last executing test programs: 3m13.27747283s ago: executing program 2 (id=545): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002abf2a020b10e077009020102030909025c000100000000090433b902ff00ff043805ee657a086f7e03f96e9a65ea1e8212c52baf19790eef51b472230d203b4e5e488216fc3428e334fab44d5573d8104d80c3d5ee60f2f309050000ff03000100090582100800000000"], 0x0) 3m9.951517611s ago: executing program 2 (id=555): setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x0, 0x2, 0x21}, @dstopts={0x4}]}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x38, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x6, 0x2, 0x1, 0x0, [@empty, @empty, @mcast2]}]}}}}}, 0x0) 3m8.734476903s ago: executing program 2 (id=557): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0xdddd1000, 0x547d1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m6.196468811s ago: executing program 2 (id=563): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = gettid() r2 = epoll_create(0x20003fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r6 = gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) gettid() sched_setscheduler(r6, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd}, "fc2ad95df809743bbbfbf36ff6"}, 0x11) r7 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r7, &(0x7f0000000080)={r2, r7, 0x1}) socket$inet6(0xa, 0x3, 0x3a) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0x25, 0x2016, 0x1}) 3m4.700749064s ago: executing program 2 (id=566): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b00"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x400, 0x0, 0x1], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc10}]}]}]}}]}, 0xbc}}, 0x8000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3m2.317767496s ago: executing program 2 (id=571): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x40, 0x6, 0x8}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000100)={0x0, 0x3f73, 0x100, 0x1, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x21, 0x3, 0xfffffffe, 0x236, 0x800000000009, 0x8, 0xd861, 0x3}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r4 = getpid() prlimit64(r4, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x80000b) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f0000000f0800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 2m45.49691072s ago: executing program 32 (id=571): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x40, 0x6, 0x8}, 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000100)={0x0, 0x3f73, 0x100, 0x1, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x21, 0x3, 0xfffffffe, 0x236, 0x800000000009, 0x8, 0xd861, 0x3}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r4 = getpid() prlimit64(r4, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x80000b) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f0000000f0800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x8844) 17.204443399s ago: executing program 5 (id=902): socket$netlink(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r2}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.300993213s ago: executing program 5 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 14.216482466s ago: executing program 5 (id=910): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.12072899s ago: executing program 5 (id=911): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x2, 0x4, 0x50}, 0x2c) r1 = socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r5 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r5, 0x80045503, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38414761}}) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100", @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 12.615808954s ago: executing program 5 (id=917): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) 11.54223755s ago: executing program 1 (id=919): socket$netlink(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r2}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.470908006s ago: executing program 1 (id=922): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.201101107s ago: executing program 1 (id=923): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b000000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.835062082s ago: executing program 1 (id=924): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 9.732108477s ago: executing program 3 (id=925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 8.47779565s ago: executing program 0 (id=927): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 6.35083323s ago: executing program 3 (id=930): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x7, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)}, 0x1200) 4.858397994s ago: executing program 3 (id=936): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r3}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r5 = socket(0x28, 0x5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3, 0x19ef, 0xfffffff7, 0x5, 0x2800, 0x6, 0x9, 0x4, 0xc, 0x11, {0x4, 0xffffffff}, 0xd0, 0x1}}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4.385230724s ago: executing program 1 (id=938): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_usb_connect(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002abf2a020b10e077009020102030909025c000100000000090433b902ff00ff043805ee657a086f7e03f96e9a65ea1e8212c52baf19790eef51b472230d203b4e5e488216fc3428e334fab44d5573d8104d80c3d5ee60f2f309050000ff03000100090582100800000000"], 0x0) 4.156522823s ago: executing program 4 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@prjquota}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$eJzs281vFOUfAPDvzG7L249fKyIKgjSisfGlpQWVgxeNJh40MdEDHmtbCLJQQ2sihGg1Bo+GxLvxaOJf4MmTUU8mXvVuSIgSE9CYsGZmZ9ruslsK3bKE/XySaZ9n59mZ57vzPDPPzLMbQN8ayf4kEf+LiF8jYqiRbS4w0vh37cr56b+vnJ9Ool5/84/BvNzVK+eny6Ll+7YVmdE0Iv00KXbSbP7suZNTtdrsmSI/vnDqvfH5s+eeOXFq6vjs8dnTk0eOHD408fxzk892Jc4svqt7Ppzbu/vVty++Pn304js/fpPVd9e+xvqVcXTLSBb4n/Vc67rHu72zHrteX44zqfa6NqxVJSKywzWQ9/+hqMTywRuKVz7paeWADZWdsze1ebn4v1gH7mFJ9LoGQG+UF/zs/rdc7uDwo+cuv9i4AcrivlYsjTXVSIsyAxu4/5GIOLr4z5fZEi3PIZaOz+AGVgAA6DvfZeOfp9uN/9LYtaLc/4u5oeGIuC8idkTE/RGxMyIeiMjLPhgRD93i/lunhm4cf6aXbiuwNcrGfy8Uc1vN479y9BfDlSK3PY9/IDl2ojZ7sPhMRmNgU5afaLfxchMv//J5p/2vHP9lS7b/cixYbORSteUB3czUwlS3BqWXP47YU20Xf7I0E5BExO6I2LPmrS5G8fHkTjz59d5OJW8e/yq6MM9U/yriicbxX4yW+EvJ6vOT45ujNntwvGwVN/rp5wtvdNp/2/ivb19/YGuUHf+tze1/aV0l/zv0V7JyvnY+bvmG5MJvn3W8p6zeZvsfTN7K53TLmnwwtbBwZiJiMHktovX1yeX3lvmyfBb/6IH2/X9H8Z4s/ocjImvE+yLikYjYHxH/FvfQj0bEgVXi/+Glx97ttG5d7T9iyxrLdZTFP9P2/LfU/oebj/+tJyonv//29uPPjv/hPDVavJKf/26ic3U2FyWWWzMAAADc69L8u/FJOraUTtOxscZ3+HfG1rQ2N7/w1LG590/PNL5DPxwDafmka2jF89CJZLHYYiM/WTwrLtcfKp4bf1HZkufHpudqMz2OHfrdtub+v7/s/5nfK72uHbDh/F4L+ldr/097VA/gznP9h/6l/0P/0v+hf7Xr/x+15M0FwL3J9R/6l/4P/Uv/h/6l/0NfWs/v+jcqUV3l1/sSd0si0ruiGhItiUgaF/RN6+zdvT4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMd/AQAA///gq/is") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.013454822s ago: executing program 4 (id=940): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 2.963490244s ago: executing program 3 (id=941): r0 = getpid() syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x2) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.950672055s ago: executing program 0 (id=942): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.900800677s ago: executing program 0 (id=943): socket$netlink(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r2}) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x7d}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.803211161s ago: executing program 3 (id=944): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x5, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xdb, 0x0, 0x8, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffff6, 0x2, 0x1136b2e5, 0x9, 0x0, 0x3, 0x0, 0x8000000000, 0xfffffffffffffffa], 0x8004005, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.783798502s ago: executing program 0 (id=945): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYBLOB="00000000fc1ccaf300000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000001185b0000010000000000000000000000186900000b000000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.656513477s ago: executing program 3 (id=946): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x7, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4a}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)}, 0x1200) 2.572570081s ago: executing program 0 (id=947): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) sched_setscheduler(r0, 0x2, 0x0) 2.340362691s ago: executing program 4 (id=948): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b1375", 0x7e}], 0x3}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.225693796s ago: executing program 4 (id=949): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0xe0ffff, 0x19, 0x3) 1.607429272s ago: executing program 0 (id=950): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x2, 0x4, 0x50}, 0x2c) r1 = socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r5 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioctl$USBDEVFS_CONTROL(r5, 0x80045503, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38414761}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.529014806s ago: executing program 5 (id=951): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) r5 = accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}, "e9c9cee4837ae0b9"}}}}}, 0x0) 487.047749ms ago: executing program 4 (id=952): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(r2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) sched_setscheduler(r0, 0x2, 0x0) 405.268653ms ago: executing program 1 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=954): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = gettid() r2 = epoll_create(0x20003fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r6 = gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) gettid() sched_setscheduler(r6, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xd}, "fc2ad95df809743bbbfbf36ff6"}, 0x11) r7 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r7, &(0x7f0000000080)={r2, r7, 0x1}) socket$inet6(0xa, 0x3, 0x3a) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000280)={0x0, 0x25, 0x2016, 0x1}) kernel console output (not intermixed with test programs): error: Failed to read block 0x4e2: -5 [ 140.765171][ T5007] SQUASHFS error: Failed to read block 0x9ca: -5 [ 140.771854][ T5007] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 140.779102][ T5007] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 140.786076][ T5007] SQUASHFS error: Failed to read block 0x535f2: -5 [ 140.803888][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 140.803904][ T26] audit: type=1800 audit(1764238586.591:29): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.163" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 140.833788][ T1111] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.198479][ T13] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 142.758018][ T26] audit: type=1326 audit(1764238587.966:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 142.781286][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.850821][ T26] audit: type=1326 audit(1764238587.966:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 142.875842][ T26] audit: type=1326 audit(1764238587.966:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 142.900110][ T26] audit: type=1326 audit(1764238587.976:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 142.923837][ T26] audit: type=1326 audit(1764238587.976:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 142.968205][ T26] audit: type=1326 audit(1764238587.976:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 143.634975][ T13] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 143.657979][ T13] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 143.832401][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.864076][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 143.882129][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.891365][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.901688][ T1111] usb 2-1: config 0 descriptor?? [ 143.944849][ T13] usb 5-1: string descriptor 0 read error: -71 [ 143.963364][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 144.005768][ T13] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 144.134693][ T1111] usb 2-1: can't set config #0, error -71 [ 144.141853][ T1111] usb 2-1: USB disconnect, device number 10 [ 144.971405][ T13] usb 5-1: config 0 descriptor?? [ 144.986429][ T26] audit: type=1326 audit(1764238590.501:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 145.016392][ T13] usb 5-1: can't set config #0, error -71 [ 145.023430][ T13] usb 5-1: USB disconnect, device number 5 [ 145.131299][ T26] audit: type=1326 audit(1764238590.501:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 145.309314][ T26] audit: type=1326 audit(1764238590.520:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 146.449069][ T5067] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 147.865572][ T5081] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.792473][ T5093] loop2: detected capacity change from 0 to 32768 [ 150.855507][ T5093] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.185 (5093) [ 150.985417][ T5093] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 150.995146][ T5093] BTRFS info (device loop2): using free space tree [ 151.002164][ T5093] BTRFS info (device loop2): has skinny extents [ 151.113175][ T5098] binder: 5097:5098 ioctl 4018620d 0 returned -22 [ 151.980822][ T5108] binder: 5097:5108 ioctl c0306201 0 returned -14 [ 154.764610][ T5143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 155.635433][ T5093] BTRFS error (device loop2): open_ctree failed: -12 [ 156.110781][ T5161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 156.572034][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 156.572050][ T26] audit: type=1326 audit(1764238600.950:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 156.671745][ T26] audit: type=1326 audit(1764238600.950:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 156.719561][ T26] audit: type=1326 audit(1764238600.968:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 156.826778][ T26] audit: type=1326 audit(1764238600.968:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 156.849318][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.884931][ T26] audit: type=1326 audit(1764238600.968:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 157.132632][ T26] audit: type=1326 audit(1764238600.968:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 157.707665][ T1111] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 158.281133][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.312951][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.327048][ T1111] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.343736][ T1111] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.356347][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.383953][ T1111] usb 5-1: config 0 descriptor?? [ 158.683972][ T26] audit: type=1326 audit(1764238603.316:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 159.221965][ T26] audit: type=1326 audit(1764238603.316:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 159.253734][ T4234] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 159.256976][ T26] audit: type=1326 audit(1764238603.344:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 159.291840][ T26] audit: type=1326 audit(1764238603.344:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 159.724286][ T1111] usbhid 5-1:0.0: can't add hid device: -71 [ 159.760183][ T1111] usbhid: probe of 5-1:0.0 failed with error -71 [ 159.912493][ T1111] usb 5-1: USB disconnect, device number 6 [ 160.797943][ T4234] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 161.365525][ T4234] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 161.405119][ T4234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.791178][ T4234] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.095697][ T4234] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.788862][ T4234] usb 1-1: Product: syz [ 162.803928][ T4234] usb 1-1: config 0 descriptor?? [ 162.835057][ T4234] usb 1-1: can't set config #0, error -71 [ 162.845968][ T4234] usb 1-1: USB disconnect, device number 4 [ 163.744458][ T1108] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.088358][ T4234] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 165.763018][ T4201] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.828790][ T1108] usb 2-1: config 0 has no interfaces? [ 165.840048][ T1108] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 165.905478][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.942652][ T1108] usb 2-1: config 0 descriptor?? [ 166.512548][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 166.512567][ T26] audit: type=1326 audit(1764238610.135:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 166.576709][ T4201] usb 1-1: Using ep0 maxpacket: 32 [ 166.587616][ T4234] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 166.625743][ T4234] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 166.708392][ T26] audit: type=1326 audit(1764238610.135:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 166.757331][ T26] audit: type=1326 audit(1764238610.145:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 166.806421][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.867645][ T26] audit: type=1326 audit(1764238610.145:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 166.901721][ T26] audit: type=1326 audit(1764238610.145:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 167.402823][ T4201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.423945][ T4201] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 167.446771][ T13] usb 2-1: USB disconnect, device number 11 [ 167.464417][ T26] audit: type=1326 audit(1764238610.145:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.3.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 167.720688][ T4234] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.742248][ T4201] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 167.754401][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.814446][ T4201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.845498][ T4201] usb 1-1: Product: syz [ 168.652394][ T4234] usb 5-1: config 0 descriptor?? [ 168.657741][ T4201] usb 1-1: Manufacturer: syz [ 168.663075][ T4201] usb 1-1: SerialNumber: syz [ 168.669972][ T4201] usb 1-1: config 0 descriptor?? [ 168.682871][ T4234] usb 5-1: can't set config #0, error -71 [ 168.692346][ T4234] usb 5-1: USB disconnect, device number 7 [ 168.698637][ T4201] usb 1-1: can't set config #0, error -71 [ 168.729530][ T4201] usb 1-1: USB disconnect, device number 5 [ 170.565035][ T5301] netlink: 'syz.0.234': attribute type 13 has an invalid length. [ 172.681083][ T4734] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.098130][ T4734] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 173.257321][ T4734] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 173.273771][ T4734] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.278445][ T5354] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 174.392144][ T4734] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 174.425925][ T4734] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 174.455977][ T4734] usb 5-1: Product: syz [ 174.466455][ T4734] usb 5-1: Manufacturer: syz [ 174.471335][ T4734] usb 5-1: SerialNumber: syz [ 174.494184][ T4734] usb 5-1: config 0 descriptor?? [ 174.604175][ T4734] usb 5-1: selecting invalid altsetting 0 [ 176.260155][ T5345] usb 5-1: selecting invalid altsetting 0 [ 176.287599][ T5345] usb 5-1: 0:0: usb_set_interface failed (-22) [ 176.294234][ T5345] usb 5-1: selecting invalid altsetting 0 [ 176.308522][ T5345] usb 5-1: 0:0: usb_set_interface failed (-22) [ 176.315199][ T5345] usb 5-1: selecting invalid altsetting 0 [ 176.330509][ T5345] usb 5-1: 0:0: usb_set_interface failed (-22) [ 176.338314][ T4734] usb 5-1: USB disconnect, device number 8 [ 179.934972][ T5409] capability: warning: `syz.1.260' uses deprecated v2 capabilities in a way that may be insecure [ 180.194160][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 180.399621][ T5138] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 180.656200][ T5138] usb 3-1: Using ep0 maxpacket: 32 [ 180.816780][ T5138] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.863880][ T5138] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 180.998435][ T5138] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 181.021471][ T5138] usb 3-1: can't read configurations, error -71 [ 182.014181][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.345426][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 182.644627][ T4297] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 182.944475][ T4297] usb 1-1: Using ep0 maxpacket: 32 [ 183.115376][ T4297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.139636][ T4297] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.350707][ T4297] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 183.364357][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.379681][ T4297] usb 1-1: Product: syz [ 183.387559][ T4297] usb 1-1: Manufacturer: syz [ 183.395706][ T4297] usb 1-1: SerialNumber: syz [ 183.433604][ T4297] usb 1-1: config 0 descriptor?? [ 184.334096][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.348627][ T13] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 184.421724][ T4297] usb 1-1: USB disconnect, device number 6 [ 184.483551][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 184.499661][ T13] usb 5-1: can't read configurations, error -71 [ 184.932664][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.467358][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.535867][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.570674][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.613648][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.630081][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.667112][ T13] usb 5-1: config 0 descriptor?? [ 187.686960][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.694602][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.703334][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.711179][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.719425][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.727625][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.735745][ T13] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 187.745291][ T13] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 187.790618][ T13] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.062193][ T26] audit: type=1326 audit(1764238630.798:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5488 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 188.510666][ T26] audit: type=1326 audit(1764238630.798:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5488 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 188.788710][ T26] audit: type=1326 audit(1764238630.798:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5488 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 189.047389][ T13] usb 5-1: USB disconnect, device number 10 [ 189.062409][ T5445] usb 5-1: string descriptor 0 read error: -19 [ 190.961994][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.049781][ T4257] Bluetooth: hci2: command 0x0406 tx timeout [ 191.080530][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 191.138949][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 191.998039][ T5514] loop2: detected capacity change from 0 to 32768 [ 192.333932][ T5514] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.289 (5514) [ 192.716494][ T5514] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 192.725305][ T5514] BTRFS info (device loop2): using free space tree [ 192.732387][ T5514] BTRFS info (device loop2): has skinny extents [ 193.164425][ T13] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.431640][ T1108] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.774922][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.856089][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.972665][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.998153][ T1108] usb 4-1: Using ep0 maxpacket: 32 [ 194.018820][ T5514] BTRFS info (device loop2): enabling ssd optimizations [ 194.173004][ T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.275140][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.523712][ T13] usb 2-1: config 0 descriptor?? [ 195.751357][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 195.759353][ T1108] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 195.879748][ T1108] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 195.899822][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 195.912642][ T1108] usb 4-1: can't read configurations, error -71 [ 195.925974][ T5562] netlink: 'syz.0.298': attribute type 13 has an invalid length. [ 196.034110][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 196.073382][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 196.115795][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 196.123503][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 196.158011][ T4437] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4437) [ 196.175835][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 196.213362][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 196.242321][ T13] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 196.285050][ T13] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 196.308683][ T13] usb 2-1: USB disconnect, device number 12 [ 196.559456][ T5589] fido_id[5589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 196.575286][ T4201] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 196.852618][ T4201] usb 1-1: Using ep0 maxpacket: 32 [ 197.035578][ T4201] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.262504][ T4201] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 197.380980][ T5597] netlink: 28 bytes leftover after parsing attributes in process `syz.4.304'. [ 197.462287][ T4201] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 197.693563][ T4201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.704005][ T4201] usb 1-1: Product: syz [ 197.711112][ T26] audit: type=1326 audit(1764238639.825:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 197.724885][ T4201] usb 1-1: Manufacturer: syz [ 197.773196][ T4201] usb 1-1: SerialNumber: syz [ 197.804799][ T4201] usb 1-1: config 0 descriptor?? [ 198.007720][ C0] hrtimer: interrupt took 37191 ns [ 198.469182][ T5138] usb 1-1: USB disconnect, device number 7 [ 198.484331][ T26] audit: type=1326 audit(1764238639.825:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 198.507363][ T26] audit: type=1326 audit(1764238639.853:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 198.646888][ T26] audit: type=1326 audit(1764238639.853:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 198.689947][ T26] audit: type=1326 audit(1764238639.853:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 198.891781][ T26] audit: type=1326 audit(1764238639.853:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 199.085147][ T26] audit: type=1326 audit(1764238639.853:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 199.272440][ T26] audit: type=1326 audit(1764238639.853:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 199.501245][ T26] audit: type=1326 audit(1764238639.853:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 199.524162][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.694003][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.701444][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.865580][ T26] audit: type=1326 audit(1764238639.853:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9860749 code=0x7ffc0000 [ 201.014271][ T5633] trusted_key: encrypted_key: key user:syz not found [ 202.155483][ T4242] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.208977][ T4242] usb 2-1: Using ep0 maxpacket: 32 [ 203.643567][ T4310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 204.165352][ T4310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.177936][ T5571] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 204.656745][ T4242] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.670670][ T4242] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 204.822260][ T4242] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 204.882978][ T4242] usb 2-1: can't read configurations, error -71 [ 205.225574][ T4310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.235523][ T4310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.248872][ T4310] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.258804][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.272216][ T4310] usb 4-1: config 0 descriptor?? [ 205.451655][ T4242] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 205.629460][ T5571] usb 5-1: Using ep0 maxpacket: 32 [ 205.843563][ T4242] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 205.918626][ T4242] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 205.945343][ T4242] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.985570][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 205.998982][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 206.006776][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 206.023619][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 206.044841][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 206.065132][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 206.084607][ T4310] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 206.098330][ T4310] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 206.121296][ T4242] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.135022][ T4310] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 206.139956][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.200304][ T4242] usb 2-1: Product: syz [ 206.204844][ T4242] usb 2-1: Manufacturer: syz [ 206.227678][ T4242] usb 2-1: SerialNumber: syz [ 206.291426][ T4242] usb 2-1: config 0 descriptor?? [ 206.360318][ T4242] usb 2-1: selecting invalid altsetting 0 [ 206.409952][ T5645] usb 4-1: string descriptor 0 read error: -71 [ 206.466482][ T13] usb 4-1: USB disconnect, device number 7 [ 207.745144][ T5571] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.753285][ T5571] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 208.458811][ T5659] usb 2-1: selecting invalid altsetting 0 [ 208.466732][ T5659] usb 2-1: 0:0: usb_set_interface failed (-22) [ 208.473839][ T5659] usb 2-1: selecting invalid altsetting 0 [ 208.479681][ T5659] usb 2-1: 0:0: usb_set_interface failed (-22) [ 208.487804][ T5659] usb 2-1: selecting invalid altsetting 0 [ 208.493968][ T5659] usb 2-1: 0:0: usb_set_interface failed (-22) [ 208.501026][ T5571] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 208.533826][ T5571] usb 5-1: can't read configurations, error -71 [ 208.624184][ T5689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 209.224101][ T13] usb 2-1: USB disconnect, device number 14 [ 210.999986][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 211.000034][ T26] audit: type=1326 audit(1764238652.256:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 211.328674][ T26] audit: type=1326 audit(1764238652.341:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 212.159871][ T26] audit: type=1326 audit(1764238652.378:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 212.492814][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 212.639825][ T26] audit: type=1326 audit(1764238652.378:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 212.674003][ T26] audit: type=1326 audit(1764238652.397:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 212.941406][ T5713] trusted_key: encrypted_key: insufficient parameters specified [ 212.961822][ T26] audit: type=1326 audit(1764238652.397:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5690 comm="syz.0.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 213.356185][ T5571] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 213.531076][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 214.278199][ T5571] usb 2-1: Using ep0 maxpacket: 32 [ 214.417253][ T5571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.436117][ T5571] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 214.505318][ T5571] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 214.588947][ T5571] usb 2-1: can't read configurations, error -71 [ 215.614454][ T4310] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.259989][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.344'. [ 217.283439][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 217.347290][ T5747] trusted_key: encrypted_key: insufficient parameters specified [ 217.699365][ T5571] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 217.998594][ T5571] usb 2-1: Using ep0 maxpacket: 32 [ 218.287314][ T1108] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 218.380879][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 218.789906][ T4310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.881929][ T4310] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 219.292105][ T4310] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 219.299773][ T4310] usb 5-1: can't read configurations, error -71 [ 219.335132][ T1108] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 219.351230][ T1108] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 219.372240][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.416769][ T26] audit: type=1326 audit(1764238660.095:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 219.471201][ T26] audit: type=1326 audit(1764238660.095:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 219.542508][ T26] audit: type=1326 audit(1764238660.095:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 219.567742][ T26] audit: type=1326 audit(1764238660.095:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 219.592667][ T26] audit: type=1326 audit(1764238660.095:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 219.647146][ T1108] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.870247][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 220.007810][ T1108] usb 1-1: Product: syz [ 220.070872][ T1108] usb 1-1: Manufacturer: syz [ 220.128804][ T1108] usb 1-1: SerialNumber: syz [ 220.260978][ T26] audit: type=1326 audit(1764238660.095:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5756 comm="syz.4.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1d80357749 code=0x7ffc0000 [ 220.405089][ T1108] usb 1-1: config 0 descriptor?? [ 220.425401][ T5571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.433354][ T5571] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 220.701347][ T1108] usb 1-1: selecting invalid altsetting 0 [ 220.714186][ T5571] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 220.724680][ T5571] usb 2-1: can't read configurations, error -71 [ 220.744450][ T5570] usb 1-1: USB disconnect, device number 8 [ 222.692581][ T26] audit: type=1326 audit(1764238662.228:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 222.811954][ T26] audit: type=1326 audit(1764238662.228:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 222.940677][ T26] audit: type=1326 audit(1764238662.228:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 223.009575][ T26] audit: type=1326 audit(1764238662.228:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5777 comm="syz.3.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 223.153447][ T5570] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.322072][ T5571] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 223.486094][ T5570] usb 1-1: Using ep0 maxpacket: 32 [ 223.932001][ T5571] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 223.990683][ T5571] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 224.031954][ T5571] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.644316][ T5571] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.136612][ T5571] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.144908][ T5571] usb 2-1: Product: syz [ 225.149364][ T5571] usb 2-1: Manufacturer: syz [ 225.154682][ T5571] usb 2-1: SerialNumber: syz [ 225.161202][ T5571] usb 2-1: config 0 descriptor?? [ 225.172046][ T5570] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.180603][ T5570] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 225.217780][ T5571] usb 2-1: selecting invalid altsetting 0 [ 225.291147][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.359'. [ 225.313331][ T5810] binder: 5809:5810 ioctl 4018620d 0 returned -22 [ 225.423886][ T5812] binder: 5809:5812 ioctl c0306201 0 returned -14 [ 225.503252][ T5570] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 225.511619][ T5570] usb 1-1: can't read configurations, error -71 [ 226.629190][ T1108] usb 2-1: USB disconnect, device number 18 [ 226.713297][ T4187] udevd[4187]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.543964][ T4539] udevd[4539]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.521083][ T5854] netlink: 'syz.0.370': attribute type 13 has an invalid length. [ 232.202974][ T5868] netlink: 'syz.3.374': attribute type 13 has an invalid length. [ 235.060873][ T5571] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 235.402856][ T5571] usb 2-1: Using ep0 maxpacket: 32 [ 235.555465][ T5570] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 236.600147][ T4233] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 236.604254][ T5570] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 236.619369][ T5570] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 236.631442][ T5570] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.780591][ T5911] netlink: 'syz.2.385': attribute type 13 has an invalid length. [ 237.644041][ T5910] loop3: detected capacity change from 0 to 32768 [ 237.669278][ T5571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.677043][ T5571] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 237.688743][ T5917] qfq: no options [ 237.722681][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 237.926399][ T5571] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 237.934121][ T5571] usb 2-1: can't read configurations, error -71 [ 238.739221][ T5570] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.748595][ T5570] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.061489][ T5570] usb 5-1: Product: syz [ 240.246586][ T4233] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.254429][ T4233] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 240.374353][ T5570] usb 5-1: Manufacturer: syz [ 240.384447][ T5570] usb 5-1: SerialNumber: syz [ 240.393992][ T5570] usb 5-1: config 0 descriptor?? [ 240.427430][ T5570] usb 5-1: can't set config #0, error -71 [ 240.491215][ T4233] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 240.499931][ T4233] usb 1-1: can't read configurations, error -71 [ 240.548973][ T5570] usb 5-1: USB disconnect, device number 15 [ 241.881765][ T4297] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 242.176192][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 242.187590][ T5966] binder: 5965:5966 ioctl 4018620d 0 returned -22 [ 242.308086][ T5970] binder: 5965:5970 ioctl c0306201 0 returned -14 [ 242.625981][ T5974] netlink: 'syz.4.398': attribute type 13 has an invalid length. [ 243.430559][ T5979] loop4: detected capacity change from 0 to 32768 [ 244.372259][ T4297] usb 4-1: unable to get BOS descriptor or descriptor too short [ 244.380269][ T4297] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 244.522341][ T4297] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 244.530187][ T4297] usb 4-1: can't read configurations, error -71 [ 245.855565][ T6008] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.960300][ T6003] netlink: 'syz.2.406': attribute type 13 has an invalid length. [ 248.002117][ T6030] netlink: 'syz.0.412': attribute type 13 has an invalid length. [ 249.274758][ T4233] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 250.551550][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 251.359278][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.378815][ T4233] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 251.460281][ T4233] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 251.479663][ T4233] usb 5-1: can't read configurations, error -71 [ 253.312092][ T4235] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 255.701538][ T4235] usb 4-1: device descriptor read/all, error -71 [ 255.709871][ T6099] netlink: 'syz.2.428': attribute type 13 has an invalid length. [ 262.107916][ T4256] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 262.148071][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 262.182903][ T26] audit: type=1326 audit(1764238700.093:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05e479749 code=0x7ffc0000 [ 262.551526][ T26] audit: type=1326 audit(1764238700.093:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05e479749 code=0x7ffc0000 [ 262.575067][ T26] audit: type=1326 audit(1764238700.102:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fc05e479749 code=0x7ffc0000 [ 262.624663][ T26] audit: type=1326 audit(1764238700.111:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05e479749 code=0x7ffc0000 [ 262.652272][ T26] audit: type=1326 audit(1764238700.111:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05e479749 code=0x7ffc0000 [ 262.675058][ T26] audit: type=1326 audit(1764238700.111:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc05e479749 code=0x7ffc0000 [ 262.847113][ T4256] usb 5-1: Using ep0 maxpacket: 32 [ 263.956110][ T4256] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.014368][ T4256] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 264.844931][ T4256] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 264.862032][ T4256] usb 5-1: can't read configurations, error -71 [ 265.509612][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.516114][ T26] audit: type=1326 audit(1764238703.011:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 265.539738][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.552313][ T26] audit: type=1326 audit(1764238703.011:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 265.711922][ T26] audit: type=1326 audit(1764238703.011:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 265.781687][ T26] audit: type=1326 audit(1764238703.021:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5f585749 code=0x7ffc0000 [ 266.159218][ T6184] tmpfs: Unknown parameter 'n' [ 268.459723][ T6195] bridge0: port 3(gretap0) entered blocking state [ 268.466812][ T6195] bridge0: port 3(gretap0) entered disabled state [ 268.482443][ T6195] device gretap0 entered promiscuous mode [ 268.491501][ T6195] bridge0: port 3(gretap0) entered blocking state [ 268.498358][ T6195] bridge0: port 3(gretap0) entered forwarding state [ 269.533595][ T6205] bridge0: port 3(gretap0) entered blocking state [ 269.540789][ T6205] bridge0: port 3(gretap0) entered disabled state [ 269.548813][ T6205] device gretap0 entered promiscuous mode [ 269.555165][ T6205] bridge0: port 3(gretap0) entered blocking state [ 269.561755][ T6205] bridge0: port 3(gretap0) entered forwarding state [ 272.352601][ T4326] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 272.704854][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 274.380814][ T4326] usb 1-1: unable to get BOS descriptor or descriptor too short [ 274.389189][ T4326] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 274.456117][ T6251] tmpfs: Unknown parameter 'nr_blo' [ 274.477056][ T4326] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 274.492961][ T4326] usb 1-1: can't read configurations, error -71 [ 274.673315][ T6257] netlink: 'syz.0.467': attribute type 13 has an invalid length. [ 275.715474][ T6267] bridge0: port 3(gretap0) entered blocking state [ 275.722309][ T6267] bridge0: port 3(gretap0) entered disabled state [ 275.730176][ T6267] device gretap0 entered promiscuous mode [ 275.736866][ T6267] bridge0: port 3(gretap0) entered blocking state [ 275.743448][ T6267] bridge0: port 3(gretap0) entered forwarding state [ 280.030108][ T4201] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 280.314111][ T4201] usb 3-1: Using ep0 maxpacket: 32 [ 282.291926][ T4201] usb 3-1: unable to get BOS descriptor or descriptor too short [ 282.300372][ T4201] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 282.472845][ T4201] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 282.483121][ T4201] usb 3-1: can't read configurations, error -71 [ 289.587057][ T6376] infiniband syz!: set active [ 289.592276][ T6376] infiniband syz!: added team_slave_0 [ 290.401428][ T6376] RDS/IB: syz!: added [ 290.410510][ T6376] smc: adding ib device syz! with port count 1 [ 290.419705][ T6376] smc: ib device syz! port 1 has pnetid [ 291.215038][ T6405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 292.555011][ T4234] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 293.217594][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 293.378271][ T4311] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 294.105039][ T4311] usb 1-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.127780][ T4311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.392021][ T6439] netlink: 'syz.4.516': attribute type 13 has an invalid length. [ 295.039143][ T6438] loop2: detected capacity change from 0 to 32768 [ 295.152862][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.161005][ T4234] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 295.195513][ T4311] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.204688][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.224488][ T6438] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 295.233306][ T6438] BTRFS info (device loop2): using free space tree [ 295.240474][ T6438] BTRFS info (device loop2): has skinny extents [ 295.281004][ T4234] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 295.290223][ T4234] usb 2-1: can't read configurations, error -71 [ 295.324151][ T4311] usb 1-1: Product: syz [ 295.335511][ T4311] usb 1-1: Manufacturer: syz [ 295.340247][ T4311] usb 1-1: SerialNumber: syz [ 295.379200][ T4311] usb 1-1: config 0 descriptor?? [ 295.459872][ T4311] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 295.515011][ T4437] udevd[4437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.580611][ T6438] BTRFS info (device loop2): enabling ssd optimizations [ 297.021057][ T6466] bridge0: port 3(gretap0) entered blocking state [ 297.027636][ T6466] bridge0: port 3(gretap0) entered disabled state [ 297.035202][ T6466] device gretap0 entered promiscuous mode [ 297.041531][ T6466] bridge0: port 3(gretap0) entered blocking state [ 297.048021][ T6466] bridge0: port 3(gretap0) entered forwarding state [ 297.109599][ T4243] usb 1-1: USB disconnect, device number 15 [ 297.354990][ T6470] rdma_rxe: rxe_register_device failed with error -23 [ 297.362852][ T6470] rdma_rxe: failed to add team_slave_0 [ 300.170778][ T6501] rdma_rxe: rxe_register_device failed with error -23 [ 300.178139][ T6501] rdma_rxe: failed to add team_slave_0 [ 301.282547][ T6519] loop4: detected capacity change from 0 to 8 [ 301.299832][ T4191] Bluetooth: hci4: link tx timeout [ 301.305392][ T4191] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.524134][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 305.846429][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.539'. [ 307.309043][ T6580] loop2: detected capacity change from 0 to 8 [ 308.913257][ T6491] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 309.210860][ T6491] usb 3-1: Using ep0 maxpacket: 32 [ 310.368651][ T6614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'. [ 311.832825][ T6491] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.851501][ T6491] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 312.910051][ T6491] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 312.974399][ T6491] usb 3-1: can't read configurations, error -71 [ 315.470538][ T6662] netlink: 'syz.3.561': attribute type 13 has an invalid length. [ 319.490333][ T6702] rdma_rxe: rxe_register_device failed with error -23 [ 319.583725][ T6702] rdma_rxe: failed to add team_slave_0 [ 323.560357][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 323.560374][ T26] audit: type=1326 audit(1764238757.545:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.679839][ T26] audit: type=1326 audit(1764238757.545:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.703241][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.711854][ T26] audit: type=1326 audit(1764238757.545:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.734841][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.772908][ T26] audit: type=1326 audit(1764238757.545:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.804886][ T26] audit: type=1326 audit(1764238757.545:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.829638][ T26] audit: type=1326 audit(1764238757.564:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.865961][ T26] audit: type=1326 audit(1764238757.573:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.894051][ T26] audit: type=1326 audit(1764238757.573:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 323.932596][ T26] audit: type=1326 audit(1764238757.573:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe6d58dd749 code=0x7ffc0000 [ 328.688277][ T6766] nvme_fabrics: missing parameter 'transport=%s' [ 328.911087][ T6766] nvme_fabrics: missing parameter 'nqn=%s' [ 331.148347][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 331.161740][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.687721][ T4297] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 334.860955][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.886210][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.907256][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.060643][ T4297] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.070256][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.104476][ T4297] usb 4-1: config 0 descriptor?? [ 336.826744][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 336.902061][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 337.139688][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 337.147564][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 337.155204][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 337.163143][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 337.172530][ T4297] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 337.180748][ T4297] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 337.272189][ T4297] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 337.478409][ T4297] usb 4-1: USB disconnect, device number 12 [ 338.520892][ T6828] fido_id[6828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 338.810505][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.974674][ T4310] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 339.570599][ T4310] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 339.573539][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.592971][ T4310] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 339.593008][ T4310] usb 4-1: config 0 interface 0 has no altsetting 0 [ 339.936182][ T4310] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.017360][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.136804][ T4310] usb 4-1: Product: syz [ 340.182415][ T4310] usb 4-1: Manufacturer: syz [ 340.226024][ T4310] usb 4-1: SerialNumber: syz [ 340.417571][ T4310] usb 4-1: config 0 descriptor?? [ 340.521223][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.583885][ T4310] usb 4-1: selecting invalid altsetting 0 [ 341.352163][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.400470][ T4235] Bluetooth: hci3: command 0x0409 tx timeout [ 342.191464][ T5563] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 342.405361][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 342.441218][ T6834] usb 4-1: selecting invalid altsetting 0 [ 342.449931][ T6834] usb 4-1: 0:0: usb_set_interface failed (-22) [ 342.456356][ T6834] usb 4-1: selecting invalid altsetting 0 [ 342.462602][ T6834] usb 4-1: 0:0: usb_set_interface failed (-22) [ 342.469008][ T6834] usb 4-1: selecting invalid altsetting 0 [ 342.469369][ T5563] usb 5-1: Using ep0 maxpacket: 32 [ 342.475143][ T6834] usb 4-1: 0:0: usb_set_interface failed (-22) [ 342.487540][ T6491] usb 4-1: USB disconnect, device number 13 [ 342.718136][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.772378][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.777027][ T4297] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 342.781258][ T6835] device bridge_slave_0 entered promiscuous mode [ 342.810350][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.831111][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.865105][ T6835] device bridge_slave_1 entered promiscuous mode [ 343.303687][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.403991][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.528137][ T6835] team0: Port device team_slave_0 added [ 343.563993][ T6835] team0: Port device team_slave_1 added [ 343.623934][ T4311] Bluetooth: hci3: command 0x041b tx timeout [ 343.634751][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.642104][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.738065][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.761911][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.769160][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.797195][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.857402][ T6835] device hsr_slave_0 entered promiscuous mode [ 343.873438][ T6835] device hsr_slave_1 entered promiscuous mode [ 343.883722][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.900296][ T6835] Cannot create hsr debugfs directory [ 343.934156][ T6491] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 343.976841][ T4297] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 343.989911][ T4297] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 344.002321][ T4297] usb 1-1: config 0 interface 0 has no altsetting 0 [ 344.075599][ T9] bridge0: port 3(gretap0) entered disabled state [ 344.086180][ T9] device gretap0 left promiscuous mode [ 344.092308][ T9] bridge0: port 3(gretap0) entered disabled state [ 344.158026][ T6835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.169292][ T6488] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 344.179293][ T6835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.190949][ T6835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.212793][ T6835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.223062][ T4297] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.234388][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 344.244010][ T4297] usb 1-1: Product: syz [ 344.262797][ T4297] usb 1-1: Manufacturer: syz [ 344.272285][ T4297] usb 1-1: SerialNumber: syz [ 344.301262][ T4297] usb 1-1: config 0 descriptor?? [ 344.351062][ T6491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.366905][ T4297] usb 1-1: selecting invalid altsetting 0 [ 344.382105][ T6491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.394350][ T6491] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.413035][ T6491] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.426512][ T6491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.436802][ T6488] usb 2-1: Using ep0 maxpacket: 32 [ 344.517265][ T6491] usb 4-1: config 0 descriptor?? [ 344.540155][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.543307][ T5563] usb 5-1: unable to get BOS descriptor or descriptor too short [ 344.575866][ T5563] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 344.640326][ T5563] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 344.650281][ T5563] usb 5-1: can't read configurations, error -71 [ 344.729813][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.776134][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.844630][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.931853][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.950337][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.996319][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.003535][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.042705][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 345.538855][ T6865] usb 1-1: selecting invalid altsetting 0 [ 345.545331][ T6865] usb 1-1: 0:0: usb_set_interface failed (-22) [ 345.551826][ T6865] usb 1-1: selecting invalid altsetting 0 [ 345.558622][ T6865] usb 1-1: 0:0: usb_set_interface failed (-22) [ 345.615027][ T6863] usb 1-1: selecting invalid altsetting 0 [ 345.637312][ T6863] usb 1-1: 0:0: usb_set_interface failed (-22) [ 345.639546][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 345.647116][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.661290][ T6863] usb 1-1: selecting invalid altsetting 0 [ 345.666284][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.674515][ T6863] usb 1-1: 0:0: usb_set_interface failed (-22) [ 345.685986][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.694637][ T6863] usb 1-1: selecting invalid altsetting 0 [ 345.700710][ T6863] usb 1-1: 0:0: usb_set_interface failed (-22) [ 345.709069][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.716231][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.725867][ T4311] usb 1-1: USB disconnect, device number 16 [ 345.765265][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.843503][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.848561][ T5138] Bluetooth: hci3: command 0x040f tx timeout [ 345.863759][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.878114][ T9] device hsr_slave_0 left promiscuous mode [ 345.880838][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.891944][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.899605][ T9] device hsr_slave_1 left promiscuous mode [ 345.899953][ T6491] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 345.914019][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.914429][ T6491] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 345.927665][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.949550][ T6491] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 345.950990][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.966938][ T6491] usb 4-1: USB disconnect, device number 14 [ 345.989218][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.012201][ T9] device bridge_slave_1 left promiscuous mode [ 346.018974][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.028650][ T9] device bridge_slave_0 left promiscuous mode [ 346.037293][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.076076][ T6921] fido_id[6921]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 346.092958][ T9] device veth1_macvtap left promiscuous mode [ 346.107838][ T9] device veth0_macvtap left promiscuous mode [ 346.122818][ T9] device veth1_vlan left promiscuous mode [ 346.131576][ T9] device veth0_vlan left promiscuous mode [ 346.327628][ T9] team0 (unregistering): Port device team_slave_1 removed [ 346.345473][ T9] team0 (unregistering): Port device team_slave_0 removed [ 346.366333][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.384264][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.595604][ T9] bond0 (unregistering): Released all slaves [ 346.852560][ T6488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.863525][ T6488] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 347.049789][ T6488] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 347.130527][ T6488] usb 2-1: can't read configurations, error -71 [ 347.193691][ T6924] nvme_fabrics: missing parameter 'transport=%s' [ 347.203001][ T6924] nvme_fabrics: missing parameter 'nqn=%s' [ 347.453951][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.561059][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 347.638400][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 347.672440][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 347.776236][ T6488] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 347.824652][ T6835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.166857][ T6835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.168244][ T4311] Bluetooth: hci3: command 0x0419 tx timeout [ 348.200941][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.225069][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.266747][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.316106][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.329151][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.340922][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.363305][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.520826][ T6488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.677401][ T6488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.687424][ T6488] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.700735][ T6488] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.710130][ T6488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.125592][ T6488] usb 2-1: config 0 descriptor?? [ 350.743844][ T4235] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 350.829153][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.839787][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.169854][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.321106][ T6488] usbhid 2-1:0.0: can't add hid device: -71 [ 351.327428][ T6488] usbhid: probe of 2-1:0.0 failed with error -71 [ 351.440196][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.482589][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.527894][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.577997][ T6488] usb 2-1: USB disconnect, device number 24 [ 351.633302][ T4235] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.643016][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.684174][ T4235] usb 4-1: config 0 descriptor?? [ 353.030629][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.062524][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.075621][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.088062][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.162683][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.170355][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.182620][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.223870][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.299479][ T6835] device veth0_vlan entered promiscuous mode [ 353.306266][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.330376][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.362755][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.381040][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.418679][ T4235] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 353.426765][ T4235] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 353.564675][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.637'. [ 353.594613][ T4235] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 354.010924][ T6835] device veth1_vlan entered promiscuous mode [ 354.227956][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 354.669163][ T4235] usb 4-1: USB disconnect, device number 15 [ 354.767381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.789495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.918736][ T6835] device veth0_macvtap entered promiscuous mode [ 354.964894][ T6835] device veth1_macvtap entered promiscuous mode [ 355.205685][ T7027] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 355.327250][ T5138] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 355.456286][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 355.499986][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 356.234843][ T7014] fido_id[7014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 356.271829][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 356.295297][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.342565][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.386818][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.463275][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.502106][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.537085][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.570385][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.581033][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.593065][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.621315][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.632449][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.643479][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.723550][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.733735][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.767456][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.800054][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.838447][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.858796][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.875408][ T5138] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.895274][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.909627][ T5138] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.927142][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 356.946226][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.954782][ T5138] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.969014][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.977635][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.994433][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.020149][ T5138] usb 1-1: config 0 descriptor?? [ 357.046762][ T6835] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.072083][ T6835] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.107536][ T6835] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.167612][ T6835] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.405095][ T4235] Bluetooth: hci5: command 0x1003 tx timeout [ 357.411455][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 357.442674][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.486569][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.491954][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.506644][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.523892][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 357.544243][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 357.653116][ T5138] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 357.710141][ T5138] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 358.841149][ T7043] nvme_fabrics: missing parameter 'transport=%s' [ 359.007678][ T7043] nvme_fabrics: missing parameter 'nqn=%s' [ 359.154942][ T5138] usb 1-1: USB disconnect, device number 17 [ 359.910684][ T4310] Bluetooth: hci5: command 0x1001 tx timeout [ 359.921821][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 360.663061][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 361.359650][ T6488] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 361.818429][ T6488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.866031][ T6488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.106547][ T4311] Bluetooth: hci5: command 0x1009 tx timeout [ 362.279617][ T6488] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.292719][ T6488] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.301948][ T6488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.312721][ T6488] usb 5-1: config 0 descriptor?? [ 362.771918][ T5138] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 362.879939][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 362.930864][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 362.953445][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 362.961130][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 362.969008][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 362.986892][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 363.002233][ T6488] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 363.010920][ T6488] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 363.032708][ T6488] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 363.170936][ T6488] usb 5-1: USB disconnect, device number 22 [ 363.250551][ T7112] fido_id[7112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 363.279189][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.328319][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.340779][ T5138] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.358112][ T5138] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.372400][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.408088][ T5138] usb 2-1: config 0 descriptor?? [ 364.024291][ T5138] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 364.061738][ T5138] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 366.943150][ T7184] loop0: detected capacity change from 0 to 8 [ 367.974220][ T7189] nvme_fabrics: missing parameter 'transport=%s' [ 367.981684][ T7181] SQUASHFS error: zlib decompression failed, data probably corrupt [ 367.990109][ T7181] SQUASHFS error: Failed to read block 0x4de: -5 [ 368.038075][ T26] audit: type=1800 audit(1764238799.105:140): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.663" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 368.057829][ T7101] usb 2-1: string descriptor 0 read error: -2 [ 368.085250][ T7189] nvme_fabrics: missing parameter 'nqn=%s' [ 368.244517][ T6488] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 370.363370][ T7209] nvme_fabrics: missing parameter 'transport=%s' [ 370.468348][ T7209] nvme_fabrics: missing parameter 'nqn=%s' [ 372.885745][ T6481] usb 2-1: USB disconnect, device number 25 [ 374.404450][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079539c00: rx timeout, send abort [ 374.492267][ T4201] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 374.962248][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079539c00: abort rx timeout. Force session deactivation [ 376.481155][ T4201] usb 1-1: device descriptor read/all, error -71 [ 376.558072][ T7271] fuse: Invalid rootmode [ 376.992559][ T7280] Zero length message leads to an empty skb [ 377.175611][ T7279] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 378.862716][ T7294] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 378.950395][ T7293] trusted_key: encrypted_key: insufficient parameters specified [ 379.171451][ T5347] Bluetooth: hci6: Frame reassembly failed (-84) [ 379.854433][ T6499] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 381.411597][ T4201] Bluetooth: hci5: command 0x1003 tx timeout [ 381.548405][ T5138] Bluetooth: hci6: command 0x1003 tx timeout [ 381.586344][ T4185] Bluetooth: hci6: sending frame failed (-49) [ 381.875112][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 384.500423][ T6488] Bluetooth: hci5: command 0x1001 tx timeout [ 384.527327][ T5138] Bluetooth: hci6: command 0x1001 tx timeout [ 384.534023][ T4185] Bluetooth: hci6: sending frame failed (-49) [ 384.779976][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 385.883950][ T7339] netlink: 'syz.4.694': attribute type 13 has an invalid length. [ 385.928848][ T7348] fuse: Invalid rootmode [ 386.178383][ T6488] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 386.729058][ T5138] Bluetooth: hci6: command 0x1009 tx timeout [ 387.187233][ T4297] Bluetooth: hci5: command 0x1009 tx timeout [ 387.519741][ T6488] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 387.589055][ T6488] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 387.601349][ T6488] usb 2-1: config 0 interface 0 has no altsetting 0 [ 388.430279][ T6488] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.493456][ T6488] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 388.501909][ T6488] usb 2-1: Product: syz [ 388.506700][ T6488] usb 2-1: Manufacturer: syz [ 388.512082][ T6488] usb 2-1: SerialNumber: syz [ 388.519296][ T6488] usb 2-1: config 0 descriptor?? [ 388.613035][ T6488] usb 2-1: selecting invalid altsetting 0 [ 388.889232][ T7392] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 391.567709][ C1] vcan0: j1939_tp_txtimer: 0xffff88805fa2e000: tx aborted with unknown reason: -2 [ 391.609756][ T7336] usb 2-1: selecting invalid altsetting 0 [ 391.649073][ T7336] usb 2-1: 0:0: usb_set_interface failed (-22) [ 392.709785][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fa2e000: abort rx timeout. Force session deactivation [ 392.730134][ T6488] Bluetooth: hci5: command 0x1003 tx timeout [ 392.737573][ T7336] usb 2-1: selecting invalid altsetting 0 [ 392.779309][ T7336] usb 2-1: 0:0: usb_set_interface failed (-22) [ 392.785745][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 392.828319][ T7336] usb 2-1: selecting invalid altsetting 0 [ 392.864765][ T7336] usb 2-1: 0:0: usb_set_interface failed (-22) [ 393.010413][ T5138] usb 2-1: USB disconnect, device number 26 [ 394.416835][ T7422] netlink: 'syz.1.708': attribute type 13 has an invalid length. [ 394.660849][ T4310] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 395.100479][ T5138] Bluetooth: hci5: command 0x1001 tx timeout [ 395.133639][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 395.148111][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 396.307268][ T4310] usb 5-1: device descriptor read/all, error -71 [ 397.254512][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.357595][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.632831][ T6488] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 397.808634][ T7460] nvme_fabrics: missing parameter 'transport=%s' [ 397.811126][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 397.862532][ T7460] nvme_fabrics: missing parameter 'nqn=%s' [ 398.099028][ T6488] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 398.121860][ T6488] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 400.008430][ T6488] usb 6-1: config 0 interface 0 has no altsetting 0 [ 400.182760][ T7483] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 400.191374][ T7481] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 400.872136][ T6488] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 400.882226][ T6488] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 400.893236][ T6488] usb 6-1: config 0 descriptor?? [ 400.915002][ T6488] usb 6-1: can't set config #0, error -71 [ 400.932414][ T6488] usb 6-1: USB disconnect, device number 2 [ 401.587947][ T7499] netlink: 'syz.1.721': attribute type 13 has an invalid length. [ 402.979141][ T4201] Bluetooth: hci7: command 0x1003 tx timeout [ 402.985451][ T4181] Bluetooth: hci7: sending frame failed (-49) [ 402.999728][ T4201] Bluetooth: hci6: command 0x1003 tx timeout [ 403.014337][ T4181] Bluetooth: hci6: sending frame failed (-49) [ 405.201947][ T6481] Bluetooth: hci6: command 0x1001 tx timeout [ 405.214748][ T4181] Bluetooth: hci6: sending frame failed (-49) [ 405.221520][ T6481] Bluetooth: hci7: command 0x1001 tx timeout [ 405.264724][ T4181] Bluetooth: hci7: sending frame failed (-49) [ 405.575955][ T4310] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 406.025120][ T4310] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 406.042493][ T4310] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 406.078495][ T4310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 406.263102][ T4310] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.273276][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 406.281853][ T4310] usb 2-1: Product: syz [ 406.286224][ T4310] usb 2-1: Manufacturer: syz [ 406.291120][ T4310] usb 2-1: SerialNumber: syz [ 406.316679][ T4310] usb 2-1: config 0 descriptor?? [ 406.370049][ T4310] usb 2-1: selecting invalid altsetting 0 [ 407.093142][ T7608] usb 2-1: selecting invalid altsetting 0 [ 407.123395][ T7608] usb 2-1: 0:0: usb_set_interface failed (-22) [ 407.140775][ T7608] usb 2-1: selecting invalid altsetting 0 [ 407.165067][ T7608] usb 2-1: 0:0: usb_set_interface failed (-22) [ 407.435157][ T6488] Bluetooth: hci7: command 0x1009 tx timeout [ 407.442456][ T6488] Bluetooth: hci6: command 0x1009 tx timeout [ 408.655143][ T7622] netlink: 'syz.5.739': attribute type 13 has an invalid length. [ 409.252376][ T7605] usb 2-1: selecting invalid altsetting 0 [ 409.264168][ T7605] usb 2-1: 0:0: usb_set_interface failed (-22) [ 409.270519][ T7605] usb 2-1: selecting invalid altsetting 0 [ 409.285594][ T7605] usb 2-1: 0:0: usb_set_interface failed (-22) [ 409.292147][ T7605] usb 2-1: selecting invalid altsetting 0 [ 409.309592][ T7605] usb 2-1: 0:0: usb_set_interface failed (-22) [ 409.317186][ T4310] usb 2-1: USB disconnect, device number 27 [ 416.190825][ T7654] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 416.214077][ T7658] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 418.644504][ T7681] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 419.017517][ T9] Bluetooth: hci7: Frame reassembly failed (-84) [ 419.185280][ T9] Bluetooth: hci7: Frame reassembly failed (-84) [ 419.227239][ T6481] Bluetooth: hci5: command 0x1003 tx timeout [ 419.245069][ T6481] Bluetooth: hci6: command 0x1003 tx timeout [ 419.270770][ T7683] Bluetooth: hci5: sending frame failed (-49) [ 419.280327][ T7683] Bluetooth: hci6: sending frame failed (-49) [ 421.214783][ T4243] Bluetooth: hci7: command 0x1003 tx timeout [ 421.281296][ T7684] Bluetooth: hci7: sending frame failed (-49) [ 421.473798][ T4311] Bluetooth: hci6: command 0x1001 tx timeout [ 421.761063][ T4311] Bluetooth: hci5: command 0x1001 tx timeout [ 421.768721][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 421.774923][ T7684] Bluetooth: hci6: sending frame failed (-49) [ 423.275574][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b7b5000: rx timeout, send abort [ 424.184460][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b7b5000: abort rx timeout. Force session deactivation [ 424.196513][ T6488] Bluetooth: hci7: command 0x1001 tx timeout [ 424.205315][ T4181] Bluetooth: hci7: sending frame failed (-49) [ 424.211736][ T6488] Bluetooth: hci5: command 0x1009 tx timeout [ 424.218655][ T6488] Bluetooth: hci6: command 0x1009 tx timeout [ 424.613040][ T6488] hid-generic FFFF:0008:0003.0012: item fetching failed at offset 0/2 [ 424.623250][ T6488] hid-generic: probe of FFFF:0008:0003.0012 failed with error -22 [ 424.995700][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f678000: rx timeout, send abort [ 425.555219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f678000: abort rx timeout. Force session deactivation [ 426.016170][ T7712] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 426.259216][ T4567] Bluetooth: hci8: Frame reassembly failed (-84) [ 426.270565][ T4567] Bluetooth: hci8: Frame reassembly failed (-84) [ 426.854705][ T4297] Bluetooth: hci7: command 0x1009 tx timeout [ 428.389738][ T5571] Bluetooth: hci8: command 0x1003 tx timeout [ 428.396273][ T4185] Bluetooth: hci8: sending frame failed (-49) [ 430.602633][ T5571] Bluetooth: hci8: command 0x1001 tx timeout [ 430.608813][ T4199] Bluetooth: hci8: sending frame failed (-49) [ 432.314183][ T7750] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 432.329325][ T4274] Bluetooth: hci5: Frame reassembly failed (-84) [ 432.834475][ T5571] Bluetooth: hci8: command 0x1009 tx timeout [ 435.356693][ T7753] nvme_fabrics: missing parameter 'transport=%s' [ 435.455286][ T4243] Bluetooth: hci5: command 0x1003 tx timeout [ 435.462198][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 435.470072][ T7753] nvme_fabrics: missing parameter 'nqn=%s' [ 436.706395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076538c00: rx timeout, send abort [ 437.249322][ C0] vcan0: j1939_tp_rxtimer: 0xffff888076538c00: abort rx timeout. Force session deactivation [ 437.400046][ T7766] fuse: Unknown parameter 'user_i00000000000000000000' [ 437.626634][ T5571] Bluetooth: hci5: command 0x1001 tx timeout [ 437.643279][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 440.031302][ T5571] Bluetooth: hci5: command 0x1009 tx timeout [ 441.391551][ T7814] fuse: Unknown parameter 'user_id00000000000000000000' [ 441.456385][ T7816] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 444.037365][ T4235] Bluetooth: hci6: command 0x1003 tx timeout [ 444.051707][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 444.362400][ T7847] trusted_key: encrypted_key: insufficient parameters specified [ 445.227598][ T4297] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 445.558971][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 445.959331][ T7859] bridge0: port 3(gretap0) entered blocking state [ 445.966291][ T7859] bridge0: port 3(gretap0) entered disabled state [ 445.988966][ T7859] device gretap0 entered promiscuous mode [ 445.998631][ T7859] bridge0: port 3(gretap0) entered blocking state [ 446.005189][ T7859] bridge0: port 3(gretap0) entered forwarding state [ 446.327853][ T5138] Bluetooth: hci6: command 0x1001 tx timeout [ 446.385733][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 446.826590][ T7864] fuse: Unknown parameter 'user_id00000000000000000000' [ 447.056915][ T4297] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.065080][ T4297] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 447.131086][ T4297] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 447.146363][ T4297] usb 5-1: can't read configurations, error -71 [ 447.237820][ T6481] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 447.772226][ T6481] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 447.895861][ T6481] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 448.028869][ T7876] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 448.047997][ T6481] usb 4-1: config 0 interface 0 has no altsetting 0 [ 448.223445][ T6481] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.246250][ T6481] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 448.271126][ T6481] usb 4-1: Product: syz [ 448.287321][ T6481] usb 4-1: Manufacturer: syz [ 448.303046][ T6481] usb 4-1: SerialNumber: syz [ 448.315917][ T6481] usb 4-1: config 0 descriptor?? [ 448.376154][ T6481] usb 4-1: selecting invalid altsetting 0 [ 448.573635][ T4297] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 448.573717][ T5571] Bluetooth: hci6: command 0x1009 tx timeout [ 448.980059][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.001159][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.022165][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.044169][ T4297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.072412][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.253356][ T4297] usb 5-1: config 0 descriptor?? [ 449.341495][ T7892] usb 4-1: selecting invalid altsetting 0 [ 449.372936][ T7892] usb 4-1: 0:0: usb_set_interface failed (-22) [ 449.403137][ T7892] usb 4-1: selecting invalid altsetting 0 [ 449.427392][ T7892] usb 4-1: 0:0: usb_set_interface failed (-22) [ 449.795076][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 449.809306][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 449.828941][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 449.841617][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 449.853805][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 449.864578][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 449.876568][ T4297] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 450.398887][ T4297] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 450.751987][ T4297] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 450.784531][ T4297] usb 5-1: USB disconnect, device number 27 [ 451.023595][ T7900] fido_id[7900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 451.046178][ T7903] fuse: Unknown parameter 'user_id00000000000000000000' [ 451.440046][ T7907] trusted_key: encrypted_key: insufficient parameters specified [ 451.770369][ T5571] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 452.091463][ T5571] usb 6-1: Using ep0 maxpacket: 32 [ 452.285517][ T7888] usb 4-1: selecting invalid altsetting 0 [ 452.291690][ T7888] usb 4-1: 0:0: usb_set_interface failed (-22) [ 452.303998][ T7888] usb 4-1: selecting invalid altsetting 0 [ 452.313146][ T7888] usb 4-1: 0:0: usb_set_interface failed (-22) [ 452.337920][ T7888] usb 4-1: selecting invalid altsetting 0 [ 452.360549][ T7888] usb 4-1: 0:0: usb_set_interface failed (-22) [ 452.387334][ T4297] usb 4-1: USB disconnect, device number 17 [ 454.060821][ T7935] fuse: Bad value for 'fd' [ 455.832565][ T4297] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 455.841630][ T4567] Bluetooth: hci5: Frame reassembly failed (-84) [ 455.849838][ T5571] usb 6-1: unable to get BOS descriptor or descriptor too short [ 455.858476][ T7943] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 455.869897][ T5571] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 455.939540][ T5571] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 455.948144][ T5571] usb 6-1: can't read configurations, error -71 [ 456.328213][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.343199][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.365725][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.394046][ T4297] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.409571][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.463984][ T4297] usb 2-1: config 0 descriptor?? [ 456.989124][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.017452][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.029371][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.052409][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.071021][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.095284][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.102868][ T4297] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 457.119531][ T4297] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 457.133318][ T4297] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 457.299224][ T4311] usb 2-1: USB disconnect, device number 28 [ 457.320238][ T7964] fido_id[7964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:047F:FFFF.0014/report_descriptor': No such device [ 457.580446][ T5571] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 457.783772][ T7971] fuse: Bad value for 'fd' [ 457.971009][ T4243] Bluetooth: hci5: command 0x1003 tx timeout [ 457.977454][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 458.048577][ T5571] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 458.060310][ T5571] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 458.071891][ T5571] usb 6-1: config 0 interface 0 has no altsetting 0 [ 458.292229][ T5571] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 458.301712][ T5571] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 458.337622][ T5571] usb 6-1: Product: syz [ 458.354485][ T5571] usb 6-1: Manufacturer: syz [ 458.373914][ T5571] usb 6-1: SerialNumber: syz [ 458.420246][ T5571] usb 6-1: config 0 descriptor?? [ 458.489638][ T7979] trusted_key: encrypted_key: insufficient parameters specified [ 458.500764][ T5571] usb 6-1: selecting invalid altsetting 0 [ 458.844897][ T4201] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 459.135890][ T4201] usb 1-1: Using ep0 maxpacket: 32 [ 459.550081][ T7986] usb 6-1: selecting invalid altsetting 0 [ 459.574210][ T7986] usb 6-1: 0:0: usb_set_interface failed (-22) [ 459.580685][ T7986] usb 6-1: selecting invalid altsetting 0 [ 459.684463][ T7986] usb 6-1: 0:0: usb_set_interface failed (-22) [ 460.205142][ T5571] Bluetooth: hci5: command 0x1001 tx timeout [ 460.214674][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 460.909575][ T7994] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 460.936335][ T7994] CIFS mount error: No usable UNC path provided in device string! [ 460.936335][ T7994] [ 460.946942][ T7994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 461.749850][ T4201] usb 1-1: unable to get BOS descriptor or descriptor too short [ 461.758849][ T4201] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 461.851343][ T4201] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 461.942198][ T4201] usb 1-1: can't read configurations, error -71 [ 462.421851][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.433836][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.730396][ T4310] Bluetooth: hci5: command 0x1009 tx timeout [ 462.938361][ T8009] fuse: Bad value for 'fd' [ 463.132526][ T7982] usb 6-1: selecting invalid altsetting 0 [ 463.186184][ T7982] usb 6-1: 0:0: usb_set_interface failed (-22) [ 463.195125][ T7982] usb 6-1: selecting invalid altsetting 0 [ 463.206506][ T7982] usb 6-1: 0:0: usb_set_interface failed (-22) [ 463.216947][ T7982] usb 6-1: selecting invalid altsetting 0 [ 463.228156][ T7982] usb 6-1: 0:0: usb_set_interface failed (-22) [ 463.236781][ T4310] usb 6-1: USB disconnect, device number 5 [ 463.347928][ T4235] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 463.743964][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.841138][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.000509][ T4235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 464.167929][ T4235] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 464.179193][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.194688][ T4235] usb 4-1: config 0 descriptor?? [ 464.668788][ T8028] trusted_key: encrypted_key: insufficient parameters specified [ 464.713920][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 464.751368][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 464.807482][ T8023] nvme_fabrics: missing parameter 'transport=%s' [ 464.814815][ T8023] nvme_fabrics: missing parameter 'nqn=%s' [ 464.828329][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 464.865762][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 464.903138][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 464.957069][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 464.994772][ T4235] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 465.041755][ T4235] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 465.092471][ T4235] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 465.137592][ T4235] usb 4-1: USB disconnect, device number 18 [ 465.313262][ T8031] fido_id[8031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 465.430489][ T5571] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 467.335528][ T5571] usb 2-1: Using ep0 maxpacket: 32 [ 468.570644][ T5571] usb 2-1: unable to get BOS descriptor or descriptor too short [ 468.579648][ T5571] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 468.602689][ T8047] fuse: Unknown parameter '0x0000000000000003' [ 468.926968][ T5571] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 469.165311][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec4a400: rx timeout, send abort [ 469.693172][ T5571] usb 2-1: can't read configurations, error -71 [ 469.708299][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec4a400: abort rx timeout. Force session deactivation [ 473.059322][ T4337] Bluetooth: hci5: Frame reassembly failed (-84) [ 473.077370][ T8076] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 475.372434][ T5570] Bluetooth: hci5: command 0x1003 tx timeout [ 475.378928][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 475.428611][ T8101] fuse: Unknown parameter '0x0000000000000003' [ 475.589146][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 477.727335][ T8110] nvme_fabrics: missing parameter 'transport=%s' [ 477.735685][ T5138] Bluetooth: hci5: command 0x1001 tx timeout [ 477.754525][ T8110] nvme_fabrics: missing parameter 'nqn=%s' [ 478.157705][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 479.252053][ T8137] fuse: Unknown parameter '0x0000000000000003' [ 479.929344][ T4201] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 480.207646][ T4201] usb 1-1: Using ep0 maxpacket: 32 [ 480.335695][ T4201] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 480.364301][ T4201] usb 1-1: config 0 has no interface number 0 [ 480.402721][ T4201] usb 1-1: config 0 interface 12 has no altsetting 0 [ 480.525736][ T5563] Bluetooth: hci5: command 0x1009 tx timeout [ 480.624716][ T4201] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 480.666956][ T4201] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.697266][ T4201] usb 1-1: Product: syz [ 480.707369][ T4201] usb 1-1: Manufacturer: syz [ 480.716845][ T4201] usb 1-1: SerialNumber: syz [ 480.750516][ T4201] usb 1-1: config 0 descriptor?? [ 480.983651][ T4201] f81534 1-1:0.12: required endpoints missing [ 480.999597][ T8151] loop3: detected capacity change from 0 to 16 [ 481.028325][ T8151] erofs: (device loop3): mounted with root inode @ nid 36. [ 481.149472][ T5138] usb 1-1: USB disconnect, device number 22 [ 481.388351][ T5563] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 481.520680][ T8156] attempt to access beyond end of device [ 481.520680][ T8156] loop3: rw=0, want=40, limit=16 [ 481.908990][ T8156] attempt to access beyond end of device [ 481.908990][ T8156] loop3: rw=524288, want=48, limit=16 [ 481.922448][ T8156] attempt to access beyond end of device [ 481.922448][ T8156] loop3: rw=524288, want=40, limit=16 [ 482.553955][ T5563] usb 2-1: device descriptor read/64, error -71 [ 482.847657][ T5563] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 483.040068][ T5138] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 483.072363][ T5563] usb 2-1: device descriptor read/64, error -71 [ 483.200530][ T5563] usb usb2-port1: attempt power cycle [ 483.626057][ T8175] fuse: Unknown parameter '0x0000000000000003' [ 483.649416][ T5563] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 483.688293][ T5138] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 483.698364][ T5138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.707158][ T5138] usb 4-1: Product: syz [ 483.712025][ T5138] usb 4-1: Manufacturer: syz [ 483.717070][ T5138] usb 4-1: SerialNumber: syz [ 483.733857][ T5138] usb 4-1: config 0 descriptor?? [ 483.756475][ T5563] usb 2-1: device descriptor read/8, error -71 [ 484.077307][ T5138] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.355747][ T8187] netlink: 'syz.0.898': attribute type 13 has an invalid length. [ 484.507744][ T8189] CIFS mount error: No usable UNC path provided in device string! [ 484.507744][ T8189] [ 484.518598][ T8189] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 485.070426][ T8199] loop4: detected capacity change from 0 to 16 [ 485.182241][ T8199] erofs: (device loop4): mounted with root inode @ nid 36. [ 485.596853][ T8207] attempt to access beyond end of device [ 485.596853][ T8207] loop4: rw=0, want=40, limit=16 [ 485.635460][ T8207] attempt to access beyond end of device [ 485.635460][ T8207] loop4: rw=524288, want=48, limit=16 [ 485.648319][ T8207] attempt to access beyond end of device [ 485.648319][ T8207] loop4: rw=524288, want=40, limit=16 [ 486.783539][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 486.795222][ T4181] CPU: 1 PID: 4181 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 486.802861][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 486.813141][ T4181] Workqueue: hci0 hci_rx_work [ 486.817865][ T4181] Call Trace: [ 486.821167][ T4181] [ 486.824126][ T4181] dump_stack_lvl+0x168/0x230 [ 486.828844][ T4181] ? show_regs_print_info+0x20/0x20 [ 486.834171][ T4181] ? load_image+0x3b0/0x3b0 [ 486.838906][ T4181] sysfs_create_dir_ns+0x252/0x280 [ 486.844051][ T4181] ? sysfs_warn_dup+0xa0/0xa0 [ 486.848776][ T4181] kobject_add_internal+0x662/0xd00 [ 486.854108][ T4181] kobject_add+0x152/0x210 [ 486.858768][ T4181] ? kobject_init+0x1d0/0x1d0 [ 486.863568][ T4181] ? klist_children_get+0x50/0x50 [ 486.868789][ T4181] ? get_device_parent+0x121/0x3f0 [ 486.873932][ T4181] device_add+0x483/0xfb0 [ 486.878298][ T4181] hci_conn_add_sysfs+0xd1/0x1e0 [ 486.883349][ T4181] le_conn_complete_evt+0xcbc/0x1590 [ 486.888752][ T4181] ? cs_le_create_conn+0x5e0/0x5e0 [ 486.894042][ T4181] ? lockdep_hardirqs_on+0x94/0x140 [ 486.899289][ T4181] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 486.904968][ T4181] hci_le_meta_evt+0x289/0x3b80 [ 486.909945][ T4181] ? hci_event_packet+0x36d/0x12f0 [ 486.915172][ T4181] ? hci_event_packet+0x2e2/0x12f0 [ 486.920294][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 486.925457][ T4181] ? lock_chain_count+0x20/0x20 [ 486.930330][ T4181] ? hci_remote_host_features_evt+0x280/0x280 [ 486.936401][ T4181] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 486.942047][ T4181] ? mutex_unlock+0x10/0x10 [ 486.946561][ T4181] ? skb_pull+0x3a/0x130 [ 486.950815][ T4181] hci_event_packet+0xe05/0x12f0 [ 486.955980][ T4181] ? lockdep_hardirqs_on+0x94/0x140 [ 486.961384][ T4181] ? rcu_lock_release+0x20/0x20 [ 486.966245][ T4181] ? hci_send_to_monitor+0x9c/0x4a0 [ 486.971447][ T4181] hci_rx_work+0x255/0xa10 [ 486.975880][ T4181] process_one_work+0x863/0x1000 [ 486.980835][ T4181] ? worker_detach_from_pool+0x240/0x240 [ 486.986471][ T4181] ? lockdep_hardirqs_off+0x70/0x100 [ 486.991764][ T4181] ? _raw_spin_lock_irq+0xab/0xe0 [ 486.996790][ T4181] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 487.002263][ T4181] ? wq_worker_running+0x97/0x170 [ 487.007294][ T4181] worker_thread+0xaa8/0x12a0 [ 487.011999][ T4181] kthread+0x436/0x520 [ 487.016159][ T4181] ? rcu_lock_release+0x20/0x20 [ 487.021012][ T4181] ? kthread_blkcg+0xd0/0xd0 [ 487.025605][ T4181] ret_from_fork+0x1f/0x30 [ 487.030043][ T4181] [ 487.124061][ T4181] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 487.138238][ T4181] Bluetooth: hci0: failed to register connection device [ 487.366339][ T8216] fuse: Unknown parameter '0x0000000000000003' [ 488.022023][ T5138] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 488.056753][ T5138] usb 4-1: USB disconnect, device number 19 [ 488.434637][ T8237] syz.0.915 (8237): attempted to duplicate a private mapping with mremap. This is not supported. [ 488.770621][ T5138] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 488.797122][ T6491] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 489.200869][ T8244] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 489.315644][ T5138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.327206][ T5138] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 489.338790][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.396527][ T5138] usb 4-1: config 0 descriptor?? [ 489.473908][ T4274] Bluetooth: hci5: Frame reassembly failed (-84) [ 489.494426][ T4274] Bluetooth: hci5: Frame reassembly failed (-84) [ 489.544005][ T5138] pwc: Askey VC010 type 2 USB webcam detected. [ 490.054769][ T6491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.077188][ T5138] pwc: recv_control_msg error -32 req 02 val 2b00 [ 490.079488][ T6491] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 490.119742][ T6491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.139242][ T5138] pwc: recv_control_msg error -32 req 02 val 2700 [ 490.140818][ T6491] usb 1-1: config 0 descriptor?? [ 490.159005][ T8252] fuse: Unknown parameter '0xffffffffffffffff' [ 490.192188][ T5138] pwc: recv_control_msg error -32 req 02 val 2c00 [ 490.199708][ T6491] pwc: Askey VC010 type 2 USB webcam detected. [ 490.245623][ T5138] pwc: recv_control_msg error -32 req 04 val 1000 [ 490.439548][ T5138] pwc: recv_control_msg error -32 req 04 val 1300 [ 490.491472][ T5138] pwc: recv_control_msg error -32 req 04 val 1400 [ 490.510047][ T8257] trusted_key: encrypted_key: insufficient parameters specified [ 490.534259][ T5138] pwc: recv_control_msg error -32 req 02 val 2000 [ 490.587680][ T5138] pwc: recv_control_msg error -32 req 02 val 2100 [ 490.651962][ T5138] pwc: recv_control_msg error -32 req 04 val 1500 [ 490.726738][ T6491] pwc: recv_control_msg error -32 req 02 val 2b00 [ 490.769428][ T6491] pwc: recv_control_msg error -32 req 02 val 2700 [ 490.812264][ T6491] pwc: recv_control_msg error -32 req 02 val 2c00 [ 490.854927][ T6491] pwc: recv_control_msg error -32 req 04 val 1000 [ 490.908474][ T6491] pwc: recv_control_msg error -32 req 04 val 1300 [ 490.935897][ T5138] pwc: recv_control_msg error -32 req 02 val 2400 [ 490.951176][ T6491] pwc: recv_control_msg error -32 req 04 val 1400 [ 490.976715][ T8236] netlink: 'syz.0.915': attribute type 39 has an invalid length. [ 490.993929][ T6491] pwc: recv_control_msg error -32 req 02 val 2000 [ 491.004718][ T5138] pwc: recv_control_msg error -32 req 02 val 2600 [ 491.058218][ T5138] pwc: recv_control_msg error -32 req 02 val 2900 [ 491.115075][ T5138] pwc: recv_control_msg error -71 req 02 val 2800 [ 491.155701][ T5138] pwc: recv_control_msg error -71 req 04 val 1100 [ 491.175965][ T5138] pwc: recv_control_msg error -71 req 04 val 1200 [ 491.203237][ T5138] pwc: Registered as video103. [ 491.221536][ T5138] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 491.271957][ T6491] pwc: recv_control_msg error -71 req 02 val 2100 [ 491.293490][ T6491] pwc: recv_control_msg error -71 req 04 val 1500 [ 491.296355][ T5138] usb 4-1: USB disconnect, device number 20 [ 491.314672][ T6491] pwc: recv_control_msg error -71 req 02 val 2500 [ 491.336094][ T6491] pwc: recv_control_msg error -71 req 02 val 2400 [ 491.357447][ T6491] pwc: recv_control_msg error -71 req 02 val 2600 [ 491.389467][ T6491] pwc: recv_control_msg error -71 req 02 val 2900 [ 491.411264][ T6491] pwc: recv_control_msg error -71 req 02 val 2800 [ 491.442979][ T6491] pwc: recv_control_msg error -71 req 04 val 1100 [ 491.464316][ T6491] pwc: recv_control_msg error -71 req 04 val 1200 [ 491.476133][ T6491] pwc: Registered as video103. [ 491.498778][ T6491] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 491.519081][ T6491] usb 1-1: USB disconnect, device number 23 [ 491.611696][ T4235] Bluetooth: hci5: command 0x1003 tx timeout [ 491.624938][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 492.105838][ T4235] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 492.234020][ T6491] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 492.662048][ T4235] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 492.679980][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.710711][ T4235] usb 2-1: Product: syz [ 492.731112][ T4235] usb 2-1: Manufacturer: syz [ 492.748477][ T4235] usb 2-1: SerialNumber: syz [ 492.788040][ T4235] usb 2-1: config 0 descriptor?? [ 493.154125][ T4235] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 493.324439][ T6491] usb 4-1: device descriptor read/64, error -71 [ 493.442158][ T6484] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 493.730753][ T6491] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 493.987581][ T6491] usb 4-1: device descriptor read/64, error -71 [ 494.127378][ T6491] usb usb4-port1: attempt power cycle [ 494.223713][ T6484] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 494.253145][ T6484] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.308302][ T6484] usb 1-1: Product: syz [ 494.332390][ T6484] usb 1-1: Manufacturer: syz [ 494.356790][ T6484] usb 1-1: SerialNumber: syz [ 494.543787][ T5564] Bluetooth: hci5: command 0x1001 tx timeout [ 494.550260][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 494.666804][ T6484] usb 1-1: config 0 descriptor?? [ 494.724971][ T6491] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 494.847441][ T6491] usb 4-1: device descriptor read/8, error -71 [ 494.939011][ T6484] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 495.141918][ T6491] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 495.422255][ T6491] usb 4-1: device not accepting address 24, error -71 [ 495.440399][ T6491] usb usb4-port1: unable to enumerate USB device [ 495.841678][ T8293] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 496.416117][ T8303] CIFS mount error: No usable UNC path provided in device string! [ 496.416117][ T8303] [ 496.426237][ T8303] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 496.713474][ T5564] Bluetooth: hci5: command 0x1009 tx timeout [ 497.173245][ T8307] CIFS mount error: No usable UNC path provided in device string! [ 497.173245][ T8307] [ 497.183726][ T8307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 497.210461][ T4235] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 497.276107][ T4235] usb 2-1: USB disconnect, device number 35 [ 497.455803][ T8312] trusted_key: encrypted_key: insufficient parameters specified [ 498.595077][ T6484] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 498.672121][ T6484] usb 1-1: USB disconnect, device number 24 [ 498.683194][ T8320] fuse: Unknown parameter 'fd0x0000000000000003' [ 498.937202][ T4235] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 499.226246][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 499.264581][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 499.276700][ T4181] CPU: 1 PID: 4181 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 499.284305][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 499.294420][ T4181] Workqueue: hci4 hci_rx_work [ 499.299161][ T4181] Call Trace: [ 499.302593][ T4181] [ 499.305552][ T4181] dump_stack_lvl+0x168/0x230 [ 499.310268][ T4181] ? show_regs_print_info+0x20/0x20 [ 499.315509][ T4181] ? load_image+0x3b0/0x3b0 [ 499.320062][ T4181] sysfs_create_dir_ns+0x252/0x280 [ 499.325214][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 499.330392][ T4181] ? sysfs_warn_dup+0xa0/0xa0 [ 499.335303][ T4181] kobject_add_internal+0x662/0xd00 [ 499.340551][ T4181] kobject_add+0x152/0x210 [ 499.345270][ T4181] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 499.350938][ T4181] ? kobject_init+0x1d0/0x1d0 [ 499.355835][ T4181] ? get_device_parent+0x11c/0x3f0 [ 499.361121][ T4181] ? get_device_parent+0x121/0x3f0 [ 499.366847][ T4181] device_add+0x483/0xfb0 [ 499.371328][ T4181] hci_conn_add_sysfs+0xd1/0x1e0 [ 499.376490][ T4181] le_conn_complete_evt+0xcbc/0x1590 [ 499.381920][ T4181] ? cs_le_create_conn+0x5e0/0x5e0 [ 499.387087][ T4181] ? skb_pull+0x2f/0x130 [ 499.391547][ T4181] hci_le_meta_evt+0x289/0x3b80 [ 499.396443][ T4181] ? hci_event_packet+0x36d/0x12f0 [ 499.401590][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 499.406750][ T4181] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 499.412859][ T4181] ? lock_chain_count+0x20/0x20 [ 499.417759][ T4181] ? hci_remote_host_features_evt+0x280/0x280 [ 499.423869][ T4181] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 499.429542][ T4181] ? mutex_unlock+0x10/0x10 [ 499.434314][ T4181] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 499.440217][ T4181] hci_event_packet+0xe05/0x12f0 [ 499.445202][ T4181] ? rcu_lock_release+0x20/0x20 [ 499.450499][ T4181] ? hci_send_to_monitor+0x9c/0x4a0 [ 499.455745][ T4181] hci_rx_work+0x255/0xa10 [ 499.460228][ T4181] process_one_work+0x863/0x1000 [ 499.465267][ T4181] ? worker_detach_from_pool+0x240/0x240 [ 499.471133][ T4181] ? lockdep_hardirqs_off+0x70/0x100 [ 499.476556][ T4181] ? _raw_spin_lock_irq+0xab/0xe0 [ 499.481750][ T4181] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 499.487165][ T4181] ? wq_worker_running+0x97/0x170 [ 499.492399][ T4181] worker_thread+0xaa8/0x12a0 [ 499.497169][ T4181] kthread+0x436/0x520 [ 499.501284][ T4181] ? rcu_lock_release+0x20/0x20 [ 499.506179][ T4181] ? kthread_blkcg+0xd0/0xd0 [ 499.511040][ T4181] ret_from_fork+0x1f/0x30 [ 499.515512][ T4181] [ 499.548737][ T4181] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 499.565743][ T4181] Bluetooth: hci4: failed to register connection device [ 501.236765][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 501.250374][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 501.257259][ T4235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.257963][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.268603][ T4235] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 501.275758][ T4199] Workqueue: hci3 hci_rx_work [ 501.288087][ T4199] Call Trace: [ 501.291481][ T4199] [ 501.294440][ T4199] dump_stack_lvl+0x168/0x230 [ 501.299497][ T4199] ? show_regs_print_info+0x20/0x20 [ 501.304726][ T4199] ? load_image+0x3b0/0x3b0 [ 501.309253][ T4199] sysfs_create_dir_ns+0x252/0x280 [ 501.314379][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 501.319424][ T4199] ? sysfs_warn_dup+0xa0/0xa0 [ 501.324111][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 501.329318][ T4199] ? do_raw_spin_unlock+0x11d/0x230 [ 501.334520][ T4199] kobject_add_internal+0x662/0xd00 [ 501.339877][ T4199] kobject_add+0x152/0x210 [ 501.344310][ T4199] ? kobject_init+0x1d0/0x1d0 [ 501.348992][ T4199] ? klist_children_get+0x50/0x50 [ 501.354013][ T4199] ? get_device_parent+0x121/0x3f0 [ 501.359132][ T4199] device_add+0x483/0xfb0 [ 501.363553][ T4199] hci_conn_add_sysfs+0xd1/0x1e0 [ 501.368587][ T4199] le_conn_complete_evt+0xcbc/0x1590 [ 501.373988][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 501.379282][ T4199] ? __mutex_trylock_common+0x14f/0x250 [ 501.384837][ T4199] hci_le_meta_evt+0x289/0x3b80 [ 501.389701][ T4199] ? hci_event_packet+0x36d/0x12f0 [ 501.394817][ T4199] ? hci_event_packet+0x2e2/0x12f0 [ 501.399942][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 501.405065][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 501.411132][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 501.416766][ T4199] ? mark_lock+0x94/0x320 [ 501.421097][ T4199] ? mutex_unlock+0x10/0x10 [ 501.425602][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 501.431585][ T4199] ? lock_chain_count+0x20/0x20 [ 501.436434][ T4199] ? __rwlock_init+0x140/0x140 [ 501.441198][ T4199] hci_event_packet+0xe05/0x12f0 [ 501.446137][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 501.451344][ T4199] ? rcu_lock_release+0x20/0x20 [ 501.456202][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 501.461434][ T4199] hci_rx_work+0x255/0xa10 [ 501.465954][ T4199] process_one_work+0x863/0x1000 [ 501.470996][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 501.476659][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 501.482021][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 501.487145][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 501.492630][ T4199] ? wq_worker_running+0x97/0x170 [ 501.497945][ T4199] worker_thread+0xaa8/0x12a0 [ 501.502626][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 501.508540][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 501.513757][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 501.518967][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 501.524958][ T4199] kthread+0x436/0x520 [ 501.529117][ T4199] ? rcu_lock_release+0x20/0x20 [ 501.533966][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 501.538559][ T4199] ret_from_fork+0x1f/0x30 [ 501.542992][ T4199] [ 501.566001][ T4199] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.581968][ T4199] Bluetooth: hci3: failed to register connection device [ 501.594574][ T4181] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 501.604882][ T4181] CPU: 1 PID: 4181 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 501.608171][ T8356] fuse: Unknown parameter 'fd0x0000000000000003' [ 501.612459][ T4181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.612510][ T4181] Workqueue: hci1 hci_rx_work [ 501.612540][ T4181] Call Trace: [ 501.612548][ T4181] [ 501.612557][ T4181] dump_stack_lvl+0x168/0x230 [ 501.612585][ T4181] ? show_regs_print_info+0x20/0x20 [ 501.612608][ T4181] ? load_image+0x3b0/0x3b0 [ 501.612642][ T4181] sysfs_create_dir_ns+0x252/0x280 [ 501.659588][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 501.664784][ T4181] ? sysfs_warn_dup+0xa0/0xa0 [ 501.669699][ T4181] kobject_add_internal+0x662/0xd00 [ 501.675080][ T4181] kobject_add+0x152/0x210 [ 501.679538][ T4181] ? kobject_init+0x1d0/0x1d0 [ 501.684246][ T4181] ? klist_children_get+0x50/0x50 [ 501.689412][ T4181] ? get_device_parent+0x121/0x3f0 [ 501.694586][ T4181] device_add+0x483/0xfb0 [ 501.698951][ T4181] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 501.705137][ T4181] hci_conn_add_sysfs+0xd1/0x1e0 [ 501.710199][ T4181] le_conn_complete_evt+0xcbc/0x1590 [ 501.715511][ T4181] ? lock_chain_count+0x20/0x20 [ 501.720502][ T4181] ? cs_le_create_conn+0x5e0/0x5e0 [ 501.725643][ T4181] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 501.731322][ T4181] hci_le_meta_evt+0x289/0x3b80 [ 501.736201][ T4181] ? hci_event_packet+0x36d/0x12f0 [ 501.741335][ T4181] ? hci_event_packet+0x2e2/0x12f0 [ 501.746646][ T4181] ? __lock_acquire+0x7c60/0x7c60 [ 501.751705][ T4181] ? release_firmware_map_entry+0x190/0x190 [ 501.757887][ T4181] ? hci_remote_host_features_evt+0x280/0x280 [ 501.763980][ T4181] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 501.769736][ T4181] ? mutex_unlock+0x10/0x10 [ 501.774261][ T4181] ? preempt_schedule+0xa7/0xb0 [ 501.779137][ T4181] ? schedule_preempt_disabled+0x20/0x20 [ 501.785096][ T4181] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 501.790862][ T4181] hci_event_packet+0xe05/0x12f0 [ 501.795932][ T4181] ? rcu_lock_release+0x20/0x20 [ 501.800828][ T4181] ? hci_send_to_monitor+0x9c/0x4a0 [ 501.806077][ T4181] hci_rx_work+0x255/0xa10 [ 501.810558][ T4181] process_one_work+0x863/0x1000 [ 501.815651][ T4181] ? worker_detach_from_pool+0x240/0x240 [ 501.821314][ T4181] ? lockdep_hardirqs_off+0x70/0x100 [ 501.826648][ T4181] ? _raw_spin_lock_irq+0xab/0xe0 [ 501.831797][ T4181] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 501.837345][ T4181] ? wq_worker_running+0x97/0x170 [ 501.842407][ T4181] worker_thread+0xaa8/0x12a0 [ 501.847144][ T4181] kthread+0x436/0x520 [ 501.851327][ T4181] ? rcu_lock_release+0x20/0x20 [ 501.856204][ T4181] ? kthread_blkcg+0xd0/0xd0 [ 501.856945][ T4199] general protection fault, probably for non-canonical address 0xdffffc0000000024: 0000 [#1] PREEMPT SMP KASAN [ 501.860989][ T4181] ret_from_fork+0x1f/0x30 [ 501.872915][ T4199] KASAN: null-ptr-deref in range [0x0000000000000120-0x0000000000000127] [ 501.877334][ T4181] [ 501.885725][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 501.890279][ T5566] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 501.896418][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 501.909717][ T4235] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 501.914296][ T4199] Workqueue: hci3 hci_rx_work [ 501.926688][ T4199] RIP: 0010:__lock_acquire+0xe8/0x7c60 [ 501.928613][ T4181] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 501.932185][ T4199] Code: 42 0f b6 04 00 84 c0 0f 85 2f 65 00 00 83 3d d2 d0 0d 0c 00 0f 84 a8 27 00 00 83 3d a1 b9 a2 0a 00 74 29 48 89 d8 48 c1 e8 03 <42> 80 3c 00 00 74 12 48 89 df e8 19 34 60 00 49 b8 00 00 00 00 00 [ 501.932205][ T4199] RSP: 0018:ffffc9000307f0a0 EFLAGS: 00010006 [ 501.951675][ T4181] Bluetooth: hci1: failed to register connection device [ 501.965529][ T4199] RAX: 0000000000000024 RBX: 0000000000000120 RCX: 1ffff9200060fe38 [ 501.965551][ T4199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000120 [ 501.965562][ T4199] RBP: ffffc9000307f2f0 R08: dffffc0000000000 R09: 0000000000000000 [ 501.965575][ T4199] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: 0000000000000001 [ 501.965588][ T4199] R13: ffff8880776d9dc0 R14: 0000000000000000 R15: 0000000000000000 [ 501.965600][ T4199] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 501.965617][ T4199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.015827][ T4235] usb 2-1: can't read configurations, error -71 [ 502.019291][ T4199] CR2: 0000001b2f312ff8 CR3: 0000000057353000 CR4: 00000000003506f0 [ 502.019315][ T4199] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 502.019329][ T4199] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 502.065257][ T4199] Call Trace: [ 502.068560][ T4199] [ 502.071518][ T4199] ? verify_lock_unused+0x140/0x140 [ 502.076748][ T4199] ? memset+0x1e/0x40 [ 502.080760][ T4199] ? debug_object_assert_init+0x33/0x2e0 [ 502.086425][ T4199] ? del_timer+0x11a/0x1b0 [ 502.090871][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 502.096635][ T4199] ? mark_lock+0x94/0x320 [ 502.101077][ T4199] lock_acquire+0x197/0x3f0 [ 502.105784][ T4199] ? l2cap_sock_ready_cb+0x41/0x120 [ 502.111121][ T4199] ? lock_chain_count+0x20/0x20 [ 502.116160][ T4199] ? read_lock_is_recursive+0x10/0x10 [ 502.121631][ T4199] ? __cancel_work+0x1f4/0x2d0 [ 502.126495][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 502.131802][ T4199] ? __cancel_work+0x26f/0x2d0 [ 502.136581][ T4199] lock_sock_nested+0x44/0x100 [ 502.141429][ T4199] ? l2cap_sock_ready_cb+0x41/0x120 [ 502.146843][ T4199] l2cap_sock_ready_cb+0x41/0x120 [ 502.152028][ T4199] l2cap_le_start+0x6c0/0x16a0 [ 502.157010][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 502.162228][ T4199] ? l2cap_start_connection+0x5a0/0x5a0 [ 502.167878][ T4199] ? slab_free_freelist_hook+0xea/0x170 [ 502.173545][ T4199] ? kfree+0xef/0x2a0 [ 502.177527][ T4199] l2cap_connect_cfm+0x6d7/0x10d0 [ 502.182647][ T4199] ? l2cap_ertm_resend+0x1070/0x1070 [ 502.188359][ T4199] ? l2cap_ertm_resend+0x1070/0x1070 [ 502.193650][ T4199] le_conn_complete_evt+0xdaf/0x1590 [ 502.199147][ T4199] ? cs_le_create_conn+0x5e0/0x5e0 [ 502.204442][ T4199] ? __mutex_trylock_common+0x14f/0x250 [ 502.209993][ T4199] hci_le_meta_evt+0x289/0x3b80 [ 502.214934][ T4199] ? hci_event_packet+0x36d/0x12f0 [ 502.220232][ T4199] ? hci_event_packet+0x2e2/0x12f0 [ 502.225436][ T4199] ? __lock_acquire+0x7c60/0x7c60 [ 502.230595][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 502.236663][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 502.242307][ T4199] ? mark_lock+0x94/0x320 [ 502.246726][ T4199] ? mutex_unlock+0x10/0x10 [ 502.251234][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 502.257304][ T4199] ? lock_chain_count+0x20/0x20 [ 502.262156][ T4199] ? __rwlock_init+0x140/0x140 [ 502.266926][ T4199] hci_event_packet+0xe05/0x12f0 [ 502.271933][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 502.277226][ T4199] ? rcu_lock_release+0x20/0x20 [ 502.282086][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 502.287287][ T4199] hci_rx_work+0x255/0xa10 [ 502.291710][ T4199] process_one_work+0x863/0x1000 [ 502.296656][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 502.302295][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 502.307589][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 502.312701][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 502.318152][ T4199] ? wq_worker_running+0x97/0x170 [ 502.323203][ T4199] worker_thread+0xaa8/0x12a0 [ 502.327921][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 502.333816][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 502.339454][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 502.344741][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 502.350809][ T4199] kthread+0x436/0x520 [ 502.354879][ T4199] ? rcu_lock_release+0x20/0x20 [ 502.359902][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 502.364682][ T4199] ret_from_fork+0x1f/0x30 [ 502.369283][ T4199] [ 502.372301][ T4199] Modules linked in: [ 502.376205][ T4199] ---[ end trace 8a6735da5eb4ec13 ]--- [ 502.381656][ T4199] RIP: 0010:__lock_acquire+0xe8/0x7c60 [ 502.387126][ T4199] Code: 42 0f b6 04 00 84 c0 0f 85 2f 65 00 00 83 3d d2 d0 0d 0c 00 0f 84 a8 27 00 00 83 3d a1 b9 a2 0a 00 74 29 48 89 d8 48 c1 e8 03 <42> 80 3c 00 00 74 12 48 89 df e8 19 34 60 00 49 b8 00 00 00 00 00 [ 502.406830][ T4199] RSP: 0018:ffffc9000307f0a0 EFLAGS: 00010006 [ 502.413162][ T4199] RAX: 0000000000000024 RBX: 0000000000000120 RCX: 1ffff9200060fe38 [ 502.421140][ T4199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000120 [ 502.429354][ T4199] RBP: ffffc9000307f2f0 R08: dffffc0000000000 R09: 0000000000000000 [ 502.437418][ T4199] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: 0000000000000001 [ 502.445568][ T4199] R13: ffff8880776d9dc0 R14: 0000000000000000 R15: 0000000000000000 [ 502.453892][ T4199] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 502.462922][ T4199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.469683][ T4199] CR2: 0000001b2f312ff8 CR3: 0000000057353000 CR4: 00000000003506f0 [ 502.477753][ T4199] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 502.485829][ T4199] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 502.494084][ T4199] Kernel panic - not syncing: Fatal exception [ 502.508189][ T4199] Kernel Offset: disabled [ 502.513214][ T4199] Rebooting in 86400 seconds..