last executing test programs: 12m59.317386681s ago: executing program 3 (id=3212): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 12m58.872240478s ago: executing program 3 (id=3214): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x20, r3, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004084) 12m58.676720469s ago: executing program 3 (id=3217): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setuid(0xee00) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 12m58.335891833s ago: executing program 3 (id=3222): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ff3fb9c548c540cf0389ce756de3", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800", @ANYRES8=r2], 0x68}}, 0x20000880) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 12m58.105760694s ago: executing program 3 (id=3229): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 12m57.872128674s ago: executing program 3 (id=3234): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r2, 0x8000451a, 0x0) 12m42.815965685s ago: executing program 32 (id=3234): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r2, 0x8000451a, 0x0) 48.820742217s ago: executing program 5 (id=10721): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) 48.673193809s ago: executing program 5 (id=10723): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r3, 0x400454e2, 0x0) 47.624670611s ago: executing program 5 (id=10736): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1d, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 47.357360839s ago: executing program 5 (id=10740): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) 47.101083019s ago: executing program 5 (id=10743): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) 44.18006105s ago: executing program 5 (id=10764): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 43.876512447s ago: executing program 33 (id=10764): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0xfffffffffffffffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 7.09753325s ago: executing program 2 (id=10986): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000080)={0x7}) 6.424614187s ago: executing program 0 (id=10996): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x1, 0xa0002f5}) 5.603779099s ago: executing program 2 (id=10999): ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) 5.155376871s ago: executing program 0 (id=11003): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000280)) 5.032320694s ago: executing program 0 (id=11005): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 4.546370729s ago: executing program 2 (id=11009): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[], 0x2c, 0x1) 4.345343894s ago: executing program 2 (id=11010): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040)=0x2, 0x4) 4.315779666s ago: executing program 2 (id=11012): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) unshare(0x62040200) 3.941245819s ago: executing program 0 (id=11013): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.322157874s ago: executing program 6 (id=11019): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x5}) 3.237217906s ago: executing program 0 (id=11022): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 2.940598563s ago: executing program 0 (id=11025): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x121200, 0x1) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.700372707s ago: executing program 6 (id=11026): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000", 0x39}], 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) 1.525012132s ago: executing program 1 (id=11027): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f4, 0x0, 0x2b34988d}]}) 1.368345792s ago: executing program 4 (id=11028): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4, 0x1}) 1.255791947s ago: executing program 6 (id=11029): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x4000010, r3, 0x0) 1.242892185s ago: executing program 4 (id=11030): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setresgid(0x0, 0xee00, 0x0) 1.187401838s ago: executing program 1 (id=11031): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 84.006596ms ago: executing program 4 (id=11032): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioperm(0x9, 0x7ff, 0x100000000) 83.476849ms ago: executing program 6 (id=11033): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000080000000700000000", @ANYRES32], 0x50) 82.9906ms ago: executing program 4 (id=11034): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000080)='/pro\x0e/bus/inpu\f\x00\x00\x00\x00\x00\x00\x00rs\x00', 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 80.284156ms ago: executing program 1 (id=11035): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sync_file_range(r3, 0x21, 0x7bb, 0x6) 79.824692ms ago: executing program 6 (id=11036): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000580)={0x1, 0x0, @ioapic={0xf000, 0x1, 0x6, 0x4, 0x0, [{0x6, 0xf9, 0x2, '\x00', 0x7}, {0xd, 0x4, 0x6, '\x00', 0x5}, {0x1, 0x8, 0x3, '\x00', 0x8}, {0xfd, 0x4c, 0x80, '\x00', 0x3}, {0x0, 0x80, 0xa8, '\x00', 0x7}, {0x2, 0x5, 0x1, '\x00', 0x4}, {0xc, 0xc, 0xfe, '\x00', 0x9f}, {0x7b, 0x8, 0x10, '\x00', 0xf9}, {0x3, 0x4, 0xe, '\x00', 0xff}, {0x2c, 0xfc, 0xf8}, {0x1a, 0x80, 0x80, '\x00', 0xef}, {0x6, 0x9, 0xfd, '\x00', 0xc}, {0xfd, 0xe, 0x9}, {0x1, 0x8, 0x1, '\x00', 0x3}, {0xf9, 0xfc, 0xee, '\x00', 0x1d}, {0x81, 0x5, 0x6, '\x00', 0x1}, {0x0, 0xc, 0x7e, '\x00', 0x5}, {0xd6, 0xc, 0x2}, {0x5f, 0x8, 0x4, '\x00', 0x9}, {0x6, 0x6, 0x80, '\x00', 0x1}, {0x14, 0x4, 0x8, '\x00', 0x7}, {0x7f, 0xff, 0x3, '\x00', 0xbc}, {0x1, 0xb7, 0x9, '\x00', 0x9}, {0x9, 0x9, 0xb, '\x00', 0x9}]}}) 79.574374ms ago: executing program 4 (id=11037): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 79.198446ms ago: executing program 1 (id=11038): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) accept4$packet(r1, 0x0, 0x0, 0x0) 78.895828ms ago: executing program 2 (id=11039): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 78.059557ms ago: executing program 1 (id=11040): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x400000000000051, 0x4040041) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) 77.45623ms ago: executing program 6 (id=11041): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000001c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000f00)) 76.942706ms ago: executing program 4 (id=11042): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@uuid_null}]}) 0s ago: executing program 1 (id=11043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) kernel console output (not intermixed with test programs): 3e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 751.506860][ T38] audit: type=1326 audit(1796854580.372:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.1.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 751.508353][ T38] audit: type=1326 audit(1796854580.372:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.1.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 751.520040][ T38] audit: type=1326 audit(1796854580.372:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.1.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 752.293403][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.084956][T21950] netlink: 'syz.1.7196': attribute type 3 has an invalid length. [ 753.094428][T21948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.148520][T21948] bond0: (slave rose0): Enslaving as an active interface with an up link [ 753.702570][T21965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7202'. [ 761.277336][T22167] 9pnet: Could not find request transport: 0xffffffffffffffff [ 762.446928][T22212] 9pnet: Unknown protocol version 9p [ 764.755176][ T49] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 765.641514][ T49] usb 1-1: config 0 has no interfaces? [ 765.659225][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 765.659259][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.659281][ T49] usb 1-1: Product: syz [ 765.659296][ T49] usb 1-1: Manufacturer: syz [ 765.659311][ T49] usb 1-1: SerialNumber: syz [ 765.718635][ T49] usb 1-1: config 0 descriptor?? [ 765.934238][ T49] usb 1-1: USB disconnect, device number 30 [ 766.077738][T22254] kvm: apic: phys broadcast and lowest prio [ 766.119850][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7315'. [ 766.119876][T22258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7315'. [ 766.251261][T22264] netlink: 'syz.5.7319': attribute type 4 has an invalid length. [ 766.251285][T22264] netlink: 'syz.5.7319': attribute type 5 has an invalid length. [ 766.251299][T22264] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.7319'. [ 768.634598][T22312] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7342'. [ 770.700545][T22356] netem: change failed [ 771.424498][T22371] tipc: Started in network mode [ 771.424523][T22371] tipc: Node identity 4, cluster identity 4711 [ 771.424536][T22371] tipc: Node number set to 4 [ 771.609897][T22374] tipc: Failed to remove unknown binding: 66,1,1/4:220344120/220344122 [ 773.167186][T22395] lo speed is unknown, defaulting to 1000 [ 775.717527][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7398'. [ 775.837089][T22466] fuseblk: Bad value for 'fd' [ 778.376375][T22490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7405'. [ 779.292079][T22509] overlayfs: missing 'lowerdir' [ 780.159871][T22520] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7418'. [ 780.255402][T22504] lo speed is unknown, defaulting to 1000 [ 781.282882][ T38] kauditd_printk_skb: 47 callbacks suppressed [ 781.282901][ T38] audit: type=1326 audit(1796854610.151:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22560 comm="syz.0.7437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 781.283818][ T38] audit: type=1326 audit(1796854610.151:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22560 comm="syz.0.7437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 781.284261][ T38] audit: type=1326 audit(1796854610.151:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22560 comm="syz.0.7437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 781.285919][ T38] audit: type=1326 audit(1796854610.151:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22560 comm="syz.0.7437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 781.674832][T22578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7445'. [ 781.808082][T22582] netlink: 'syz.2.7447': attribute type 6 has an invalid length. [ 784.332857][T22609] lo speed is unknown, defaulting to 1000 [ 785.072149][ T38] audit: type=1326 audit(1796854613.942:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22643 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 785.072371][ T38] audit: type=1326 audit(1796854613.942:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22643 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 785.078638][ T38] audit: type=1326 audit(1796854613.952:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22643 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 785.078935][ T38] audit: type=1326 audit(1796854613.952:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22643 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 785.079648][ T38] audit: type=1326 audit(1796854613.952:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22643 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 785.079996][ T38] audit: type=1326 audit(1796854613.952:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22643 comm="syz.1.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 785.248765][T22642] overlayfs: failed to clone lowerpath [ 786.709015][T22685] netlink: 'syz.1.7492': attribute type 4 has an invalid length. [ 786.718691][T22685] netlink: 'syz.1.7492': attribute type 4 has an invalid length. [ 788.751355][T22715] netlink: 'syz.1.7507': attribute type 4 has an invalid length. [ 789.013700][T22731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7510'. [ 789.451708][T22748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7518'. [ 789.712865][T22752] lo speed is unknown, defaulting to 1000 [ 790.489848][T22782] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7531'. [ 790.665003][ T5910] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 790.817101][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 790.820170][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 790.821821][ T5910] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 108 [ 790.821850][ T5910] usb 3-1: config 12 interface 0 has no altsetting 0 [ 790.842382][ T5910] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 790.842414][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.842435][ T5910] usb 3-1: Product: syz [ 790.842450][ T5910] usb 3-1: Manufacturer: syz [ 790.842464][ T5910] usb 3-1: SerialNumber: syz [ 790.878436][T22780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 791.175283][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 791.175345][ T5910] usb 3-1: selecting invalid altsetting 0 [ 791.499856][ T5910] usb 3-1: USB disconnect, device number 29 [ 791.795825][ T1826] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 791.997476][ T1826] usb 6-1: Using ep0 maxpacket: 8 [ 792.048294][ T1826] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 792.048328][ T1826] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.048423][ T1826] usb 6-1: config 0 has no interface number 0 [ 792.131180][ T1826] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 792.131429][ T1826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.131746][ T1826] usb 6-1: Product: syz [ 792.131998][ T1826] usb 6-1: Manufacturer: syz [ 792.132045][ T1826] usb 6-1: SerialNumber: syz [ 792.295546][ T1826] usb 6-1: config 0 descriptor?? [ 792.317905][ T1826] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 792.318106][ T1826] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized! [ 792.318779][ T1826] uvcvideo 6-1:0.31: Failed to create links for entity 6 [ 792.318800][ T1826] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 792.889536][T22822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7548'. [ 794.260619][ T5910] usb 6-1: USB disconnect, device number 7 [ 794.727643][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7570'. [ 794.727670][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7570'. [ 794.727698][T22873] netlink: 'syz.5.7570': attribute type 20 has an invalid length. [ 794.797748][T17908] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.798084][T17908] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.798129][T17908] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.798168][T17908] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.805510][T22877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7573'. [ 794.848107][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7570'. [ 794.848131][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7570'. [ 794.848158][T22873] netlink: 'syz.5.7570': attribute type 20 has an invalid length. [ 795.806981][T22909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7585'. [ 798.501997][T22958] tmpfs: Bad value for 'mpol' [ 799.982959][T22986] netlink: 368 bytes leftover after parsing attributes in process `syz.0.7615'. [ 801.459345][T23009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7627'. [ 801.549643][T23011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7628'. [ 802.005875][T23026] overlayfs: failed to clone upperpath [ 802.289273][T23036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7638'. [ 802.419935][T23043] netlink: 'syz.1.7641': attribute type 4 has an invalid length. [ 802.419958][T23043] netlink: 'syz.1.7641': attribute type 5 has an invalid length. [ 802.419973][T23043] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7641'. [ 804.034343][T23062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7649'. [ 804.034384][T23062] netlink: 'syz.1.7649': attribute type 7 has an invalid length. [ 804.034399][T23062] netlink: 'syz.1.7649': attribute type 8 has an invalid length. [ 804.034412][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7649'. [ 804.558325][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7656'. [ 806.256959][T23074] lo speed is unknown, defaulting to 1000 [ 808.224611][T23149] overlayfs: failed to resolve './file0': -2 [ 808.303484][T23145] lo speed is unknown, defaulting to 1000 [ 812.713944][T23200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 812.713980][T23200] overlayfs: missing 'lowerdir' [ 814.421566][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.596875][ T5858] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 814.749811][ T5858] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 814.749846][ T5858] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.749892][ T5858] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 814.749916][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.029692][ T5858] usb 6-1: GET_CAPABILITIES returned 0 [ 815.029745][ T5858] usbtmc 6-1:16.0: can't read capabilities [ 815.172768][T23241] lo speed is unknown, defaulting to 1000 [ 815.895964][ T5858] usb 6-1: USB disconnect, device number 8 [ 816.662324][T23288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7747'. [ 819.021729][T23328] input: syz0 as /devices/virtual/input/input20 [ 821.818323][T23382] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7788'. [ 821.818353][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7788'. [ 821.988521][T23392] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7792'. [ 823.361363][T23403] overlayfs: failed to resolve '/./file0': -2 [ 824.859693][T23461] tipc: Failed to remove unknown binding: 66,1,1/0:2923530551/2923530553 [ 824.859744][T23461] tipc: Failed to remove unknown binding: 66,1,1/0:2923530551/2923530553 [ 826.617984][T23489] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7833'. [ 827.176308][T23512] fuse: Bad value for 'group_id' [ 827.176330][T23512] fuse: Bad value for 'group_id' [ 827.228638][T23518] overlayfs: failed to clone upperpath [ 832.935196][T23579] netlink: 'syz.2.7874': attribute type 4 has an invalid length. [ 832.983982][ T5858] lo speed is unknown, defaulting to 1000 [ 832.984023][ T5858] syz2: Port: 1 Link DOWN [ 832.984252][T23579] netlink: 'syz.2.7874': attribute type 4 has an invalid length. [ 832.993858][ T5858] lo speed is unknown, defaulting to 1000 [ 832.993893][ T5858] syz2: Port: 1 Link ACTIVE [ 833.299078][ T38] kauditd_printk_skb: 37 callbacks suppressed [ 833.299107][ T38] audit: type=1326 audit(1796854662.186:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.299516][ T38] audit: type=1326 audit(1796854662.186:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.300100][ T38] audit: type=1326 audit(1796854662.186:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.300674][ T38] audit: type=1326 audit(1796854662.186:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.301002][ T38] audit: type=1326 audit(1796854662.186:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.418085][ T38] audit: type=1326 audit(1796854662.306:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.418177][ T38] audit: type=1326 audit(1796854662.306:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.418221][ T38] audit: type=1326 audit(1796854662.306:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.419147][ T38] audit: type=1326 audit(1796854662.306:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.419799][ T38] audit: type=1326 audit(1796854662.306:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23592 comm="syz.0.7880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 833.664063][T23602] overlayfs: missing 'lowerdir' [ 836.779566][T23660] overlayfs: missing 'lowerdir' [ 837.173733][T23676] netlink: 'syz.0.7913': attribute type 4 has an invalid length. [ 837.173757][T23676] netlink: 'syz.0.7913': attribute type 5 has an invalid length. [ 837.173772][T23676] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.7913'. [ 837.220242][ T49] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 837.400167][ T49] usb 3-1: config 0 has no interfaces? [ 837.400209][ T49] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 837.400234][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.413197][ T49] usb 3-1: config 0 descriptor?? [ 837.634922][ T49] usb 3-1: USB disconnect, device number 30 [ 838.040422][T23698] netlink: 'syz.1.7921': attribute type 4 has an invalid length. [ 838.289560][T23705] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7926'. [ 839.325625][T23741] binder: 23739:23741 ioctl c0306201 0 returned -14 [ 839.637170][T23760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7951'. [ 839.637195][T23760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7951'. [ 839.637512][T23760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7951'. [ 839.637529][T23760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7951'. [ 840.068862][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 840.068881][ T38] audit: type=1326 audit(1796854668.958:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23779 comm="syz.1.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 840.103331][ T38] audit: type=1326 audit(1796854668.998:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23779 comm="syz.1.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 840.104564][ T38] audit: type=1326 audit(1796854668.998:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23779 comm="syz.1.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 840.104618][ T38] audit: type=1326 audit(1796854668.998:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23779 comm="syz.1.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 840.104666][ T38] audit: type=1326 audit(1796854668.998:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23779 comm="syz.1.7960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 845.911695][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.220945][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.890883][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.865146][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.483368][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.654325][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.758490][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.275083][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8028'. [ 856.026508][T23982] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 857.980336][T24006] lo speed is unknown, defaulting to 1000 [ 858.830645][T24020] overlayfs: failed to clone lowerpath [ 863.773738][T24084] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8082'. [ 865.754157][T24128] lo speed is unknown, defaulting to 1000 [ 870.134865][T24191] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 870.134930][T24191] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 874.473959][T24237] lo speed is unknown, defaulting to 1000 [ 874.665648][T24243] overlay: Unknown parameter 'hash' [ 875.128049][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.895824][T24308] overlayfs: missing 'workdir' [ 877.609214][T24324] 9pnet_fd: Insufficient options for proto=fd [ 882.317650][T24394] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8213'. [ 889.039471][T24516] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8264'. [ 889.434747][T24532] overlayfs: failed to resolve './file1': -2 [ 889.981237][T24547] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 891.259980][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8287'. [ 891.260004][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8287'. [ 891.260033][T24567] netlink: 'syz.1.8287': attribute type 20 has an invalid length. [ 891.277603][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8287'. [ 891.277628][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8287'. [ 891.277657][T24567] netlink: 'syz.1.8287': attribute type 20 has an invalid length. [ 891.340217][ T71] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.340486][ T71] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.340548][ T71] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 891.340587][ T71] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.030850][ T38] audit: type=1326 audit(1796854721.934:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.031107][ T38] audit: type=1326 audit(1796854721.934:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.032554][ T38] audit: type=1326 audit(1796854721.934:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.032612][ T38] audit: type=1326 audit(1796854721.934:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.134024][ T38] audit: type=1326 audit(1796854722.034:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.134088][ T38] audit: type=1326 audit(1796854722.034:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.134138][ T38] audit: type=1326 audit(1796854722.034:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.134184][ T38] audit: type=1326 audit(1796854722.034:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.134228][ T38] audit: type=1326 audit(1796854722.034:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.134272][ T38] audit: type=1326 audit(1796854722.034:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24598 comm="syz.4.8302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 893.366320][T24606] input: syz0 as /devices/virtual/input/input21 [ 893.528015][T24618] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8309'. [ 904.775738][T24717] overlayfs: failed to resolve './file0': -2 [ 905.011794][T24720] overlayfs: overlapping lowerdir path [ 905.092719][T24721] overlayfs: failed to verify upper (1606/file0, ino=9455, err=-116) [ 905.092765][T24721] overlayfs: failed to verify index dir 'upper' xattr [ 905.092775][T24721] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 906.922649][T24734] netlink: 'syz.5.8348': attribute type 4 has an invalid length. [ 906.922674][T24734] netlink: 'syz.5.8348': attribute type 5 has an invalid length. [ 906.922688][T24734] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.8348'. [ 906.970766][T24735] veth0: entered promiscuous mode [ 906.971750][T24735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 907.435502][T24735] veth0 (unregistering): left promiscuous mode [ 908.787696][T24749] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8356'. [ 908.957026][T24763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8361'. [ 909.331553][T24763] bridge_slave_1: left allmulticast mode [ 909.331672][T24763] bridge_slave_1: left promiscuous mode [ 909.332037][T24763] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.130768][T24763] bridge_slave_0: left allmulticast mode [ 910.130803][T24763] bridge_slave_0: left promiscuous mode [ 910.131128][T24763] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.947127][T24778] lo speed is unknown, defaulting to 1000 [ 913.951531][T24822] batadv_slave_1: entered promiscuous mode [ 913.953210][T24820] batadv_slave_1: left promiscuous mode [ 913.966701][T24830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8384'. [ 914.108265][ T49] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 914.271005][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 914.404202][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 914.405301][ T49] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 914.405338][ T49] usb 6-1: can't read configurations, error -71 [ 914.915994][T24850] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 915.819953][T24851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8393'. [ 917.147911][ T1826] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 917.313849][ T1826] usb 6-1: Using ep0 maxpacket: 16 [ 917.317843][ T1826] usb 6-1: config 0 has no interfaces? [ 917.323365][ T1826] usb 6-1: New USB device found, idVendor=056e, idProduct=b338, bcdDevice=7f.56 [ 917.323401][ T1826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.323424][ T1826] usb 6-1: Product: syz [ 917.323441][ T1826] usb 6-1: Manufacturer: syz [ 917.323459][ T1826] usb 6-1: SerialNumber: syz [ 917.375415][ T1826] usb 6-1: config 0 descriptor?? [ 917.613125][ T1826] usb 6-1: USB disconnect, device number 11 [ 920.112428][T24889] lo speed is unknown, defaulting to 1000 [ 920.547138][T24902] overlayfs: failed to clone upperpath [ 923.263079][T24968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8443'. [ 924.452996][T24972] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8446'. [ 927.231429][T25007] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8459'. [ 929.130958][T25044] 9pnet: Could not find request transport: 0xffffffffffffffff [ 933.036305][T25084] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8489'. [ 934.790665][T25119] netlink: 'syz.5.8503': attribute type 4 has an invalid length. [ 934.812296][T25119] netlink: 'syz.5.8503': attribute type 4 has an invalid length. [ 935.401890][T25142] 9pnet: Could not find request transport: 0xffffffffffffffff [ 936.741023][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.849011][T25160] overlayfs: failed to resolve './file0': -2 [ 937.272406][T25174] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 943.671680][T25245] lo speed is unknown, defaulting to 1000 [ 945.796762][T25266] loop5: detected capacity change from 0 to 7 [ 946.596173][T25280] overlayfs: missing 'lowerdir' [ 947.065919][T25266] Dev loop5: unable to read RDB block 7 [ 947.065978][T25266] loop5: unable to read partition table [ 947.066225][T25266] loop5: partition table beyond EOD, truncated [ 947.066245][T25266] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 950.489596][T25309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8571'. [ 950.846685][T25308] binder: Unknown parameter 'context' [ 952.827127][T25322] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8575'. [ 953.065194][T25334] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8583'. [ 953.509362][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8588'. [ 955.630229][T25371] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8596'. [ 966.266818][T25465] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 966.277378][T25465] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 969.395317][ T5910] hid_parser_main: 5 callbacks suppressed [ 969.395343][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395374][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395403][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395432][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395461][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395489][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395516][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395545][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395579][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.395608][ T5910] hid-generic 00A0:0006:0003.001B: unknown main item tag 0x0 [ 969.429812][ T5910] hid-generic 00A0:0006:0003.001B: hidraw0: HID v0.05 Device [syz1] on syz0 [ 969.691032][ T5910] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 971.042505][ T5910] usb 6-1: config 0 has no interfaces? [ 971.042546][ T5910] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 971.042571][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.072303][ T5910] usb 6-1: config 0 descriptor?? [ 971.495237][T25521] tipc: Started in network mode [ 971.495453][T25521] tipc: Node identity ac14140f, cluster identity 4711 [ 971.526403][T25521] tipc: New replicast peer: 255.255.255.255 [ 971.578119][T25521] tipc: Enabled bearer , priority 10 [ 972.479744][T22807] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 972.589773][ T49] tipc: Node number set to 2886997007 [ 972.635941][T22807] usb 1-1: config 16 has an invalid interface number: 168 but max is 0 [ 972.635963][T22807] usb 1-1: config 16 has no interface number 0 [ 972.635996][T22807] usb 1-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 972.636015][T22807] usb 1-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.636044][T22807] usb 1-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 972.636060][T22807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.657889][T22807] HFC-S_USB 1-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 972.875868][T22807] usb 1-1: USB disconnect, device number 31 [ 973.517208][T25541] overlayfs: failed to clone lowerpath [ 974.999871][T25549] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8653'. [ 975.005552][T25549] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8653'. [ 975.005635][T25549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8653'. [ 975.034974][T25549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8653'. [ 975.035029][T25549] tc_dump_action: action bad kind [ 976.272300][T22807] usb 6-1: USB disconnect, device number 12 [ 976.517954][T25562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8657'. [ 977.425783][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 977.437243][T25563] vlan0: entered allmulticast mode [ 977.437266][T25563] bridge_slave_0: entered allmulticast mode [ 977.921225][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.964797][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.005747][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.468163][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.800051][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.582048][ C1] vkms_vblank_simulate: vblank timer overrun [ 979.616606][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.362285][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.503785][ C1] vkms_vblank_simulate: vblank timer overrun [ 980.550624][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.150291][T25584] overlayfs: failed to clone upperpath [ 981.157228][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.539848][ C1] vkms_vblank_simulate: vblank timer overrun [ 981.807865][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.459022][ C1] vkms_vblank_simulate: vblank timer overrun [ 982.700617][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.741559][T25608] ip6erspan0: entered promiscuous mode [ 984.741589][T25608] ip6erspan0: entered allmulticast mode [ 984.800410][T25610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8673'. [ 986.555316][T25652] netlink: 124 bytes leftover after parsing attributes in process `syz.2.8692'. [ 986.715796][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8695'. [ 986.844965][T25652] nbd2: detected capacity change from 0 to 63 [ 986.858390][T25657] block nbd2: NBD_DISCONNECT [ 986.977267][T25657] block nbd2: Disconnected due to user request. [ 986.990469][T25657] block nbd2: shutting down sockets [ 987.203567][T25668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8699'. [ 988.843844][T25711] Scaler: ================= START STATUS ================= [ 988.843862][T25711] Scaler: ================== END STATUS ================== [ 989.467898][T25725] netlink: 'syz.1.8721': attribute type 1 has an invalid length. [ 989.502947][T25727] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8722'. [ 990.234610][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 990.268877][T25757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8733'. [ 990.387088][ T9] usb 6-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 990.387121][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.387141][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 990.390614][ T9] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 990.390646][ T9] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 990.390667][ T9] usb 6-1: Product: syz [ 990.390682][ T9] usb 6-1: Manufacturer: syz [ 990.390699][ T9] usb 6-1: SerialNumber: syz [ 990.412163][ T9] usb 6-1: config 0 descriptor?? [ 990.427687][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 990.715602][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 990.870463][T22807] usb 6-1: USB disconnect, device number 13 [ 991.754549][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 991.754567][ T38] audit: type=1326 audit(1796854820.693:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25782 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 991.755366][ T38] audit: type=1326 audit(1796854820.693:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25782 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 991.759242][ T38] audit: type=1326 audit(1796854820.693:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25782 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 991.759531][ T38] audit: type=1326 audit(1796854820.693:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25782 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 991.760661][ T38] audit: type=1326 audit(1796854820.693:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25782 comm="syz.1.8744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 992.263440][T25796] IPv6: sit2: Disabled Multicast RS [ 992.267653][T25796] sit2: entered allmulticast mode [ 992.309576][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8751'. [ 992.811094][T25824] 9pnet_fd: Insufficient options for proto=fd [ 992.868178][T25826] dummy0: entered promiscuous mode [ 992.993686][T22807] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 993.144168][T22807] usb 6-1: Using ep0 maxpacket: 32 [ 993.147625][T22807] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 993.147654][T22807] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 993.147676][T22807] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 993.147698][T22807] usb 6-1: config 1 has no interface number 0 [ 993.147748][T22807] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 993.147773][T22807] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 993.147795][T22807] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 993.147840][T22807] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 993.147864][T22807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.277311][T22807] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 993.489316][T22807] snd_usb_pod 6-1:1.1: cannot start listening: -90 [ 993.489649][T22807] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 993.490234][T22807] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 993.562770][T25853] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8773'. [ 993.702417][ T5858] usb 6-1: USB disconnect, device number 14 [ 996.392336][T25921] netlink: 'syz.2.8804': attribute type 6 has an invalid length. [ 996.565323][T25923] fuse: Bad value for 'group_id' [ 996.565345][T25923] fuse: Bad value for 'group_id' [ 996.707800][T25927] program syz.2.8805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.382319][ T5886] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 997.546107][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 997.546142][ T5886] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 997.546169][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 997.546191][ T5886] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 997.556876][ T5886] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 997.556914][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.556947][ T5886] usb 6-1: Product: syz [ 997.556963][ T5886] usb 6-1: Manufacturer: syz [ 997.556981][ T5886] usb 6-1: SerialNumber: syz [ 997.576798][ T5886] usb 6-1: config 0 descriptor?? [ 997.591978][ T5886] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 997.782217][ T5858] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 997.936292][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 997.939883][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.939978][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.940023][ T5858] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 997.940048][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.967855][ T5858] usb 3-1: config 0 descriptor?? [ 997.973178][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.991921][ T5858] hub 3-1:0.0: USB hub found [ 998.026782][ T5886] scsi host1: usb-storage 6-1:0.0 [ 998.093738][T25985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8833'. [ 998.099537][ T5886] usb 6-1: USB disconnect, device number 15 [ 998.211403][ T5858] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 998.616834][ T5858] usbhid 3-1:0.0: can't add hid device: -71 [ 998.616977][ T5858] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 998.674755][ T5858] usb 3-1: USB disconnect, device number 31 [ 999.960559][T26077] tc_dump_action: action bad kind [ 1000.411500][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1000.561786][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1000.564972][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.564990][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1000.597959][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1000.597983][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.597997][ T9] usb 3-1: Product: syz [ 1000.598008][ T9] usb 3-1: Manufacturer: syz [ 1000.598019][ T9] usb 3-1: SerialNumber: syz [ 1000.869657][ T9] usb 3-1: 0:2 : does not exist [ 1000.888022][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1000.948579][ T9] usb 3-1: USB disconnect, device number 32 [ 1001.266510][T26123] netlink: 208 bytes leftover after parsing attributes in process `syz.1.8891'. [ 1001.668023][T26128] bond3 (unregistering): Released all slaves [ 1001.919268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1002.560929][T25968] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1002.716616][T25968] usb 6-1: Using ep0 maxpacket: 32 [ 1002.719050][T25968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.719083][T25968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.719126][T25968] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1002.719151][T25968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.773940][T25968] usb 6-1: config 0 descriptor?? [ 1002.789177][T25968] hub 6-1:0.0: USB hub found [ 1003.044960][T25968] hub 6-1:0.0: 25 ports detected [ 1003.045668][T25968] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1003.246922][T25968] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1003.246950][T25968] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1003.271965][T25968] usbhid 6-1:0.0: can't add hid device: -71 [ 1003.272103][T25968] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1003.295682][T25968] usb 6-1: USB disconnect, device number 16 [ 1003.710668][T26197] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1003.710668][T26197] The task syz.4.8923 (26197) triggered the difference, watch for misbehavior. [ 1003.827647][ T5120] Bluetooth: hci4: unexpected event for opcode 0x100c [ 1004.280368][ T5886] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1004.430675][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 1004.433351][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.433409][ T5886] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1004.433442][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.485288][ T5886] usb 3-1: config 0 descriptor?? [ 1004.518492][T26233] netlink: 'syz.1.8940': attribute type 1 has an invalid length. [ 1004.518519][T26233] netlink: 'syz.1.8940': attribute type 2 has an invalid length. [ 1004.916320][ T5886] mcp2221 0003:04D8:00DD.001C: collection stack underflow [ 1004.916366][ T5886] mcp2221 0003:04D8:00DD.001C: item 0 2 0 12 parsing failed [ 1004.917228][ T5886] mcp2221 0003:04D8:00DD.001C: can't parse reports [ 1004.917348][ T5886] mcp2221 0003:04D8:00DD.001C: probe with driver mcp2221 failed with error -22 [ 1005.113241][ T5886] usb 3-1: USB disconnect, device number 33 [ 1005.636718][T26282] tipc: Enabling of bearer rejected, already enabled [ 1005.706155][T26284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8964'. [ 1006.068989][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8969'. [ 1006.126283][T26299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8970'. [ 1006.737199][T26326] netlink: 'syz.4.8982': attribute type 1 has an invalid length. [ 1006.969696][T26333] program syz.5.8986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.031849][T26334] program syz.5.8986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.428199][T26346] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1007.896797][T26355] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8996'. [ 1009.163861][ T5910] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1009.319224][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1009.322410][ T5910] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1009.322438][ T5910] usb 6-1: config 179 has no interface number 0 [ 1009.322489][ T5910] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1009.322516][ T5910] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1009.322545][ T5910] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1009.322572][ T5910] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1009.322600][ T5910] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1009.322644][ T5910] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1009.322667][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.440058][T26383] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1009.954270][ T5886] usb 6-1: USB disconnect, device number 17 [ 1009.954339][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1009.954409][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1010.374466][T26412] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9022'. [ 1011.003843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1011.352244][T26449] netlink: 'syz.1.9039': attribute type 4 has an invalid length. [ 1011.388516][T22807] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1011.466520][T26453] dvmrp1: tun_chr_ioctl cmd 2147767519 [ 1011.551424][T22807] usb 3-1: Using ep0 maxpacket: 8 [ 1011.564811][T22807] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1011.564903][T22807] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1011.564928][T22807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1011.564953][T22807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1011.564978][T22807] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1011.565032][T22807] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1011.565055][T22807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.881384][T22807] usb 3-1: GET_CAPABILITIES returned 0 [ 1011.881433][T22807] usbtmc 3-1:16.0: can't read capabilities [ 1012.098613][T22807] usb 3-1: USB disconnect, device number 34 [ 1012.164960][T26484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9055'. [ 1012.164994][T26484] netlink: 'syz.0.9055': attribute type 6 has an invalid length. [ 1012.165011][T26484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9055'. [ 1012.692297][T26505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9065'. [ 1012.692383][T26505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9065'. [ 1013.952833][T26543] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9083'. [ 1014.302772][T26553] bond3: entered promiscuous mode [ 1014.305888][T26556] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9087'. [ 1014.798889][ T5886] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1014.947157][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 1014.950743][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.950775][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.950798][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1014.950840][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 1014.950954][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.992537][ T5886] usb 1-1: config 0 descriptor?? [ 1015.168492][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9098'. [ 1015.519713][ T5886] hid_parser_main: 4 callbacks suppressed [ 1015.519739][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.519773][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.519804][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.519834][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.519863][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.522257][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.522299][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.522330][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.522360][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.522390][ T5886] hid-generic 0003:045E:00DA.001D: unknown main item tag 0x0 [ 1015.522661][ T5886] hid-generic 0003:045E:00DA.001D: unbalanced collection at end of report description [ 1015.525246][ T5886] hid-generic 0003:045E:00DA.001D: probe with driver hid-generic failed with error -22 [ 1015.723802][ T5886] usb 1-1: USB disconnect, device number 32 [ 1016.062880][T26593] sctp: [Deprecated]: syz.2.9105 (pid 26593) Use of int in max_burst socket option deprecated. [ 1016.062880][T26593] Use struct sctp_assoc_value instead [ 1016.146841][ T5886] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1016.299561][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1016.299600][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 1016.299628][ T5886] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1016.299679][ T5886] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1016.299704][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.313701][ T5886] usb 6-1: config 0 descriptor?? [ 1016.338072][T26586] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1016.665288][T26617] netlink: 'syz.1.9117': attribute type 4 has an invalid length. [ 1016.840499][ T5886] hid-multitouch 0003:0457:07DA.001E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 1017.030647][ T5858] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1017.088851][ T5886] usb 6-1: USB disconnect, device number 18 [ 1017.176493][ T5858] usb 1-1: Using ep0 maxpacket: 16 [ 1017.192537][ T5858] usb 1-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.192573][ T5858] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1017.192597][ T5858] usb 1-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1017.192620][ T5858] usb 1-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1017.192647][ T5858] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1017.251603][ T5858] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1017.251635][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1017.251656][ T5858] usb 1-1: SerialNumber: syz [ 1017.288842][T26621] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1017.289123][T26621] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1017.537509][T26621] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1017.537663][T26621] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1018.018759][ T5858] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1018.180658][ T5858] usb 1-1: USB disconnect, device number 33 [ 1018.195373][ T5858] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 1019.742790][T26713] binder: 26710:26713 ioctl c0306201 2000000001c0 returned -14 [ 1020.735698][T22807] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1020.895362][T22807] usb 6-1: Using ep0 maxpacket: 8 [ 1020.899262][T22807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1020.901101][T22807] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1020.939743][T22807] usb 6-1: string descriptor 0 read error: -22 [ 1020.939906][T22807] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1020.939929][T22807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.995298][ T5858] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1020.999179][T22807] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1021.024686][T22807] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1021.039210][T22807] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1021.039345][T22807] usb 6-1: media controller created [ 1021.043904][T26756] netlink: 'syz.1.9180': attribute type 3 has an invalid length. [ 1021.043925][T26756] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9180'. [ 1021.157100][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 1021.159510][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.159540][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.159573][ T5858] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1021.159592][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.237180][ T5858] usb 3-1: config 0 descriptor?? [ 1021.258484][T26739] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 1021.342256][T22807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1021.509964][T22807] zl10353_read_register: readreg error (reg=127, ret==0) [ 1021.698804][T22807] usb 6-1: USB disconnect, device number 19 [ 1021.715651][ T5858] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1021.781086][T26770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9187'. [ 1021.939232][ T5858] usb 3-1: USB disconnect, device number 35 [ 1023.389316][ T5858] IPVS: starting estimator thread 0... [ 1023.511683][T26890] IPVS: using max 7 ests per chain, 16800 per kthread [ 1023.849974][T26835] tipc: Subscription rejected, illegal request [ 1024.910429][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9234'. [ 1024.954589][T26934] vxcan1: tx address claim with different name [ 1025.339714][ T5910] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1025.489511][ T5910] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.489540][ T5910] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1025.493687][ T5910] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1025.493719][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.493741][ T5910] usb 6-1: Product: syz [ 1025.493756][ T5910] usb 6-1: Manufacturer: syz [ 1025.493771][ T5910] usb 6-1: SerialNumber: syz [ 1025.697969][T26956] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9246'. [ 1025.749387][ T5910] usb 6-1: 0:2 : does not exist [ 1025.766848][ T5910] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1025.851808][ T5910] usb 6-1: USB disconnect, device number 20 [ 1028.573226][T25968] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1028.748229][T25968] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1028.748296][T25968] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1028.748324][T25968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1028.748352][T25968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1028.748388][T25968] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1028.748435][T25968] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1028.748458][T25968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.841522][T25968] usb 1-1: config 0 descriptor?? [ 1028.850524][T27018] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1028.894681][T27024] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.894698][T27024] binder: 27023:27024 ioctl 40046207 0 returned -16 [ 1029.321395][T25968] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 1029.366228][T25968] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1029.407638][T27036] bridge0: port 3(gretap0) entered blocking state [ 1029.407770][T27036] bridge0: port 3(gretap0) entered disabled state [ 1029.408126][T27036] gretap0: entered allmulticast mode [ 1029.412371][T27036] gretap0: entered promiscuous mode [ 1029.452391][T27036] bridge0: port 3(gretap0) entered blocking state [ 1029.457883][T27038] loop4: detected capacity change from 0 to 7 [ 1029.470632][T27036] bridge0: port 3(gretap0) entered forwarding state [ 1029.492246][T27038] Dev loop4: unable to read RDB block 7 [ 1029.492294][T27038] loop4: AHDI p2 p3 [ 1029.492324][T27038] loop4: partition table partially beyond EOD, truncated [ 1029.492423][T27038] loop4: p2 size 150995200 extends beyond EOD, truncated [ 1029.506753][T27039] gretap0: left allmulticast mode [ 1029.506790][T27039] gretap0: left promiscuous mode [ 1029.507109][T27039] bridge0: port 3(gretap0) entered disabled state [ 1029.697535][T22807] usb 1-1: USB disconnect, device number 34 [ 1029.799704][T27042] overlayfs: failed to clone upperpath [ 1032.858526][T27127] input: syz1 as /devices/virtual/input/input23 [ 1035.000079][T27173] netlink: 'syz.0.9329': attribute type 8 has an invalid length. [ 1038.017052][T27221] input: syz1 as /devices/virtual/input/input24 [ 1040.649806][ T5858] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1040.742468][T27309] lo speed is unknown, defaulting to 1000 [ 1040.801924][ T5858] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1040.801953][ T5858] usb 6-1: config 1 has no interface number 0 [ 1040.802000][ T5858] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1040.802028][ T5858] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1040.802055][ T5858] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.864439][ T5858] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1040.864472][ T5858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.864492][ T5858] usb 6-1: Product: syz [ 1040.864507][ T5858] usb 6-1: Manufacturer: syz [ 1040.864522][ T5858] usb 6-1: SerialNumber: syz [ 1040.912783][T27297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.123175][T27297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.443821][ T5858] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1041.664082][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9416'. [ 1041.752136][ T5858] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 1041.752165][ T5858] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 1041.814570][ T5858] usb 6-1: USB disconnect, device number 21 [ 1041.830814][ T5858] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 1042.122317][ T5858] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1042.353280][T25968] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1042.515414][T25968] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1042.515446][T25968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.515474][T25968] usb 1-1: Product: syz [ 1042.515490][T25968] usb 1-1: Manufacturer: syz [ 1042.515505][T25968] usb 1-1: SerialNumber: syz [ 1042.531770][T25968] usb 1-1: config 0 descriptor?? [ 1042.545251][T25968] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1042.850776][T27367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9427'. [ 1043.029926][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9429'. [ 1045.186069][T25968] usb 1-1: USB disconnect, device number 35 [ 1045.671691][T25968] kernel write not supported for file bpf-map (pid: 25968 comm: kworker/1:0) [ 1046.668043][ T38] audit: type=1326 audit(1796854875.630:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1046.668111][ T38] audit: type=1326 audit(1796854875.630:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1046.671420][ T38] audit: type=1326 audit(1796854875.630:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1046.671611][ T38] audit: type=1326 audit(1796854875.630:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1046.671876][ T38] audit: type=1326 audit(1796854875.630:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1046.676952][ T38] audit: type=1326 audit(1796854875.630:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b51f6df10 code=0x7ffc0000 [ 1046.741744][ T38] audit: type=1326 audit(1796854875.700:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1046.741974][ T38] audit: type=1326 audit(1796854875.700:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27494 comm="syz.1.9484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b51f6f6c9 code=0x7ffc0000 [ 1047.809128][T27524] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9496'. [ 1049.431961][T27555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9509'. [ 1049.740704][T27571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.886800][ T5858] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1050.010343][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1050.010370][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1050.042332][T27584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1050.042358][T27584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9522'. [ 1050.054422][ T5858] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.054457][ T5858] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.060813][ T5858] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.060851][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.060874][ T5858] usb 1-1: Product: syz [ 1050.060889][ T5858] usb 1-1: Manufacturer: syz [ 1050.060905][ T5858] usb 1-1: SerialNumber: syz [ 1050.292305][ T5858] usb 1-1: 0:2 : does not exist [ 1050.302715][ T5858] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1050.340343][ T5858] usb 1-1: USB disconnect, device number 36 [ 1050.540652][T27592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.541591][T27592] bridge0: port 1(bond1) entered blocking state [ 1050.541845][T27592] bridge0: port 1(bond1) entered disabled state [ 1050.542075][T27592] bond1: entered allmulticast mode [ 1050.546104][T27592] bond1: entered promiscuous mode [ 1050.915398][T27604] 9pnet_fd: Insufficient options for proto=fd [ 1051.016448][ T5858] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1051.107430][T27610] netlink: 'syz.4.9533': attribute type 29 has an invalid length. [ 1051.108691][T27610] netlink: 'syz.4.9533': attribute type 29 has an invalid length. [ 1051.109745][T27610] netlink: 500 bytes leftover after parsing attributes in process `syz.4.9533'. [ 1051.169494][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1051.169528][ T5858] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1051.207870][ T5858] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1051.207904][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.207926][ T5858] usb 3-1: Product: syz [ 1051.207942][ T5858] usb 3-1: Manufacturer: syz [ 1051.207958][ T5858] usb 3-1: SerialNumber: syz [ 1051.242563][ T5858] usb 3-1: config 0 descriptor?? [ 1051.258036][T27600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1051.258186][T27600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1051.529798][T27600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1051.529952][T27600] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1051.936994][ T5858] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1051.992278][T27631] netlink: 'syz.1.9543': attribute type 10 has an invalid length. [ 1051.992306][T27631] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9543'. [ 1052.557874][ T5858] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1052.589250][ T5858] dm9601 3-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 3e:08:94:8f:8d:20 [ 1052.605382][ T5858] usb 3-1: USB disconnect, device number 36 [ 1052.618211][ T5858] dm9601 3-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 1053.019086][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9558'. [ 1053.019112][T27664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9558'. [ 1053.360871][T27680] loop2: detected capacity change from 0 to 7 [ 1053.363434][T27680] loop2: [ 1053.363468][T27680] loop2: partition table partially beyond EOD, truncated [ 1053.801526][T27701] netlink: 'syz.2.9574': attribute type 1 has an invalid length. [ 1053.801550][T27701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9574'. [ 1053.871222][T27701] bond4: option mode: invalid value (40) [ 1054.094386][T27701] bond4 (unregistering): Released all slaves [ 1054.569911][ T38] audit: type=1326 audit(1796854883.522:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1054.569973][ T38] audit: type=1326 audit(1796854883.522:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68e4acdf10 code=0x7ffc0000 [ 1054.570025][ T38] audit: type=1326 audit(1796854883.522:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f68e4acdf10 code=0x7ffc0000 [ 1054.570081][ T38] audit: type=1326 audit(1796854883.522:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1054.570194][ T38] audit: type=1326 audit(1796854883.522:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1054.575609][ T38] audit: type=1326 audit(1796854883.522:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1054.575690][ T38] audit: type=1326 audit(1796854883.522:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1054.575741][ T38] audit: type=1326 audit(1796854883.522:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27725 comm="syz.4.9583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1054.990159][T27743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9590'. [ 1055.768814][ T38] audit: type=1800 audit(1796854884.702:983): pid=27771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.9602" name="bus" dev="overlay" ino=6734 res=0 errno=0 [ 1057.695111][T22807] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1057.867727][T22807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.867763][T22807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.869305][T22807] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1057.869333][T22807] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1057.869354][T22807] usb 6-1: Manufacturer: syz [ 1057.919118][T22807] usb 6-1: config 0 descriptor?? [ 1058.808667][T27835] loop2: detected capacity change from 0 to 7 [ 1058.841053][T27835] loop2: p1 [ 1058.841091][T27835] loop2: partition table partially beyond EOD, truncated [ 1058.841211][T27835] loop2: p1 start 4294967034 is beyond EOD, truncated [ 1058.983434][T22807] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0021/input/input25 [ 1059.100180][T22807] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0021/input/input26 [ 1059.134839][T22807] uclogic 0003:256C:006D.0021: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1059.195143][ T9] usb 6-1: USB disconnect, device number 22 [ 1059.392667][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.103722][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1060.233602][ T38] audit: type=1326 audit(1796854889.184:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27865 comm="syz.4.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1060.233671][ T38] audit: type=1326 audit(1796854889.184:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27865 comm="syz.4.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1060.233725][ T38] audit: type=1326 audit(1796854889.184:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27865 comm="syz.4.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1060.233778][ T38] audit: type=1326 audit(1796854889.184:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27865 comm="syz.4.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1060.235055][ T38] audit: type=1326 audit(1796854889.194:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27865 comm="syz.4.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1060.254003][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1060.294549][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.294584][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.294626][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1060.294650][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.425409][ T9] usb 6-1: config 0 descriptor?? [ 1060.425923][ T38] audit: type=1326 audit(1796854889.194:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27865 comm="syz.4.9643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1060.463192][ T9] hub 6-1:0.0: USB hub found [ 1060.662307][T27877] loop2: detected capacity change from 0 to 7 [ 1060.702559][ T9] hub 6-1:0.0: 1 port detected [ 1060.720893][T27877] Dev loop2: unable to read RDB block 7 [ 1060.720941][T27877] loop2: AHDI p1 p2 p3 [ 1060.720974][T27877] loop2: partition table partially beyond EOD, truncated [ 1060.721087][T27877] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1060.721107][T27877] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1061.667005][T27908] netlink: 'syz.1.9662': attribute type 2 has an invalid length. [ 1061.716773][ T5910] hub 6-1:0.0: activate --> -90 [ 1061.981423][ T5910] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1061.981453][ T5910] usb 6-1-port1: connect-debounce failed [ 1061.999551][ T9] usb 6-1: USB disconnect, device number 23 [ 1061.999689][ T5910] usb 6-1-port1: cannot disable (err = -71) [ 1062.409921][T27919] gretap1: entered promiscuous mode [ 1063.082526][T27937] netlink: 'syz.5.9673': attribute type 4 has an invalid length. [ 1063.123896][T27936] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1063.123927][T27936] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1063.147042][T27936] vhci_hcd vhci_hcd.0: Device attached [ 1063.148997][T27940] vhci_hcd: connection closed [ 1063.162467][T26858] vhci_hcd: stop threads [ 1063.174558][T26858] vhci_hcd: release socket [ 1063.178751][T26858] vhci_hcd: disconnect device [ 1063.179375][T27937] netlink: 'syz.5.9673': attribute type 4 has an invalid length. [ 1064.271758][ T38] audit: type=1326 audit(1796854893.215:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27968 comm="syz.5.9687" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x0 [ 1064.679285][T27982] fuse: Bad value for 'fd' [ 1065.205589][T27991] lo speed is unknown, defaulting to 1000 [ 1066.021210][T28030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9714'. [ 1066.081745][T28038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9714'. [ 1066.467149][T28049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1066.467338][T28049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1067.186295][T28077] futex_wake_op: syz.2.9738 tries to shift op by 144; fix this program [ 1067.412926][T28092] lo speed is unknown, defaulting to 1000 [ 1067.456877][T28093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9743'. [ 1068.774457][T28143] bridge0: entered allmulticast mode [ 1069.091160][T28156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1069.196944][T28156] kvm: kvm [28155]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xbd660336cf70a005 [ 1069.417400][ T5120] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1069.626845][T28167] lo speed is unknown, defaulting to 1000 [ 1069.873852][T28178] syzkaller0: entered allmulticast mode [ 1069.907547][T28175] syzkaller0: entered promiscuous mode [ 1070.032832][T28175] syzkaller0 (unregistering): left allmulticast mode [ 1070.033063][T28175] syzkaller0 (unregistering): left promiscuous mode [ 1070.131183][T28188] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 1071.715424][ T38] audit: type=1326 audit(1796854900.260:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.0.9809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x0 [ 1072.166198][ T9] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1072.338293][ T9] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1072.338322][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.338343][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1072.338365][ T9] usb 3-1: config 1 has no interface number 1 [ 1072.373613][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1072.373762][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.373787][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.449106][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1072.487196][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1072.487249][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 1072.658355][ T9] usb 3-1: USB disconnect, device number 37 [ 1073.235490][T28276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9824'. [ 1077.161628][T28384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9873'. [ 1077.914050][T28409] 9pnet_fd: Insufficient options for proto=fd [ 1078.561368][T28433] ref_ctr increment failed for inode: 0x1b47 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803d3eae00 [ 1079.370177][ T38] audit: type=1326 audit(1796854907.449:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.370343][ T38] audit: type=1326 audit(1796854907.449:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.370650][ T38] audit: type=1326 audit(1796854907.449:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.370860][ T38] audit: type=1326 audit(1796854907.449:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.371405][ T38] audit: type=1326 audit(1796854907.449:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f68e4a6b789 code=0x7ffc0000 [ 1079.371530][ T38] audit: type=1326 audit(1796854907.449:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.371759][ T38] audit: type=1326 audit(1796854907.449:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.372009][ T38] audit: type=1326 audit(1796854907.449:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.372191][ T38] audit: type=1326 audit(1796854907.449:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.372468][ T38] audit: type=1326 audit(1796854907.449:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28470 comm="syz.4.9916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1079.531435][T28478] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9919'. [ 1079.695061][T28433] uprobe: syz.5.9896:28433 failed to unregister, leaking uprobe [ 1080.483812][T28515] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1080.621273][T28519] netlink: 180 bytes leftover after parsing attributes in process `syz.4.9937'. [ 1083.623905][T28608] netlink: 5 bytes leftover after parsing attributes in process `syz.5.9980'. [ 1083.850066][T28619] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1084.703949][T28663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10003'. [ 1084.741697][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 1084.741716][ T38] audit: type=1326 audit(1796854912.490:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28664 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf6b3d1f85 code=0x7ffc0000 [ 1084.741768][ T38] audit: type=1326 audit(1796854912.490:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28659 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1084.742049][ T38] audit: type=1326 audit(1796854912.490:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28659 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1084.747455][ T38] audit: type=1326 audit(1796854912.490:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28659 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1084.747530][ T38] audit: type=1326 audit(1796854912.490:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28659 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1084.747578][ T38] audit: type=1326 audit(1796854912.490:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28659 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1085.057273][ T38] audit: type=1326 audit(1796854912.771:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28664 comm="syz.5.10002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1085.341065][ T38] audit: type=1326 audit(1796854913.044:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28687 comm="syz.4.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1085.341405][ T38] audit: type=1326 audit(1796854913.044:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28687 comm="syz.4.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1085.341890][ T38] audit: type=1326 audit(1796854913.044:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28687 comm="syz.4.10013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1085.572741][T28698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10020'. [ 1086.083424][T28723] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10032'. [ 1086.141588][T28726] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10035'. [ 1086.441689][T28738] lo speed is unknown, defaulting to 1000 [ 1086.800175][T28759] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10047'. [ 1086.800209][T28759] gretap0: entered promiscuous mode [ 1086.800358][T28759] netlink: 'syz.1.10047': attribute type 1 has an invalid length. [ 1086.800370][T28759] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10047'. [ 1089.063871][T28821] serio: Serial port ptm0 [ 1091.356782][ T38] kauditd_printk_skb: 39 callbacks suppressed [ 1091.356803][ T38] audit: type=1326 audit(1796854918.694:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.357160][ T38] audit: type=1326 audit(1796854918.694:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.359208][ T38] audit: type=1326 audit(1796854918.694:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.359486][ T38] audit: type=1326 audit(1796854918.694:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.362299][ T38] audit: type=1326 audit(1796854918.694:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.363956][ T38] audit: type=1326 audit(1796854918.694:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.418162][ T38] audit: type=1326 audit(1796854918.760:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.418554][ T38] audit: type=1326 audit(1796854918.760:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.419232][ T38] audit: type=1326 audit(1796854918.760:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1091.420096][ T38] audit: type=1326 audit(1796854918.760:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28893 comm="syz.0.10109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1092.134259][T25968] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1092.237606][T28931] netlink: 88 bytes leftover after parsing attributes in process `syz.4.10126'. [ 1092.291173][T25968] usb 6-1: Using ep0 maxpacket: 16 [ 1092.294146][T25968] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.294174][T25968] usb 6-1: config 0 has no interfaces? [ 1092.294207][T25968] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1092.294231][T25968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.343528][T25968] usb 6-1: config 0 descriptor?? [ 1092.582531][T28910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.583034][T28910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.595606][ T5910] usb 6-1: USB disconnect, device number 24 [ 1093.308545][T28974] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10146'. [ 1093.324745][T25968] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1093.497547][T25968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.497611][T25968] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1093.497636][T25968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.535315][T25968] usb 1-1: config 0 descriptor?? [ 1093.553083][T25968] pwc: Askey VC010 type 2 USB webcam detected. [ 1093.993152][T25968] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1094.002822][T25968] pwc: recv_control_msg error -32 req 02 val 2700 [ 1094.013031][T25968] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1094.023623][T25968] pwc: recv_control_msg error -32 req 04 val 1000 [ 1094.025554][T25968] pwc: recv_control_msg error -32 req 04 val 1300 [ 1094.041012][T25968] pwc: recv_control_msg error -32 req 04 val 1400 [ 1094.260236][T25968] pwc: recv_control_msg error -71 req 02 val 2100 [ 1094.260740][T25968] pwc: recv_control_msg error -71 req 04 val 1500 [ 1094.261205][T25968] pwc: recv_control_msg error -71 req 02 val 2500 [ 1094.283000][T25968] pwc: recv_control_msg error -71 req 02 val 2400 [ 1094.290524][T25968] pwc: recv_control_msg error -71 req 02 val 2600 [ 1094.291044][T25968] pwc: recv_control_msg error -71 req 02 val 2900 [ 1094.291535][T25968] pwc: recv_control_msg error -71 req 02 val 2800 [ 1094.292251][T25968] pwc: recv_control_msg error -71 req 04 val 1100 [ 1094.315403][T25968] pwc: recv_control_msg error -71 req 04 val 1200 [ 1094.338475][T25968] pwc: Registered as video103. [ 1094.342074][T25968] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 1094.365782][T28993] bridge0: port 1(bond0) entered blocking state [ 1094.367248][T28993] bridge0: port 1(bond0) entered disabled state [ 1094.368046][T28993] bond0: entered allmulticast mode [ 1094.368065][T28993] bond_slave_0: entered allmulticast mode [ 1094.368087][T28993] bond_slave_1: entered allmulticast mode [ 1094.382503][T28993] bond0: entered promiscuous mode [ 1094.382532][T28993] bond_slave_0: entered promiscuous mode [ 1094.382783][T28993] bond_slave_1: entered promiscuous mode [ 1094.415269][T25968] usb 1-1: USB disconnect, device number 37 [ 1094.544013][T28999] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1094.544033][T28999] overlayfs: missing 'lowerdir' [ 1094.641765][T29005] binder: 29002:29005 ioctl c0306201 200000000940 returned -22 [ 1095.736131][T29052] lo speed is unknown, defaulting to 1000 [ 1096.008638][T29065] netlink: 'syz.5.10188': attribute type 15 has an invalid length. [ 1096.008664][T29065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10188'. [ 1096.411823][T29079] netlink: 'syz.5.10194': attribute type 4 has an invalid length. [ 1096.411850][T29079] netlink: 17 bytes leftover after parsing attributes in process `syz.5.10194'. [ 1096.954573][T29101] netlink: 'syz.1.10206': attribute type 28 has an invalid length. [ 1097.400272][T29125] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1097.437009][ T5886] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1097.600632][ T5886] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1097.600663][ T5886] usb 3-1: config 0 has no interface number 0 [ 1097.600717][ T5886] usb 3-1: config 0 interface 184 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1097.600741][ T5886] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1097.610807][ T5886] usb 3-1: New USB device found, idVendor=1b3d, idProduct=4701, bcdDevice=53.f1 [ 1097.610844][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.610869][ T5886] usb 3-1: Product: syz [ 1097.610887][ T5886] usb 3-1: Manufacturer: syz [ 1097.610904][ T5886] usb 3-1: SerialNumber: syz [ 1097.625491][ T5886] usb 3-1: config 0 descriptor?? [ 1097.912721][ T5886] ftdi_sio 3-1:0.184: FTDI USB Serial Device converter detected [ 1097.914411][ T5886] ftdi_sio ttyUSB0: unknown device type: 0x53f1 [ 1097.929784][ T5886] usb 3-1: USB disconnect, device number 38 [ 1097.932516][ T5886] ftdi_sio 3-1:0.184: device disconnected [ 1098.299201][T29162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1098.934137][T29193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10250'. [ 1098.945720][T29185] kvm: pic: non byte read [ 1098.957444][T29185] kvm: pic: level sensitive irq not supported [ 1098.957532][T29185] kvm: pic: non byte read [ 1098.957810][T29185] kvm: pic: level sensitive irq not supported [ 1098.957873][T29185] kvm: pic: non byte read [ 1098.958132][T29185] kvm: pic: level sensitive irq not supported [ 1098.958193][T29185] kvm: pic: non byte read [ 1098.958449][T29185] kvm: pic: level sensitive irq not supported [ 1098.958508][T29185] kvm: pic: non byte read [ 1098.958769][T29185] kvm: pic: level sensitive irq not supported [ 1098.958829][T29185] kvm: pic: non byte read [ 1098.959085][T29185] kvm: pic: level sensitive irq not supported [ 1098.959144][T29185] kvm: pic: non byte read [ 1098.959411][T29185] kvm: pic: level sensitive irq not supported [ 1098.959497][T29185] kvm: pic: non byte read [ 1098.959749][T29185] kvm: pic: level sensitive irq not supported [ 1098.959814][T29185] kvm: pic: non byte read [ 1099.729928][T29222] >: renamed from veth0_vlan (while UP) [ 1100.282959][ T38] kauditd_printk_skb: 11 callbacks suppressed [ 1100.282979][ T38] audit: type=1326 audit(1796854927.076:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29242 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1100.283031][ T38] audit: type=1326 audit(1796854927.076:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29242 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1100.285588][ T38] audit: type=1326 audit(1796854927.076:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29242 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1100.285647][ T38] audit: type=1326 audit(1796854927.076:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29242 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1100.285695][ T38] audit: type=1326 audit(1796854927.076:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29242 comm="syz.5.10274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6b39f6c9 code=0x7ffc0000 [ 1100.645689][T29255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10281'. [ 1102.956239][ T5910] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1103.120001][ T5910] usb 1-1: config 0 has no interfaces? [ 1103.122105][ T5910] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1103.122135][ T5910] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1103.122157][ T5910] usb 1-1: Manufacturer: syz [ 1103.168431][ T5910] usb 1-1: config 0 descriptor?? [ 1103.412494][T29327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.423734][T29327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.445148][ T5910] usb 1-1: USB disconnect, device number 38 [ 1103.456682][T29349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10326'. [ 1103.887338][T29369] netlink: 'syz.4.10334': attribute type 4 has an invalid length. [ 1103.887363][T29369] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1104.404660][T25968] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1104.534842][T29403] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10349'. [ 1104.599846][T25968] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1104.599879][T25968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.599900][T25968] usb 6-1: Product: syz [ 1104.599915][T25968] usb 6-1: Manufacturer: syz [ 1104.599931][T25968] usb 6-1: SerialNumber: syz [ 1104.641287][T25968] usb 6-1: config 0 descriptor?? [ 1104.671372][T25968] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1104.806604][T29407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10352'. [ 1105.376448][ T5858] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1105.534578][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 1105.546809][ T5858] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.547264][ T5858] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.547294][ T5858] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1105.547337][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 1105.547958][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.579078][ T5858] usb 1-1: config 0 descriptor?? [ 1106.142014][ T5858] hid_parser_main: 19 callbacks suppressed [ 1106.142039][ T5858] lg-g15 0003:046D:C225.0022: unknown main item tag 0x2 [ 1106.142484][ T5858] lg-g15 0003:046D:C225.0022: item fetching failed at offset 5/6 [ 1106.148084][ T5858] lg-g15 0003:046D:C225.0022: probe with driver lg-g15 failed with error -22 [ 1106.361905][ T5858] usb 1-1: USB disconnect, device number 39 [ 1106.507098][T29467] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10381'. [ 1106.644721][T25968] gspca_sunplus: reg_r err -71 [ 1106.644837][T25968] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1106.664681][T25968] usb 6-1: USB disconnect, device number 25 [ 1107.034802][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10391'. [ 1109.689122][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1109.849630][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1109.858655][ T9] usb 6-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 1109.858682][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1109.906911][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1109.906944][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.906964][ T9] usb 6-1: Product: syz [ 1109.906979][ T9] usb 6-1: Manufacturer: syz [ 1109.906993][ T9] usb 6-1: SerialNumber: syz [ 1109.946489][ T9] usb 6-1: config 0 descriptor?? [ 1110.166595][ T9] usb 6-1: USB disconnect, device number 26 [ 1110.520834][ T1826] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1110.680290][ T1826] usb 1-1: Using ep0 maxpacket: 8 [ 1110.682838][ T1826] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1110.682867][ T1826] usb 1-1: config 179 has no interface number 0 [ 1110.682919][ T1826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1110.682948][ T1826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1110.682977][ T1826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1110.683005][ T1826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1110.683029][ T1826] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1110.683056][ T1826] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1110.683090][ T1826] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1110.683112][ T1826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.943182][ T1826] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input28 [ 1111.085882][ T1826] usb 1-1: USB disconnect, device number 40 [ 1113.138812][T29636] lo speed is unknown, defaulting to 1000 [ 1113.239997][T29640] usb usb8: usbfs: process 29640 (syz.2.10459) did not claim interface 0 before use [ 1113.823488][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10467'. [ 1113.824140][T29659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1114.596443][T16991] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 1116.172577][T29733] binder: 29732:29733 ioctl c0306201 2000000001c0 returned -14 [ 1116.231802][T29735] tipc: Enabling of bearer rejected, failed to enable media [ 1116.711766][T29755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10511'. [ 1117.358716][T29778] sit0: entered promiscuous mode [ 1117.367614][T29778] netlink: 'syz.5.10525': attribute type 1 has an invalid length. [ 1117.367639][T29778] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10525'. [ 1118.567115][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10539'. [ 1118.691620][T25968] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1118.853873][T25968] usb 6-1: Using ep0 maxpacket: 16 [ 1118.856336][T25968] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.856372][T25968] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1118.856408][T25968] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1118.856432][T25968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.864354][T25968] usb 6-1: config 0 descriptor?? [ 1118.936793][T16991] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1118.942299][T16991] Bluetooth: hci2: Injecting HCI hardware error event [ 1118.946841][ T5120] Bluetooth: hci2: hardware error 0x00 [ 1119.100536][T25968] usbhid 6-1:0.0: can't add hid device: -71 [ 1119.100673][T25968] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1119.118503][T25968] usb 6-1: USB disconnect, device number 27 [ 1120.374558][T29846] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10555'. [ 1120.917425][T29860] veth2: entered promiscuous mode [ 1120.917453][T29860] veth2: entered allmulticast mode [ 1121.240739][ T5120] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1122.213605][T29914] tipc: Enabling of bearer rejected, failed to enable media [ 1123.267045][T29967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10610'. [ 1123.639416][T29986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10619'. [ 1123.654293][T29987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10618'. [ 1123.884910][T29991] bridge5: port 1(veth7) entered blocking state [ 1123.885466][T29991] bridge5: port 1(veth7) entered disabled state [ 1123.885694][T29991] veth7: entered allmulticast mode [ 1123.911476][T29991] veth7: entered promiscuous mode [ 1124.311937][T30011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10627'. [ 1124.496973][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.906037][T30024] tmpfs: Unknown parameter 'u' [ 1125.975282][ T38] audit: type=1326 audit(1796854951.189:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1125.975996][ T38] audit: type=1326 audit(1796854951.189:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1125.976335][ T38] audit: type=1326 audit(1796854951.189:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1125.976978][ T38] audit: type=1326 audit(1796854951.189:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1125.977569][ T38] audit: type=1326 audit(1796854951.189:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1126.088886][ T38] audit: type=1326 audit(1796854951.292:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1126.089966][ T38] audit: type=1326 audit(1796854951.292:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1126.093658][ T38] audit: type=1326 audit(1796854951.292:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30022 comm="syz.0.10632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa920bdf6c9 code=0x7ffc0000 [ 1126.248422][T30028] trusted_key: encrypted_key: master key parameter is missing [ 1126.485380][T30029] lo speed is unknown, defaulting to 1000 [ 1126.721147][T30032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10638'. [ 1129.001215][ T38] audit: type=1326 audit(1796854954.024:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30106 comm="syz.4.10668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1129.001525][ T38] audit: type=1326 audit(1796854954.024:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30106 comm="syz.4.10668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e4acf6c9 code=0x7ffc0000 [ 1130.067181][T30150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10687'. [ 1130.638448][T30162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10693'. [ 1131.041470][T30180] netlink: 'syz.1.10701': attribute type 1 has an invalid length. [ 1131.041493][T30180] netlink: 'syz.1.10701': attribute type 4 has an invalid length. [ 1131.041507][T30180] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.10701'. [ 1131.974914][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10713'. [ 1135.552177][T30204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.643874][T30204] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1135.732097][T30204] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1135.803724][T30204] bond0 (unregistering): Released all slaves [ 1135.949346][T30256] netlink: 'syz.1.10734': attribute type 4 has an invalid length. [ 1135.949382][T30256] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10734'. [ 1136.065693][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10736'. [ 1136.257329][T30264] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10739'. [ 1136.652504][T30275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10741'. [ 1136.652584][T30275] netlink: 17 bytes leftover after parsing attributes in process `syz.0.10741'. [ 1136.652596][T30275] tipc: Invalid UDP bearer configuration [ 1136.652633][T30275] tipc: Enabling of bearer rejected, failed to enable media [ 1137.021858][T30283] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1137.021891][T30283] Error validating options; rc = [-22] [ 1139.966812][T26849] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1139.966853][T26849] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.325670][T16991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1140.346172][T16991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1140.406454][T16991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1140.408869][T16991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1140.411547][T16991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1141.122812][T30337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10773'. [ 1141.791738][T26849] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.791777][T26849] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.851413][T30349] tipc: Enabling of bearer rejected, failed to enable media [ 1141.898281][T30341] lo speed is unknown, defaulting to 1000 [ 1142.041370][T30332] lo speed is unknown, defaulting to 1000 [ 1143.490013][T16991] Bluetooth: hci2: command tx timeout [ 1143.650562][T26849] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.650600][T26849] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.079741][T26849] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.079781][T26849] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.300236][T30332] chnl_net:caif_netlink_parms(): no params data found [ 1144.431619][T30407] can: request_module (can-proto-0) failed. [ 1145.096277][T30332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.097106][T30332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.097367][T30332] bridge_slave_0: entered allmulticast mode [ 1145.130451][T30332] bridge_slave_0: entered promiscuous mode [ 1145.210815][T30332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.211000][T30332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.211339][T30332] bridge_slave_1: entered allmulticast mode [ 1145.214678][T30332] bridge_slave_1: entered promiscuous mode [ 1145.593877][T30332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.626358][T30332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.699581][T16991] Bluetooth: hci2: command tx timeout [ 1145.937702][T30453] netlink: 'syz.2.10822': attribute type 1 has an invalid length. [ 1146.179497][T30468] overlayfs: failed to clone lowerpath [ 1146.198066][T30470] netlink: 260 bytes leftover after parsing attributes in process `syz.4.10830'. [ 1146.198191][T30470] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10830'. [ 1146.198210][T30470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10830'. [ 1146.572337][T30481] netlink: 120 bytes leftover after parsing attributes in process `syz.4.10835'. [ 1147.712548][T26849] team0: Port device geneve0 removed [ 1147.917483][T16991] Bluetooth: hci2: command tx timeout [ 1149.173313][T26849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.237794][T26849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.283041][T26849] bond0 (unregistering): Released all slaves [ 1150.131836][T16991] Bluetooth: hci2: command tx timeout [ 1150.292178][T26849] bond1 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 1150.351124][T26849] bond1 (unregistering): Released all slaves [ 1151.246048][T26849] bond2 (unregistering): Released all slaves [ 1151.262094][T26849] bond3 (unregistering): Released all slaves [ 1151.393850][T30453] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1151.606717][T30495] lo: entered allmulticast mode [ 1151.644747][T30495] tunl0: entered allmulticast mode [ 1151.659963][T30495] gre0: entered allmulticast mode [ 1151.695792][T30495] gretap0: left promiscuous mode [ 1151.695821][T30495] gretap0: entered allmulticast mode [ 1151.742260][T30495] erspan0: entered allmulticast mode [ 1151.789805][T30495] ip_vti0: entered allmulticast mode [ 1151.833891][T30495] ip6_vti0: entered allmulticast mode [ 1151.857936][T30495] sit0: left promiscuous mode [ 1151.857969][T30495] sit0: entered allmulticast mode [ 1151.858915][T30495] ip6tnl0: entered allmulticast mode [ 1151.876642][T30495] ip6gre0: entered allmulticast mode [ 1151.902595][T30495] syz_tun: entered allmulticast mode [ 1151.965865][T30495] nlmon0: entered allmulticast mode [ 1151.970172][T30495] batadv0: entered allmulticast mode [ 1151.982194][T30495] vxcan0: entered allmulticast mode [ 1151.993129][T30495] vxcan1: entered allmulticast mode [ 1152.041026][T30495] veth0: entered allmulticast mode [ 1152.082924][T30495] veth1: entered allmulticast mode [ 1152.209168][T30495] wg0: entered allmulticast mode [ 1152.294681][T30495] wg1: entered allmulticast mode [ 1152.401764][T30495] wg2: entered allmulticast mode [ 1152.464904][T30495] veth0_to_bridge: entered allmulticast mode [ 1152.513979][T30495] veth1_to_bridge: entered allmulticast mode [ 1152.546403][T30495] bridge_slave_1: entered allmulticast mode [ 1152.580272][T30495] veth0_to_bond: entered allmulticast mode [ 1152.651513][T30495] veth1_to_bond: entered allmulticast mode [ 1152.731652][T30495] veth0_to_team: entered allmulticast mode [ 1152.750371][T30495] team_slave_0: entered allmulticast mode [ 1152.774169][T30495] veth1_to_team: entered allmulticast mode [ 1152.782581][T30495] team_slave_1: entered allmulticast mode [ 1152.783594][T30495] veth0_to_batadv: entered allmulticast mode [ 1152.809154][T30495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.857784][T30495] veth1_to_batadv: entered allmulticast mode [ 1152.864812][T30495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1152.865928][T30495] batadv_slave_1: entered allmulticast mode [ 1152.884927][T30495] xfrm0: entered allmulticast mode [ 1152.943091][T30495] veth0_to_hsr: entered allmulticast mode [ 1152.973596][T30495] hsr_slave_0: entered allmulticast mode [ 1152.980254][T30495] veth1_to_hsr: entered allmulticast mode [ 1152.986167][T30495] hsr_slave_1: entered allmulticast mode [ 1153.001617][T30495] hsr0: entered allmulticast mode [ 1153.012125][T30495] veth1_virt_wifi: entered allmulticast mode [ 1153.115300][T30495] veth0_virt_wifi: entered allmulticast mode [ 1153.132572][T30495] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1153.133577][T30495] veth1_vlan: entered allmulticast mode [ 1153.152153][T30495] veth0_vlan: entered allmulticast mode [ 1153.180760][T30495] vlan0: entered allmulticast mode [ 1153.181015][T30495] vlan1: entered allmulticast mode [ 1153.224162][T30495] macvlan0: entered allmulticast mode [ 1153.264439][T30495] macvlan1: entered allmulticast mode [ 1153.270827][T30495] ipvlan0: entered allmulticast mode [ 1153.271045][T30495] ipvlan1: entered allmulticast mode [ 1153.272373][T30495] veth1_macvtap: entered allmulticast mode [ 1153.300985][T30495] veth0_macvtap: entered allmulticast mode [ 1153.361030][T30495] macvtap0: entered allmulticast mode [ 1153.423744][T30495] geneve0: entered allmulticast mode [ 1153.509292][T30495] geneve1: entered allmulticast mode [ 1153.594781][T30495] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1153.690171][T30495] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1153.809078][T30495] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1153.872015][T30495] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1153.961404][T30495] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1154.101004][T30495] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1154.108652][T30495] ieee802154 phy1 wpan1: entered allmulticast mode [ 1154.149056][T30495] ip6gretap1: entered allmulticast mode [ 1154.166992][T30495] geneve2: entered allmulticast mode [ 1154.172232][T30495] syztnl1: entered allmulticast mode [ 1154.172424][T30495] n¼: entered allmulticast mode [ 1154.172693][T30495] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1154.204867][T30495] ip6gretap2: entered allmulticast mode [ 1154.287011][T30495] vxlan0: left promiscuous mode [ 1154.287034][T30495] vxlan0: entered allmulticast mode [ 1154.296271][T30495] bridge1: entered allmulticast mode [ 1154.318871][T30495] syztnl0: entered allmulticast mode [ 1154.331579][T30495] vlan3: entered allmulticast mode [ 1154.362560][T30495] bridge2: left promiscuous mode [ 1154.370874][T30495] erspan1: entered allmulticast mode [ 1154.376204][T30495] gtp0: entered allmulticast mode [ 1154.380411][T30495] ip6tnl1: entered allmulticast mode [ 1154.417664][T30332] team0: Port device team_slave_0 added [ 1154.441720][ T1826] syz1: Port: 1 Link DOWN [ 1154.456725][T26885] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.457201][T26885] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.504559][T30332] team0: Port device team_slave_1 added [ 1154.505407][T26885] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.505442][T26885] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.686344][T26885] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.686381][T26885] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.686530][T26885] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1154.686560][T26885] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.862879][T30332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.862898][T30332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.862928][T30332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.865514][T30332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.865530][T30332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.865558][T30332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.323090][T30332] hsr_slave_0: entered promiscuous mode [ 1155.324972][T30332] hsr_slave_1: entered promiscuous mode [ 1155.326180][T30332] debugfs: 'hsr0' already exists in 'hsr' [ 1155.326206][T30332] Cannot create hsr debugfs directory [ 1155.326429][T30560] lo speed is unknown, defaulting to 1000 [ 1155.555778][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.162598][T30596] input: syz1 as /devices/virtual/input/input29 [ 1156.587861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1156.630632][T30615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10891'. [ 1157.494436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.026126][T30527] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1158.262900][T30527] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1158.262922][T30527] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1158.262953][T30527] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1158.262970][T30527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.270420][T30527] usb 3-1: config 0 descriptor?? [ 1158.284130][T30527] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1158.382644][T26849] hsr_slave_0: left promiscuous mode [ 1158.484885][T26849] hsr_slave_1: left promiscuous mode [ 1158.527302][T30527] usb 3-1: USB disconnect, device number 39 [ 1158.699351][T26849] veth1_macvtap: left promiscuous mode [ 1158.699480][T26849] veth0_macvtap: left promiscuous mode [ 1158.701036][T26849] veth1_vlan: left promiscuous mode [ 1158.701232][T26849] >: left promiscuous mode [ 1159.244617][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.293139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.403024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.576730][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.724484][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.953509][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.056501][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.122078][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.217597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.484041][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.664508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1161.340186][T26849] team0 (unregistering): Port device team_slave_1 removed [ 1161.639312][T26849] team0 (unregistering): Port device team_slave_0 removed [ 1164.910457][T30659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10908'. [ 1166.233180][T30652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1166.798952][T30332] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1166.894857][T30678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10915'. [ 1166.948824][T30332] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1166.998482][T30332] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1167.210924][T30332] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1167.517649][T30332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.590182][T30332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.628407][T26834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.628566][T26834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.684524][T26867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.684813][T26867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.320183][T30332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.551965][T26849] IPVS: stop unused estimator thread 0... [ 1169.045139][T30735] lo speed is unknown, defaulting to 1000 [ 1169.569133][T30332] veth0_vlan: entered promiscuous mode [ 1169.601373][T30332] veth1_vlan: entered promiscuous mode [ 1169.695345][T30749] veth0_vlan: left promiscuous mode [ 1171.051799][T30782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10953'. [ 1172.134463][T30332] veth0_macvtap: entered promiscuous mode [ 1172.426206][T30332] veth1_macvtap: entered promiscuous mode [ 1172.529826][T30332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.561123][T30332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.627437][T26862] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.627749][T26862] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.628003][T26862] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.628252][T26862] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.295301][T26858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.295321][T26858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.411200][T26826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.411224][T26826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1176.388562][T30850] bpf: Bad value for 'uid' [ 1176.786142][T30862] netlink: 'syz.1.10987': attribute type 25 has an invalid length. [ 1178.758963][T30534] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1178.792903][T30907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11007'. [ 1178.924420][T30534] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1178.924452][T30534] usb 7-1: config 0 has no interface number 0 [ 1178.924511][T30534] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1178.927499][T30534] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1178.927523][T30534] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.927537][T30534] usb 7-1: Product: syz [ 1178.927549][T30534] usb 7-1: Manufacturer: syz [ 1178.927559][T30534] usb 7-1: SerialNumber: syz [ 1179.106040][T30534] usb 7-1: config 0 descriptor?? [ 1179.107037][T30893] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1179.177452][T30534] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 96:3f:c5:59:35:17 [ 1179.379600][T30915] lo speed is unknown, defaulting to 1000 [ 1179.471267][T30534] usb 7-1: USB disconnect, device number 2 [ 1179.481764][T30534] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1183.694681][T30986] overlayfs: missing 'lowerdir' [ 1183.718756][T30528] 1024-page vmalloc region starting at 0xffffc9000e113000 allocated at kcov_ioctl+0x58/0x650 [ 1183.718812][T30528] list_del corruption. next->prev should be ffffc9001abcf000, but was 0000000000000000. (next=ffffc9000e113000) [ 1183.719493][T30528] ------------[ cut here ]------------ [ 1183.719502][T30528] kernel BUG at lib/list_debug.c:67! [ 1183.719548][T30528] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1183.719579][T30528] CPU: 1 UID: 0 PID: 30528 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1183.719602][T30528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1183.719617][T30528] Workqueue: usb_hub_wq hub_event [ 1183.719648][T30528] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1183.719680][T30528] Code: dc b9 7d fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d be 9d fd 49 8b 56 08 48 c7 c7 00 e3 3d 8b 48 89 de 4c 89 f1 e8 27 8e a4 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1183.719699][T30528] RSP: 0018:ffffc9001308f718 EFLAGS: 00010246 [ 1183.719716][T30528] RAX: 000000000000006d RBX: ffffc9001abcf000 RCX: a22e1073e902cb00 [ 1183.719731][T30528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.719744][T30528] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.719757][T30528] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92001c22601 [ 1183.719773][T30528] R13: dffffc0000000000 R14: ffffc9000e113000 R15: ffffc9000e113008 [ 1183.719790][T30528] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1183.719807][T30528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.719822][T30528] CR2: 00007f1b51f776b0 CR3: 00000000362e8000 CR4: 00000000003526f0 [ 1183.719842][T30528] Call Trace: [ 1183.719852][T30528] [ 1183.719863][T30528] kcov_remote_start+0x2b0/0x6f0 [ 1183.719896][T30528] hub_event+0x158/0x4a20 [ 1183.719921][T30528] ? __lock_acquire+0xab9/0xd20 [ 1183.719963][T30528] ? do_raw_spin_lock+0x121/0x290 [ 1183.719988][T30528] ? look_up_lock_class+0x74/0x170 [ 1183.720021][T30528] ? register_lock_class+0x51/0x320 [ 1183.720053][T30528] ? __lock_acquire+0xab9/0xd20 [ 1183.720086][T30528] ? __pfx_hub_event+0x10/0x10 [ 1183.720109][T30528] ? process_scheduled_works+0x9ef/0x17b0 [ 1183.720140][T30528] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.720172][T30528] ? process_scheduled_works+0x9ef/0x17b0 [ 1183.720198][T30528] ? process_scheduled_works+0x9ef/0x17b0 [ 1183.720225][T30528] process_scheduled_works+0xae1/0x17b0 [ 1183.720268][T30528] ? __pfx_process_scheduled_works+0x10/0x10 [ 1183.720305][T30528] worker_thread+0x8a0/0xda0 [ 1183.720333][T30528] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1183.720371][T30528] ? __kthread_parkme+0x7b/0x200 [ 1183.720406][T30528] kthread+0x711/0x8a0 [ 1183.720446][T30528] ? __pfx_worker_thread+0x10/0x10 [ 1183.720474][T30528] ? __pfx_kthread+0x10/0x10 [ 1183.720505][T30528] ? rt_spin_unlock+0x150/0x200 [ 1183.720533][T30528] ? rt_spin_unlock+0x161/0x200 [ 1183.720558][T30528] ? __pfx_kthread+0x10/0x10 [ 1183.720591][T30528] ret_from_fork+0x4bc/0x870 [ 1183.720619][T30528] ? __pfx_ret_from_fork+0x10/0x10 [ 1183.720649][T30528] ? __switch_to_asm+0x39/0x70 [ 1183.720670][T30528] ? __switch_to_asm+0x33/0x70 [ 1183.720691][T30528] ? __pfx_kthread+0x10/0x10 [ 1183.720728][T30528] ret_from_fork_asm+0x1a/0x30 [ 1183.720761][T30528] [ 1183.720768][T30528] Modules linked in: [ 1183.720797][T30528] ---[ end trace 0000000000000000 ]--- [ 1183.720807][T30528] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1183.720955][T30528] Code: dc b9 7d fd 43 80 3c 2c 00 74 08 4c 89 ff e8 7d be 9d fd 49 8b 56 08 48 c7 c7 00 e3 3d 8b 48 89 de 4c 89 f1 e8 27 8e a4 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1183.720975][T30528] RSP: 0018:ffffc9001308f718 EFLAGS: 00010246 [ 1183.720994][T30528] RAX: 000000000000006d RBX: ffffc9001abcf000 RCX: a22e1073e902cb00 [ 1183.721009][T30528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.721022][T30528] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.721035][T30528] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92001c22601 [ 1183.721051][T30528] R13: dffffc0000000000 R14: ffffc9000e113000 R15: ffffc9000e113008 [ 1183.721067][T30528] FS: 0000000000000000(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1183.721084][T30528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1183.721098][T30528] CR2: 00007f1b51f776b0 CR3: 000000003de98000 CR4: 00000000003526f0 [ 1183.721123][T30528] Kernel panic - not syncing: Fatal exception [ 1183.721473][T30528] Kernel Offset: disabled