [ 1508.738063][ T36] tipc: Disabling bearer [ 1508.749126][T25712] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1508.767159][ T36] tipc: Left network mode [ 1508.832838][T25673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.842627][T25673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1508.868474][ C0] vkms_vblank_simulate: vblank timer overrun [ 1508.893294][T25673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.905501][ T10] usb 3-1: config 0 has no interfaces? [ 1508.912687][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1508.921992][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.930045][ T10] usb 3-1: Product: syz [ 1508.934460][ T10] usb 3-1: Manufacturer: syz [ 1508.939029][ T10] usb 3-1: SerialNumber: syz [ 1508.960947][ T10] usb 3-1: config 0 descriptor?? [ 1508.975299][T25720] CIFS: VFS: Malformed UNC in devname [ 1509.178233][T25714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.203331][T25714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.259306][ T10] usb 3-1: USB disconnect, device number 4 [ 1509.471529][ T10] usb 4-1: USB disconnect, device number 119 [ 1509.530198][T25673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.537178][T25673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1509.653775][T25673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.725242][T25711] syzkaller1: entered promiscuous mode [ 1509.730848][T25711] syzkaller1: entered allmulticast mode [ 1509.960969][T24064] Bluetooth: hci2: command tx timeout [ 1509.963441][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1510.029368][T25741] vlan0: entered promiscuous mode [ 1510.049487][T25741] bridge0: entered promiscuous mode [ 1510.108780][T25673] hsr_slave_0: entered promiscuous mode [ 1510.117462][T25673] hsr_slave_1: entered promiscuous mode [ 1510.126286][T25673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1510.134624][T25673] Cannot create hsr debugfs directory [ 1510.393684][ T36] hsr_slave_0: left promiscuous mode [ 1510.436547][ T36] veth1_macvtap: left promiscuous mode [ 1510.442249][ T36] veth0_macvtap: left promiscuous mode [ 1510.447752][ T36] veth1_vlan: left promiscuous mode [ 1510.626176][T15801] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1510.861133][T15801] usb 3-1: config 0 has no interfaces? [ 1510.931242][T11168] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1511.103140][T11168] usb 4-1: Using ep0 maxpacket: 16 [ 1511.118523][T11168] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1511.129189][T11168] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1511.156222][T11168] usb 4-1: config 0 has no interface number 0 [ 1511.172351][T11168] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1511.211438][T11168] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1511.228140][T11168] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1511.253148][T11168] usb 4-1: Product: syz [ 1511.267453][T11168] usb 4-1: SerialNumber: syz [ 1511.292449][T11168] usb 4-1: config 0 descriptor?? [ 1511.324782][T11168] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 1511.528474][T11168] usb 4-1: USB disconnect, device number 120 [ 1511.639111][T15801] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1511.654044][T15801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.700606][T15801] usb 3-1: Product: syz [ 1511.799395][T15801] usb 3-1: Manufacturer: syz [ 1511.804328][T15801] usb 3-1: SerialNumber: syz [ 1511.864914][T15801] usb 3-1: config 0 descriptor?? [ 1512.029979][T24064] Bluetooth: hci2: command tx timeout [ 1512.665726][ T36] IPVS: stop unused estimator thread 0... [ 1512.870119][T15801] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1513.052996][T15801] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1513.136826][T15801] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1513.184994][T15801] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1513.234543][T15801] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1513.284135][T15801] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1513.302002][T25673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1513.339298][T15801] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1513.350312][T25673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1513.419625][T15801] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1513.428934][T25673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1513.456079][T15801] usb 5-1: Product: syz [ 1513.460838][T15801] usb 5-1: Manufacturer: syz [ 1513.468525][T25673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1513.494120][T15801] cdc_wdm 5-1:1.0: skipping garbage [ 1513.502310][T15801] cdc_wdm 5-1:1.0: skipping garbage [ 1513.518047][T15801] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1513.527370][T15801] cdc_wdm 5-1:1.0: Unknown control protocol [ 1514.032075][T25673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.109629][T24064] Bluetooth: hci2: command tx timeout [ 1514.361852][T25673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.412749][T23252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.419823][T23252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.440715][T23252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.447790][T23252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.011308][T25848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6134'. [ 1515.035464][T25673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.158583][T25673] veth0_vlan: entered promiscuous mode [ 1515.187860][T25673] veth1_vlan: entered promiscuous mode [ 1515.239326][T25673] veth0_macvtap: entered promiscuous mode [ 1515.256405][T25673] veth1_macvtap: entered promiscuous mode [ 1515.287507][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.311352][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.326278][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.337139][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.359099][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.380351][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.401132][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.415611][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.436277][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.458028][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.478649][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.501146][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.538143][T25673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1515.586754][ T5902] usb 5-1: USB disconnect, device number 115 [ 1515.643868][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.668701][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.692207][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.715115][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.739655][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.763970][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.782313][T25673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.810187][T25673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.832535][T25673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.867169][T25673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.876030][T25673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.885363][T25673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.899472][T25673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.008742][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.035107][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.093766][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.104297][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.769511][T10407] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1516.793352][ T92] usb 3-1: USB disconnect, device number 5 [ 1516.830221][T18303] Bluetooth: hci1: command 0x0406 tx timeout [ 1516.899494][ T24] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1517.032073][T10407] usb 5-1: config index 0 descriptor too short (expected 63524, got 36) [ 1517.052375][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.068175][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.089504][T10407] usb 5-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 1517.108534][ T24] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1517.148946][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.169208][T10407] usb 5-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 1517.195306][T10407] usb 5-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 1517.201960][ T24] usb 1-1: config 0 descriptor?? [ 1517.503269][T10407] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1517.719210][T10407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.733941][ T24] steelseries 0003:1038:12B6.0021: unknown main item tag 0x0 [ 1517.753218][ T24] steelseries 0003:1038:12B6.0021: unknown main item tag 0x0 [ 1517.762014][ T24] steelseries 0003:1038:12B6.0021: unknown main item tag 0x6 [ 1517.769928][ T24] steelseries 0003:1038:12B6.0021: item fetching failed at offset 4/7 [ 1517.781605][ T24] steelseries 0003:1038:12B6.0021: probe with driver steelseries failed with error -22 [ 1517.951834][ T5902] usb 1-1: USB disconnect, device number 117 [ 1518.234319][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6137'. [ 1518.424642][T18303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1518.444409][T18303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1518.452946][T18303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1518.496183][T18303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1518.511154][T18303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1518.786321][T25904] lo speed is unknown, defaulting to 1000 [ 1518.986550][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.052525][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1519.094514][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1519.294348][T25865] Set syz1 is full, maxelem 65536 reached [ 1519.338977][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.361827][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1519.407217][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1519.482497][T25914] 9pnet_virtio: no channels available for device syz [ 1519.644050][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.654658][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1519.666333][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1519.769553][ T92] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1519.808194][T10407] usb 5-1: string descriptor 0 read error: -71 [ 1519.834331][T10407] usb 5-1: USB disconnect, device number 116 [ 1519.888333][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.899719][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1519.910407][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 1519.991471][ T92] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1520.015764][ T92] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1520.026834][ T92] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1520.064928][ T92] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1520.074118][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.082246][ T92] usb 3-1: Product: syz [ 1520.094170][ T92] usb 3-1: Manufacturer: syz [ 1520.104493][ T92] usb 3-1: SerialNumber: syz [ 1520.202109][T25904] chnl_net:caif_netlink_parms(): no params data found [ 1520.388888][ T92] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1520.453547][T10407] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1520.506417][ T92] usb 3-1: USB disconnect, device number 6 [ 1520.562814][ T92] usblp0: removed [ 1520.590338][T18303] Bluetooth: hci4: command tx timeout [ 1520.652332][T10407] usb 4-1: Using ep0 maxpacket: 16 [ 1520.694775][T10407] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1520.715213][T10407] usb 4-1: config 8 has an invalid interface number: 64 but max is 0 [ 1520.744166][T10407] usb 4-1: config 8 has no interface number 0 [ 1520.774470][T10407] usb 4-1: config 8 interface 64 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1520.806054][T10407] usb 4-1: config 8 interface 64 has no altsetting 0 [ 1520.835837][T10407] usb 4-1: New USB device found, idVendor=19d2, idProduct=64c6, bcdDevice= e.34 [ 1520.861534][T10407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.893686][T10407] usb 4-1: Product: syz [ 1520.906719][T10407] usb 4-1: Manufacturer: syz [ 1520.924798][T10407] usb 4-1: SerialNumber: syz [ 1521.427626][ T36] bond0 (unregistering): Released all slaves [ 1521.442407][ T36] bond1 (unregistering): Released all slaves [ 1521.585517][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1521.650963][T10407] cdc_ether 4-1:8.64: invalid descriptor buffer length [ 1521.657998][T10407] usb 4-1: bad CDC descriptors [ 1521.694223][T10407] usb 4-1: USB disconnect, device number 121 [ 1522.362840][ T10] usb 3-1: config 0 has no interfaces? [ 1522.401053][ T36] tipc: Disabling bearer [ 1522.500720][ T36] tipc: Left network mode [ 1522.669674][T18303] Bluetooth: hci4: command tx timeout [ 1522.859131][T25971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6154'. [ 1523.048123][T25904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.066802][T25904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.074362][T25904] bridge_slave_0: entered allmulticast mode [ 1523.082301][T25904] bridge_slave_0: entered promiscuous mode [ 1523.091415][T25904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.099253][T25904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.135701][T25904] bridge_slave_1: entered allmulticast mode [ 1523.143251][T25904] bridge_slave_1: entered promiscuous mode [ 1523.258416][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1523.273290][T25904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.283656][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.304140][ T10] usb 3-1: Product: syz [ 1523.308293][ T10] usb 3-1: Manufacturer: syz [ 1523.318240][ T10] usb 3-1: SerialNumber: syz [ 1523.325124][ T10] usb 3-1: config 0 descriptor?? [ 1523.465039][T25904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.594376][T25904] team0: Port device team_slave_0 added [ 1523.616870][T25904] team0: Port device team_slave_1 added [ 1523.675438][ T36] hsr_slave_0: left promiscuous mode [ 1523.716122][ T36] veth1_macvtap: left promiscuous mode [ 1523.745850][ T36] veth0_macvtap: left promiscuous mode [ 1524.308118][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1524.308133][ T30] audit: type=1326 audit(1746371573.733:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.2.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049b18e969 code=0x7ffc0000 [ 1524.337510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1524.337864][ T10] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1524.389654][ T30] audit: type=1326 audit(1746371573.783:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25949 comm="syz.2.6150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049b18e969 code=0x7ffc0000 [ 1524.575022][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1524.598065][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1524.660006][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1524.773404][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1524.776858][T18303] Bluetooth: hci4: command tx timeout [ 1524.789578][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1524.805802][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1524.814749][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1524.824136][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1524.954544][ T10] usb 4-1: Product: syz [ 1524.958785][ T10] usb 4-1: Manufacturer: syz [ 1524.965833][ T10] usb 4-1: SerialNumber: syz [ 1525.439403][ T10] usb 4-1: config 0 descriptor?? [ 1525.495033][T25992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1525.523512][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1525.566958][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1525.682776][T25999] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1525.938081][ T30] audit: type=1400 audit(1746371575.363:720): avc: denied { write } for pid=25990 comm="syz.3.6157" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1525.983601][ T5902] usb 4-1: USB disconnect, device number 122 [ 1526.098843][T25904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.132183][T25904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.186439][T25954] Set syz1 is full, maxelem 65536 reached [ 1526.200435][T25904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.222131][T25904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.229075][T25904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.261772][T25904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.331484][ T10] usb 3-1: USB disconnect, device number 7 [ 1526.331773][ T5902] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1526.426424][T25904] hsr_slave_0: entered promiscuous mode [ 1526.433476][T25904] hsr_slave_1: entered promiscuous mode [ 1526.439904][T25904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1526.447513][T25904] Cannot create hsr debugfs directory [ 1526.850112][T18303] Bluetooth: hci4: command tx timeout [ 1526.855896][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1527.245985][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.271898][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1527.309943][T18303] Bluetooth: hci0: command 0x0401 tx timeout [ 1527.317422][ T10] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1527.337279][ T36] IPVS: stop unused estimator thread 0... [ 1527.346255][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.360518][ T10] usb 3-1: Product: syz [ 1527.364949][ T10] usb 3-1: Manufacturer: syz [ 1527.369732][ T10] usb 3-1: SerialNumber: syz [ 1527.376414][ T10] usb 3-1: config 0 descriptor?? [ 1527.717047][T19060] usb 3-1: USB disconnect, device number 8 [ 1527.919170][T26049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6167'. [ 1528.144893][T26035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6166'. [ 1528.235525][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1528.534625][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1528.549516][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1528.562679][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1528.576799][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1528.613795][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1528.642479][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1528.678090][T26066] netlink: 'syz.0.6169': attribute type 10 has an invalid length. [ 1528.694340][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1528.709702][ T10] usb 4-1: Product: syz [ 1528.713936][ T10] usb 4-1: Manufacturer: syz [ 1528.726974][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1528.735750][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1528.741946][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1528.748071][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 1528.921372][T26066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.255352][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 1529.441296][T26066] bond0: (slave team0): Enslaving as an active interface with an up link [ 1529.579106][T11168] usb 4-1: USB disconnect, device number 123 [ 1530.348550][T25904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1530.471605][T25904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1530.518572][T25904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1530.575433][T25904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1530.646348][T26089] veth1_macvtap: left promiscuous mode [ 1530.707345][T26089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6176'. [ 1530.907669][T26095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1531.269251][T26110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6180'. [ 1531.296591][T25904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.548100][T26115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6181'. [ 1531.776271][T25904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.847480][T26110] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1531.888464][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.895642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.908565][T26110] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1532.034723][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.041896][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.073405][T26122] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1532.111396][T26126] Set syz1 is full, maxelem 65536 reached [ 1532.505122][T26135] fuse: Bad value for 'fd' [ 1532.677877][T25904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.882032][T26148] siw: device registration error -23 [ 1533.356490][T25904] veth0_vlan: entered promiscuous mode [ 1533.376808][T25904] veth1_vlan: entered promiscuous mode [ 1533.449379][T25904] veth0_macvtap: entered promiscuous mode [ 1533.506162][T25904] veth1_macvtap: entered promiscuous mode [ 1533.620915][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.810579][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.820891][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.831754][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.842347][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.978243][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1533.988466][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1533.999171][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.009107][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.019686][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.031589][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.042185][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.058993][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1534.072713][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.088353][T25904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1534.159135][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.174894][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.184983][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.198193][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.208169][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.235092][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.250129][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.269095][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.351070][T25904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1534.375939][T25904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1534.408863][T25904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1534.471368][ T10] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1534.499740][T25904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.627952][T26179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6194'. [ 1534.641215][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1534.642027][T25904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.682726][ T10] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1534.713685][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1534.737415][T25904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.758625][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.770133][T25904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.811952][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1534.882157][ T10] usb 1-1: invalid MIDI out EP 0 [ 1534.949648][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6195'. [ 1535.030279][T18628] udevd[18628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1535.102867][ T10] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1535.162908][ T10] usb 1-1: USB disconnect, device number 118 [ 1535.328103][T23252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.358779][T23252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.425452][T26169] netlink: 'syz.0.6192': attribute type 4 has an invalid length. [ 1535.516596][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.566656][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.626908][ T24] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1536.737524][T26219] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1536.809728][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1537.010658][T24064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1537.020634][T24064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1537.075067][T24064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1537.106349][T24064] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1537.117600][T24064] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1537.197475][T26226] lo speed is unknown, defaulting to 1000 [ 1537.612969][ T24] usb 5-1: config 2 has an invalid interface number: 15 but max is 0 [ 1537.621258][ T24] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 1537.630753][ T24] usb 5-1: config 2 has no interface number 1 [ 1537.637929][ T24] usb 5-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1537.650979][ T24] usb 5-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1537.664065][ T24] usb 5-1: config 2 interface 0 has no altsetting 0 [ 1537.673071][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 1537.725936][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.766850][ T24] usb 5-1: Product: syz [ 1537.787673][ T24] usb 5-1: Manufacturer: syz [ 1537.958778][ T24] usb 5-1: SerialNumber: syz [ 1537.968134][T26226] chnl_net:caif_netlink_parms(): no params data found [ 1537.993213][ T24] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 1538.450256][T26257] program syz.0.6202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1538.465966][T26257] xt_hashlimit: size too large, truncated to 1048576 [ 1538.760779][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6204'. [ 1539.122125][T26226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.149703][T24064] Bluetooth: hci5: command tx timeout [ 1539.149782][T26226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.202546][T26226] bridge_slave_0: entered allmulticast mode [ 1539.220333][T26226] bridge_slave_0: entered promiscuous mode [ 1539.237899][T26226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.308168][T26226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.316098][T26207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6198'. [ 1539.325953][T26226] bridge_slave_1: entered allmulticast mode [ 1539.344122][T26226] bridge_slave_1: entered promiscuous mode [ 1539.419631][T11168] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1539.484378][T26226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.497620][T26226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.526066][ T24] pwc: Failed to set LED on/off time (-71) [ 1539.544471][ T24] pwc: send_video_command error -71 [ 1539.571296][T26226] team0: Port device team_slave_0 added [ 1539.577060][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1539.595823][T11168] usb 4-1: Using ep0 maxpacket: 32 [ 1539.607255][ T24] Philips webcam 5-1:2.0: probe with driver Philips webcam failed with error -71 [ 1539.607981][T26226] team0: Port device team_slave_1 added [ 1539.624894][T11168] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 1539.636412][T11168] usb 4-1: config 0 has no interface number 0 [ 1539.648176][ T24] usb 5-1: USB disconnect, device number 117 [ 1539.660446][T11168] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 1539.673180][T11168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.690027][ T92] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1539.715246][T11168] usb 4-1: Product: syz [ 1539.725806][T11168] usb 4-1: Manufacturer: syz [ 1539.739226][T11168] usb 4-1: SerialNumber: syz [ 1539.778310][T11168] usb 4-1: config 0 descriptor?? [ 1539.795384][T11168] kvaser_usb 4-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 1539.807676][T26226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.825569][T26226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.003065][T26226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.016024][T26226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.023137][T26226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.023438][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.049265][T26226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.131225][T26226] hsr_slave_0: entered promiscuous mode [ 1540.139770][T26226] hsr_slave_1: entered promiscuous mode [ 1540.146715][T26226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1540.156069][T26226] Cannot create hsr debugfs directory [ 1540.184694][ T92] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1540.198032][ T92] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1540.214954][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.225190][ T92] usb 1-1: Product: syz [ 1540.229366][ T92] usb 1-1: Manufacturer: syz [ 1540.235144][ T92] usb 1-1: SerialNumber: syz [ 1540.273354][ T92] usb 1-1: config 0 descriptor?? [ 1540.608149][ T92] usb 1-1: USB disconnect, device number 119 [ 1540.733567][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6209'. [ 1540.759315][T26226] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.776847][T26226] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1540.886374][T26289] hsr_slave_1 (unregistering): left promiscuous mode [ 1540.902781][T26226] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.913124][T26226] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1540.984776][T26226] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.038546][T26226] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1541.131721][T26226] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.144772][T26226] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1541.229824][T24064] Bluetooth: hci5: command tx timeout [ 1541.306623][T26226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1541.321317][T26226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1541.347778][T26226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1541.363948][T26226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1541.720159][T26226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.892907][T26226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.905943][T23252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.913040][T23252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.405749][T23252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.412837][T23252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.613613][ T5902] usb 4-1: USB disconnect, device number 124 [ 1542.942349][T26226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.309693][T24064] Bluetooth: hci5: command tx timeout [ 1543.437267][T26226] veth0_vlan: entered promiscuous mode [ 1543.457633][T26226] veth1_vlan: entered promiscuous mode [ 1543.489189][T26333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1543.508701][T26333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1543.651492][T26226] veth0_macvtap: entered promiscuous mode [ 1543.807824][T26338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1544.111415][T26338] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1544.121180][T26338] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1544.141651][T26226] veth1_macvtap: entered promiscuous mode [ 1544.223054][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.259448][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.269270][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.339330][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.435981][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.466778][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.487599][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.499578][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.509545][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.520499][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.612493][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.623963][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.633945][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.644426][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.655086][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.665626][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.220633][T26226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.244911][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.259898][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.274432][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.287643][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.297941][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.308763][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.320087][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.337772][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.347814][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.360686][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.385397][T26226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.396040][T24064] Bluetooth: hci5: command tx timeout [ 1545.421532][T26226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.441113][T26226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.472877][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.479303][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.555743][T26226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.584562][T26226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.606582][T26226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.761684][T26226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.242574][T26369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6229'. [ 1546.515481][T26369] hsr_slave_1 (unregistering): left promiscuous mode [ 1547.304327][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.325192][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.379220][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.388714][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.390697][T26383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6233'. [ 1547.459710][ T10] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1547.631068][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1548.319380][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1548.372751][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1548.382843][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.467668][T26381] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1548.481254][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1548.500566][T26395] lo speed is unknown, defaulting to 1000 [ 1548.959486][ T92] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1549.072585][ T24] usb 1-1: USB disconnect, device number 120 [ 1549.113249][ T92] usb 3-1: config 0 has no interfaces? [ 1549.121662][ T92] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1549.272309][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.302696][ T92] usb 3-1: Product: syz [ 1549.308729][ T92] usb 3-1: Manufacturer: syz [ 1549.314549][ T92] usb 3-1: SerialNumber: syz [ 1549.326006][ T92] usb 3-1: config 0 descriptor?? [ 1549.516870][T26411] trusted_key: syz.1.6242 sent an empty control message without MSG_MORE. [ 1549.572128][T26402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.653685][T26402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1550.178943][T25642] usb 3-1: USB disconnect, device number 9 [ 1550.359212][T26420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6245'. [ 1550.516273][T26426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6247'. [ 1550.701604][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6244'. [ 1550.748915][T26428] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1550.809508][T26428] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1550.883989][T26432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1551.858804][T26443] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6252'. [ 1552.297748][T26449] lo speed is unknown, defaulting to 1000 [ 1552.960515][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6254'. [ 1553.239768][T26464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6258'. [ 1553.399821][T25642] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 1553.475406][T26472] bridge_slave_0: left allmulticast mode [ 1553.481833][T26472] bridge_slave_0: left promiscuous mode [ 1553.487556][T26472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.545515][T26472] bridge_slave_1: left allmulticast mode [ 1553.558897][T26472] bridge_slave_1: left promiscuous mode [ 1553.569218][T26472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.577936][T25642] usb 4-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 1553.589807][T19060] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1553.600591][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6261'. [ 1553.608839][T25642] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1553.645707][T25642] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1553.654894][T25642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.655262][T26472] bond0: (slave bond_slave_0): Releasing backup interface [ 1553.663096][T25642] usb 4-1: Product: syz [ 1553.674888][T25642] usb 4-1: Manufacturer: syz [ 1553.679967][T25642] usb 4-1: SerialNumber: syz [ 1553.685037][T26472] bond0: (slave bond_slave_1): Releasing backup interface [ 1553.686691][T25642] usb 4-1: config 0 descriptor?? [ 1553.719580][T26472] team0: Port device team_slave_0 removed [ 1553.749169][T26472] team0: Port device team_slave_1 removed [ 1553.765235][T19060] usb 1-1: config 0 has no interfaces? [ 1553.767256][T26472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.778603][T26472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.780050][T19060] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1553.807005][T26472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.812329][T19060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.825257][T26472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.834902][T19060] usb 1-1: Product: syz [ 1553.843242][T19060] usb 1-1: Manufacturer: syz [ 1553.852360][T19060] usb 1-1: SerialNumber: syz [ 1553.878094][T26474] team0: Mode changed to "loadbalance" [ 1553.893996][T19060] usb 1-1: config 0 descriptor?? [ 1553.990646][T25642] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1554.020095][T25642] usb 4-1: USB disconnect, device number 125 [ 1554.143335][T26466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.156103][T26466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.192874][T19060] usb 1-1: USB disconnect, device number 121 [ 1554.664382][T26487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1554.676019][T26487] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1555.182427][T26480] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1555.468366][ T30] audit: type=1400 audit(1746371833.893:721): avc: denied { unmount } for pid=24060 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1555.516057][T26495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6268'. [ 1555.635349][ T30] audit: type=1400 audit(1746371834.063:722): avc: denied { create } for pid=26502 comm="syz.2.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1555.745776][ T30] audit: type=1400 audit(1746371834.173:723): avc: denied { ioctl } for pid=26502 comm="syz.2.6272" path="socket:[96946]" dev="sockfs" ino=96946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1555.770059][T25642] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1555.985539][T25642] usb 1-1: Using ep0 maxpacket: 32 [ 1555.987021][T25642] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1555.988741][T25642] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1555.988765][T25642] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1555.988784][T25642] usb 1-1: Product: syz [ 1555.988799][T25642] usb 1-1: Manufacturer: syz [ 1555.988814][T25642] usb 1-1: SerialNumber: syz [ 1556.011884][T25642] usb 1-1: config 0 descriptor?? [ 1556.012812][T26490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1556.350443][T24064] Bluetooth: hci0: command 0x0401 tx timeout [ 1556.412635][T26522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6276'. [ 1556.580365][T26524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1556.679603][T25642] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1556.765913][ T10] usb 1-1: USB disconnect, device number 122 [ 1556.853244][T25642] usb 4-1: Using ep0 maxpacket: 16 [ 1556.867295][T25642] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1556.891032][T25642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1556.916055][T25642] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1556.929464][T25642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.949471][T25642] usb 4-1: Product: syz [ 1556.953678][T25642] usb 4-1: Manufacturer: syz [ 1557.180134][T25642] usb 4-1: SerialNumber: syz [ 1557.187335][T25642] usb 4-1: config 0 descriptor?? [ 1557.197858][T25642] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1557.210240][T25642] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1557.811138][T25642] em28xx 4-1:0.0: chip ID is em28174 [ 1558.023940][T25642] usb 4-1: USB disconnect, device number 126 [ 1558.041141][T25642] em28xx 4-1:0.0: Disconnecting em28xx [ 1558.065284][T25642] em28xx 4-1:0.0: Freeing device [ 1558.239504][T19060] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1558.323374][T26557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1558.444907][T19060] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1558.479583][T19060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.493085][T19060] usb 1-1: Product: syz [ 1558.497464][T19060] usb 1-1: Manufacturer: syz [ 1558.527337][T19060] usb 1-1: SerialNumber: syz [ 1558.536087][T19060] usb 1-1: config 0 descriptor?? [ 1558.810142][T15801] usb 1-1: USB disconnect, device number 123 [ 1559.219476][T19060] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1559.389788][T19060] usb 4-1: Using ep0 maxpacket: 32 [ 1559.422906][T19060] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1559.457095][T19060] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1559.474844][T19060] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1559.484512][T19060] usb 4-1: Product: syz [ 1559.488815][T19060] usb 4-1: Manufacturer: syz [ 1559.496471][T19060] usb 4-1: SerialNumber: syz [ 1559.502966][T19060] usb 4-1: config 0 descriptor?? [ 1559.528272][T26572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.876736][T26581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6296'. [ 1559.886458][T26581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6296'. [ 1560.084007][T26587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6298'. [ 1560.248677][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6299'. [ 1560.434791][ T92] usb 4-1: USB disconnect, device number 127 [ 1560.616727][T26602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6304'. [ 1561.846912][T26622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6310'. [ 1562.337156][T15801] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1562.540990][T15801] usb 5-1: config 0 has no interfaces? [ 1562.569831][T15801] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1562.802004][T26642] lo speed is unknown, defaulting to 1000 [ 1563.071399][T15801] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1563.100883][T15801] usb 5-1: Manufacturer: syz [ 1563.105551][T15801] usb 5-1: SerialNumber: syz [ 1563.116165][T15801] usb 5-1: config 0 descriptor?? [ 1563.543261][T25642] usb 5-1: USB disconnect, device number 118 [ 1564.328816][T26652] program syz.1.6319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1564.397964][T26652] xt_hashlimit: size too large, truncated to 1048576 [ 1564.903467][T26671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6324'. [ 1565.602817][T26686] lo speed is unknown, defaulting to 1000 [ 1565.900046][T11168] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1566.138000][T11168] usb 1-1: config 0 has no interfaces? [ 1566.157519][T11168] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1566.271250][T11168] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1566.311985][T11168] usb 1-1: Manufacturer: syz [ 1566.336556][T11168] usb 1-1: SerialNumber: syz [ 1566.360693][T11168] usb 1-1: config 0 descriptor?? [ 1566.409578][ T5862] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1566.639567][ T5862] usb 3-1: device descriptor read/64, error -71 [ 1566.706155][T26708] netlink: 'syz.3.6337': attribute type 1 has an invalid length. [ 1567.159515][T19060] usb 1-1: USB disconnect, device number 124 [ 1567.550208][ T5862] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1567.729832][ T5862] usb 3-1: device descriptor read/64, error -71 [ 1567.932236][ T5862] usb usb3-port1: attempt power cycle [ 1568.001626][T19060] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1568.171855][T19060] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1568.180537][T19060] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1568.193650][T19060] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1568.202920][T19060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1568.243031][T19060] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1568.282431][T19060] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1568.299567][ T5862] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1568.326335][T19060] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1568.347560][ T5862] usb 3-1: device descriptor read/8, error -71 [ 1568.364048][T19060] usb 5-1: Product: syz [ 1568.368580][T19060] usb 5-1: Manufacturer: syz [ 1568.383474][T19060] cdc_wdm 5-1:1.0: skipping garbage [ 1568.407760][T19060] cdc_wdm 5-1:1.0: skipping garbage [ 1568.422293][T19060] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1568.429665][T19060] cdc_wdm 5-1:1.0: Unknown control protocol [ 1568.569386][T26734] lo speed is unknown, defaulting to 1000 [ 1568.709488][ T5862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1568.790139][ T5862] usb 3-1: device descriptor read/8, error -71 [ 1568.917815][ T5862] usb usb3-port1: unable to enumerate USB device [ 1568.977236][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 1569.722315][ T10] usb 5-1: USB disconnect, device number 119 [ 1569.736124][T26756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6351'. [ 1569.869553][T19060] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1569.900703][ T92] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1570.042596][T19060] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1570.052677][T19060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.061835][T19060] usb 3-1: Product: syz [ 1570.066007][T19060] usb 3-1: Manufacturer: syz [ 1570.071684][T19060] usb 3-1: SerialNumber: syz [ 1570.076779][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.089263][ T92] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1570.105414][T19060] usb 3-1: config 0 descriptor?? [ 1570.113165][ T92] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1570.146865][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.158722][ T92] usb 1-1: Product: syz [ 1570.172256][ T92] usb 1-1: Manufacturer: syz [ 1570.176875][ T92] usb 1-1: SerialNumber: syz [ 1570.201221][ T92] usb 1-1: config 0 descriptor?? [ 1570.341095][ T92] usb 3-1: USB disconnect, device number 14 [ 1570.399599][T11168] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1570.424353][ T24] usb 1-1: USB disconnect, device number 125 [ 1570.546867][T26765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6355'. [ 1570.561858][T11168] usb 4-1: config 0 has no interfaces? [ 1570.568514][T11168] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1570.578251][T11168] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1570.588645][T11168] usb 4-1: Manufacturer: syz [ 1570.593567][T11168] usb 4-1: SerialNumber: syz [ 1570.600362][T11168] usb 4-1: config 0 descriptor?? [ 1570.873935][T11168] usb 4-1: USB disconnect, device number 2 [ 1571.702223][ T5862] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1572.018617][ T5862] usb 1-1: device descriptor read/64, error -71 [ 1572.290085][T11168] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1572.297684][ T5862] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1572.530218][ T5862] usb 1-1: device descriptor read/64, error -71 [ 1572.556269][T11168] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.582905][T11168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1572.595956][T11168] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1572.611813][T11168] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1572.889728][ T5862] usb usb1-port1: attempt power cycle [ 1572.910621][T11168] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1572.945338][ T5902] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1572.968034][T11168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.019931][T11168] usb 3-1: config 0 descriptor?? [ 1573.220185][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1573.240655][ T5902] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1573.251087][ T5862] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1573.281865][ T5902] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1573.317455][ T5862] usb 1-1: device descriptor read/8, error -71 [ 1573.339540][ T5902] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1573.379627][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.411504][ T5902] usb 5-1: config 0 descriptor?? [ 1573.559593][ T5862] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1573.660347][ T5862] usb 1-1: device descriptor read/8, error -71 [ 1573.773538][ T5902] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1573.906971][ T5862] usb usb1-port1: unable to enumerate USB device [ 1574.243400][ T5902] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1574.256907][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.266538][ T5902] usb 4-1: Product: syz [ 1574.272360][ T5902] usb 4-1: Manufacturer: syz [ 1574.286151][ T5902] usb 4-1: SerialNumber: syz [ 1574.313466][ T5902] usb 4-1: config 0 descriptor?? [ 1574.566547][ T5902] usb 4-1: USB disconnect, device number 3 [ 1574.699624][ T92] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1574.862923][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.885478][ T92] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1575.014768][ T92] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1575.038487][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.062917][ T92] usb 1-1: Product: syz [ 1575.085046][ T92] usb 1-1: Manufacturer: syz [ 1575.099545][ T92] usb 1-1: SerialNumber: syz [ 1575.116697][ T92] usb 1-1: config 0 descriptor?? [ 1575.277415][T11168] usbhid 3-1:0.0: can't add hid device: -71 [ 1575.349531][T11168] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1575.363072][ T5862] usb 5-1: USB disconnect, device number 120 [ 1575.408928][T11168] usb 3-1: USB disconnect, device number 15 [ 1575.603295][T15801] usb 1-1: USB disconnect, device number 4 [ 1576.304430][T26840] netlink: 'syz.1.6374': attribute type 1 has an invalid length. [ 1576.323212][T15801] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1576.692097][T26848] fuse: Bad value for 'fd' [ 1576.707187][T15801] usb 3-1: config 0 has no interfaces? [ 1576.735859][T15801] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1576.746340][T15801] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1576.755846][T15801] usb 3-1: Manufacturer: syz [ 1576.772608][T15801] usb 3-1: SerialNumber: syz [ 1576.785811][T15801] usb 3-1: config 0 descriptor?? [ 1577.602698][ T5902] usb 3-1: USB disconnect, device number 16 [ 1577.839241][T26863] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1580.033271][T26885] fuse: Bad value for 'fd' [ 1580.278591][T26895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6395'. [ 1580.307898][T26897] bridge_slave_0: left allmulticast mode [ 1580.313661][T26895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6395'. [ 1580.332959][T26897] bridge_slave_0: left promiscuous mode [ 1580.351036][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6396'. [ 1580.365190][T26897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.482822][T26897] bridge_slave_1: left allmulticast mode [ 1580.549484][T26897] bridge_slave_1: left promiscuous mode [ 1580.563193][T26897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.727876][T26897] bond0: (slave bond_slave_0): Releasing backup interface [ 1580.755747][T26897] bond0: (slave bond_slave_1): Releasing backup interface [ 1580.812132][T26897] team0: Port device team_slave_0 removed [ 1580.840894][T26897] team0: Port device team_slave_1 removed [ 1580.864428][T26897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.876446][T26897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.887156][T26897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.897429][T26897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.235205][T26913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6400'. [ 1581.782671][T26927] fuse: Bad value for 'fd' [ 1583.362362][T26947] veth1_to_bond: entered allmulticast mode [ 1583.368467][T26947] veth1_to_bond: left allmulticast mode [ 1584.155225][T26961] fuse: Unknown parameter '0x0000000000000003' [ 1584.315665][T26963] netlink: 'syz.4.6415': attribute type 1 has an invalid length. [ 1584.420135][T26963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1585.731076][T26991] program syz.4.6423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1585.813176][T26992] xt_hashlimit: size too large, truncated to 1048576 [ 1586.252754][T26997] fuse: Unknown parameter '0x0000000000000003' [ 1586.813125][T11168] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1587.081378][T11168] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 1587.108901][T11168] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.172261][T27016] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6432'. [ 1587.246702][T11168] usb 4-1: config 0 has no interface number 0 [ 1587.321955][T11168] usb 4-1: config 0 interface 168 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1587.450275][T11168] usb 4-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1587.523281][T11168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.562181][T11168] usb 4-1: config 0 descriptor?? [ 1587.587845][T11168] HFC-S_USB 4-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1587.786261][T19060] usb 4-1: USB disconnect, device number 4 [ 1587.838586][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1588.211926][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1588.223328][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1588.241262][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1588.265866][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1588.287976][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.296099][ T10] usb 5-1: Product: syz [ 1588.300783][ T10] usb 5-1: Manufacturer: syz [ 1588.310005][ T10] usb 5-1: SerialNumber: syz [ 1588.429535][ T92] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1588.522314][T24064] Bluetooth: hci0: command 0x0401 tx timeout [ 1588.567845][ T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1588.622703][ T92] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.640532][ T92] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1588.649813][ T92] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1588.660904][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.679267][ T92] usb 1-1: config 0 descriptor?? [ 1588.764768][ T30] audit: type=1400 audit(1746372325.193:724): avc: denied { read write } for pid=27019 comm="syz.4.6435" name="lp0" dev="devtmpfs" ino=4171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1588.766235][ T5902] usb 5-1: USB disconnect, device number 121 [ 1588.795653][ T30] audit: type=1400 audit(1746372325.193:725): avc: denied { open } for pid=27019 comm="syz.4.6435" path="/dev/usb/lp0" dev="devtmpfs" ino=4171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1588.805872][ T5902] usblp0: removed [ 1588.894354][ T92] Bluetooth: Can't get state to change to load ram patch err [ 1588.901843][ T92] Bluetooth: Loading patch file failed [ 1588.907312][ T92] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 1588.920251][ T92] usb 1-1: USB disconnect, device number 5 [ 1591.504105][T27071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6449'. [ 1591.534535][ T30] audit: type=1400 audit(1746372327.873:726): avc: denied { write } for pid=27065 comm="syz.2.6449" name="ptype" dev="proc" ino=4026534444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1592.087132][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6455'. [ 1592.089739][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6454'. [ 1592.129288][T27090] netlink: 'syz.1.6454': attribute type 5 has an invalid length. [ 1592.209576][T27090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6454'. [ 1592.573578][T27090] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1592.592086][T27090] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1592.601214][T27090] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1592.612631][T27090] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1592.639503][T27090] geneve2: entered promiscuous mode [ 1592.644855][T27090] geneve2: entered allmulticast mode [ 1593.929512][ T92] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1594.132695][ T92] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1594.307410][ T92] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1594.343933][ T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1594.360572][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1594.576645][ T92] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1594.693054][ T92] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1594.774430][ T92] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1594.892632][ T92] usb 5-1: Product: syz [ 1594.939533][ T92] usb 5-1: Manufacturer: syz [ 1595.136793][ T92] cdc_wdm 5-1:1.0: skipping garbage [ 1595.232524][ T92] cdc_wdm 5-1:1.0: skipping garbage [ 1595.447790][ T92] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1595.455484][ T92] cdc_wdm 5-1:1.0: Unknown control protocol [ 1595.531104][T27139] fuse: Unknown parameter '0x0000000000000003' [ 1597.263315][T15801] usb 5-1: USB disconnect, device number 122 [ 1597.688668][T27175] overlayfs: failed to resolve './bus': -2 [ 1597.777135][T27179] fuse: Unknown parameter '0x0000000000000003' [ 1597.789987][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1597.951745][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1597.964456][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1597.999266][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1598.021301][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1598.040013][ T10] usb 3-1: Product: syz [ 1598.044211][ T10] usb 3-1: Manufacturer: syz [ 1598.059333][ T10] usb 3-1: SerialNumber: syz [ 1598.073101][ T10] usb 3-1: config 0 descriptor?? [ 1598.086310][T27169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1598.229482][T11168] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1598.495467][T11168] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 1598.529013][T11168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.563789][T11168] usb 1-1: config 0 has no interface number 0 [ 1598.571669][T11168] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1598.584102][T11168] usb 1-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1598.600252][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1598.613030][T27191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6486'. [ 1598.622871][T11168] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1598.637428][T11168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.676195][T11168] usb 1-1: config 0 descriptor?? [ 1598.836014][T11168] HFC-S_USB 1-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1599.286877][T11168] usb 1-1: USB disconnect, device number 6 [ 1599.348277][ T5902] usb 3-1: USB disconnect, device number 17 [ 1599.571328][T27169] syzkaller1: entered promiscuous mode [ 1599.576853][T27169] syzkaller1: entered allmulticast mode [ 1599.590199][ T10] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1599.759582][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1599.766708][ T10] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1599.779703][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1599.787944][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.40 [ 1599.798576][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.814093][ T10] usb 5-1: Product: ࠓ [ 1599.818396][ T10] usb 5-1: Manufacturer: ᓏ浒풂鸅쭟롦蠷⢭柚兞纺␇콢㆖綪ུ꾉촀२垈䤟㖴㪤뭖盟㥡ੳ靘狭龇껀ㄒ马ڭ間㭈᧚앚ᖛ䮒꼘ੳ첃誑쯡∠峎੍琂ꬪဎ᪤啡㯄홾隄敮⪿袋ꋲ磵ꋣⲂ叆ࡎ㊉虜嶭䠊፹髴貄趻ऎ虐랞鲛ኝ딊﹚훪ᙎᎴ [ 1599.846114][ C0] vkms_vblank_simulate: vblank timer overrun [ 1599.863990][T27209] fuse: Unknown parameter 'fd0x0000000000000003' [ 1599.872363][ T10] usb 5-1: SerialNumber: Ќ [ 1600.464790][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 1600.474876][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1600.499925][ T10] usb 5-1: USB disconnect, device number 123 [ 1600.516500][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6495'. [ 1600.527655][T27225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1600.537411][T27225] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1601.309729][T27241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6498'. [ 1601.398458][T27241] netlink: 'syz.0.6498': attribute type 5 has an invalid length. [ 1601.424709][T27243] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6500'. [ 1601.476405][T27241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6498'. [ 1601.697350][T27241] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1601.707489][T27241] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1601.716345][T27241] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1601.725033][T27241] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1601.738121][T27241] geneve2: entered promiscuous mode [ 1601.745061][T27241] geneve2: entered allmulticast mode [ 1602.921129][ T5902] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1603.717190][ T5902] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 1603.738583][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.796587][ T5902] usb 5-1: config 0 has no interface number 0 [ 1603.825295][ T5902] usb 5-1: config 0 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1603.922845][ T5902] usb 5-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 1603.985823][ T5902] usb 5-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 1604.022043][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.048243][ T5902] usb 5-1: config 0 descriptor?? [ 1604.076755][ T5902] HFC-S_USB 5-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 1604.545472][T27276] overlayfs: overlapping lowerdir path [ 1604.611688][T27275] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1605.091266][T11168] usb 5-1: USB disconnect, device number 124 [ 1605.308771][T27286] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1605.716356][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1605.728500][T27295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6516'. [ 1606.009589][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1606.153652][T27302] siw: device registration error -23 [ 1606.215553][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1606.351535][T19060] IPVS: starting estimator thread 0... [ 1606.377402][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.401465][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1606.417852][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1606.483355][T27303] IPVS: using max 39 ests per chain, 93600 per kthread [ 1606.592229][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.887050][T27308] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6520'. [ 1606.900472][ T10] usb 5-1: config 0 descriptor?? [ 1606.923521][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.930017][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.408292][T27338] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1608.763560][T11168] usb 5-1: USB disconnect, device number 125 [ 1609.579139][T27340] siw: device registration error -23 [ 1609.602471][ T5862] IPVS: starting estimator thread 0... [ 1609.700021][T27345] IPVS: using max 45 ests per chain, 108000 per kthread [ 1610.429776][T27364] [ 1610.432120][T27364] ====================================================== [ 1610.439890][T27364] WARNING: possible circular locking dependency detected [ 1610.446879][T27364] 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 Not tainted [ 1610.453956][T27364] ------------------------------------------------------ [ 1610.460946][T27364] syz.3.6538/27364 is trying to acquire lock: [ 1610.466976][T27364] ffff888031edf940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1610.476687][T27364] [ 1610.476687][T27364] but task is already holding lock: [ 1610.484020][T27364] ffff88805c1df088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1610.493296][T27364] [ 1610.493296][T27364] which lock already depends on the new lock. [ 1610.493296][T27364] [ 1610.503677][T27364] [ 1610.503677][T27364] the existing dependency chain (in reverse order) is: [ 1610.512672][T27364] [ 1610.512672][T27364] -> #2 (&of->mutex){+.+.}-{4:4}: [ 1610.519855][T27364] __mutex_lock+0x199/0xb90 [ 1610.524861][T27364] kernfs_fop_write_iter+0x28f/0x510 [ 1610.530647][T27364] iter_file_splice_write+0x91c/0x1150 [ 1610.536604][T27364] do_splice+0x1475/0x1fc0 [ 1610.541517][T27364] __do_splice+0x32a/0x360 [ 1610.546434][T27364] __x64_sys_splice+0x187/0x250 [ 1610.551784][T27364] do_syscall_64+0xcd/0x260 [ 1610.556783][T27364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.563168][T27364] [ 1610.563168][T27364] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1610.570518][T27364] __mutex_lock+0x199/0xb90 [ 1610.575516][T27364] anon_pipe_write+0x15d/0x1a70 [ 1610.580858][T27364] __kernel_write_iter+0x71d/0xa90 [ 1610.586466][T27364] __kernel_write+0xf5/0x140 [ 1610.591550][T27364] autofs_notify_daemon+0x4db/0xd60 [ 1610.597238][T27364] autofs_wait+0x10ca/0x1a70 [ 1610.602319][T27364] autofs_mount_wait+0x132/0x380 [ 1610.607754][T27364] autofs_d_automount+0x390/0x7f0 [ 1610.613283][T27364] __traverse_mounts+0x192/0x790 [ 1610.618711][T27364] step_into+0x5aa/0x2270 [ 1610.623534][T27364] walk_component+0xfc/0x5b0 [ 1610.628618][T27364] path_lookupat+0x17e/0x780 [ 1610.633704][T27364] filename_lookup+0x224/0x5f0 [ 1610.638962][T27364] user_path_at+0x3a/0x60 [ 1610.643785][T27364] __x64_sys_mount+0x1fc/0x310 [ 1610.649043][T27364] do_syscall_64+0xcd/0x260 [ 1610.654055][T27364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.660439][T27364] [ 1610.660439][T27364] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1610.668136][T27364] __lock_acquire+0x1173/0x1ba0 [ 1610.673485][T27364] lock_acquire+0x179/0x350 [ 1610.678485][T27364] __mutex_lock+0x199/0xb90 [ 1610.683481][T27364] autofs_notify_daemon+0x4a6/0xd60 [ 1610.689173][T27364] autofs_wait+0x10ca/0x1a70 [ 1610.694264][T27364] autofs_mount_wait+0x132/0x380 [ 1610.699698][T27364] autofs_d_automount+0x390/0x7f0 [ 1610.705219][T27364] __traverse_mounts+0x192/0x790 [ 1610.710647][T27364] step_into+0x5aa/0x2270 [ 1610.715472][T27364] walk_component+0xfc/0x5b0 [ 1610.720565][T27364] path_lookupat+0x17e/0x780 [ 1610.725649][T27364] filename_lookup+0x224/0x5f0 [ 1610.730911][T27364] kern_path+0x35/0x50 [ 1610.735475][T27364] lookup_bdev+0xd8/0x280 [ 1610.740296][T27364] resume_store+0x1d6/0x460 [ 1610.745289][T27364] kobj_attr_store+0x55/0x80 [ 1610.750380][T27364] sysfs_kf_write+0xef/0x150 [ 1610.755493][T27364] kernfs_fop_write_iter+0x351/0x510 [ 1610.761282][T27364] vfs_write+0x5ba/0x1180 [ 1610.766117][T27364] ksys_write+0x12a/0x240 [ 1610.770952][T27364] do_syscall_64+0xcd/0x260 [ 1610.775954][T27364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.782342][T27364] [ 1610.782342][T27364] other info that might help us debug this: [ 1610.782342][T27364] [ 1610.792539][T27364] Chain exists of: [ 1610.792539][T27364] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 1610.792539][T27364] [ 1610.804932][T27364] Possible unsafe locking scenario: [ 1610.804932][T27364] [ 1610.812360][T27364] CPU0 CPU1 [ 1610.817695][T27364] ---- ---- [ 1610.823029][T27364] lock(&of->mutex); [ 1610.826982][T27364] lock(&pipe->mutex); [ 1610.833626][T27364] lock(&of->mutex); [ 1610.840099][T27364] lock(&sbi->pipe_mutex); [ 1610.844573][T27364] [ 1610.844573][T27364] *** DEADLOCK *** [ 1610.844573][T27364] [ 1610.852693][T27364] 4 locks held by syz.3.6538/27364: [ 1610.857873][T27364] #0: ffff8880255e22b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1610.866903][T27364] #1: ffff8880375fc420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1610.875834][T27364] #2: ffff88805c1df088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1610.885544][T27364] #3: ffff88801e694c38 (kn->active#68){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1610.895516][T27364] [ 1610.895516][T27364] stack backtrace: [ 1610.901376][T27364] CPU: 1 UID: 0 PID: 27364 Comm: syz.3.6538 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 1610.901391][T27364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1610.901398][T27364] Call Trace: [ 1610.901402][T27364] [ 1610.901406][T27364] dump_stack_lvl+0x116/0x1f0 [ 1610.901422][T27364] print_circular_bug+0x275/0x350 [ 1610.901438][T27364] check_noncircular+0x14c/0x170 [ 1610.901455][T27364] __lock_acquire+0x1173/0x1ba0 [ 1610.901473][T27364] lock_acquire+0x179/0x350 [ 1610.901489][T27364] ? autofs_notify_daemon+0x4a6/0xd60 [ 1610.901500][T27364] ? __pfx___might_resched+0x10/0x10 [ 1610.901515][T27364] __mutex_lock+0x199/0xb90 [ 1610.901529][T27364] ? autofs_notify_daemon+0x4a6/0xd60 [ 1610.901538][T27364] ? autofs_notify_daemon+0x45a/0xd60 [ 1610.901548][T27364] ? autofs_notify_daemon+0x4a6/0xd60 [ 1610.901558][T27364] ? __pfx___mutex_lock+0x10/0x10 [ 1610.901571][T27364] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1610.901583][T27364] ? lockdep_hardirqs_on+0x7c/0x110 [ 1610.901597][T27364] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1610.901612][T27364] ? from_kgid_munged+0xab/0x130 [ 1610.901625][T27364] ? autofs_notify_daemon+0x4a6/0xd60 [ 1610.901634][T27364] autofs_notify_daemon+0x4a6/0xd60 [ 1610.901644][T27364] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1610.901653][T27364] ? sysfs_kf_write+0xef/0x150 [ 1610.901668][T27364] ? kernfs_fop_write_iter+0x351/0x510 [ 1610.901681][T27364] ? vfs_write+0x5ba/0x1180 [ 1610.901700][T27364] ? lockdep_init_map_type+0x5c/0x280 [ 1610.901717][T27364] ? lockdep_init_map_type+0x5c/0x280 [ 1610.901734][T27364] autofs_wait+0x10ca/0x1a70 [ 1610.901744][T27364] ? __pfx_autofs_wait+0x10/0x10 [ 1610.901753][T27364] ? __pfx_path_check_mount+0x10/0x10 [ 1610.901765][T27364] ? find_held_lock+0x2b/0x80 [ 1610.901777][T27364] ? path_has_submounts+0xcb/0x120 [ 1610.901790][T27364] ? do_raw_spin_unlock+0x172/0x230 [ 1610.901801][T27364] ? find_held_lock+0x2b/0x80 [ 1610.901814][T27364] autofs_mount_wait+0x132/0x380 [ 1610.901830][T27364] autofs_d_automount+0x390/0x7f0 [ 1610.901847][T27364] __traverse_mounts+0x192/0x790 [ 1610.901861][T27364] step_into+0x5aa/0x2270 [ 1610.901876][T27364] ? __pfx_step_into+0x10/0x10 [ 1610.901893][T27364] ? __pfx___up_read+0x10/0x10 [ 1610.901903][T27364] ? walk_component+0x35e/0x5b0 [ 1610.901917][T27364] ? lookup_fast+0x156/0x610 [ 1610.901932][T27364] walk_component+0xfc/0x5b0 [ 1610.901946][T27364] path_lookupat+0x17e/0x780 [ 1610.901962][T27364] filename_lookup+0x224/0x5f0 [ 1610.901978][T27364] ? __pfx_filename_lookup+0x10/0x10 [ 1610.901998][T27364] ? getname_kernel+0x52/0x370 [ 1610.902009][T27364] ? __asan_memcpy+0x3c/0x60 [ 1610.902024][T27364] kern_path+0x35/0x50 [ 1610.902039][T27364] lookup_bdev+0xd8/0x280 [ 1610.902050][T27364] ? __pfx_lookup_bdev+0x10/0x10 [ 1610.902061][T27364] ? resume_store+0x1b8/0x460 [ 1610.902072][T27364] ? __asan_memcpy+0x3c/0x60 [ 1610.902086][T27364] resume_store+0x1d6/0x460 [ 1610.902097][T27364] ? __pfx_resume_store+0x10/0x10 [ 1610.902109][T27364] ? find_held_lock+0x2b/0x80 [ 1610.902122][T27364] ? __pfx_resume_store+0x10/0x10 [ 1610.902132][T27364] kobj_attr_store+0x55/0x80 [ 1610.902146][T27364] ? __pfx_kobj_attr_store+0x10/0x10 [ 1610.902160][T27364] sysfs_kf_write+0xef/0x150 [ 1610.902175][T27364] kernfs_fop_write_iter+0x351/0x510 [ 1610.902189][T27364] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1610.902205][T27364] vfs_write+0x5ba/0x1180 [ 1610.902220][T27364] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1610.902234][T27364] ? __pfx___mutex_lock+0x10/0x10 [ 1610.902248][T27364] ? __pfx_vfs_write+0x10/0x10 [ 1610.902266][T27364] ksys_write+0x12a/0x240 [ 1610.902281][T27364] ? __pfx_ksys_write+0x10/0x10 [ 1610.902295][T27364] ? rcu_is_watching+0x12/0xc0 [ 1610.902309][T27364] do_syscall_64+0xcd/0x260 [ 1610.902324][T27364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.902335][T27364] RIP: 0033:0x7f163298e969 [ 1610.902344][T27364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1610.902355][T27364] RSP: 002b:00007f163374d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1610.902365][T27364] RAX: ffffffffffffffda RBX: 00007f1632bb5fa0 RCX: 00007f163298e969 [ 1610.902372][T27364] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000005 [ 1610.902379][T27364] RBP: 00007f1632a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1610.902385][T27364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1610.902391][T27364] R13: 0000000000000000 R14: 00007f1632bb5fa0 R15: 00007fff65ba33e8 [ 1610.902400][T27364] [ 1611.375136][T27364] PM: Image not found (code -6)