last executing test programs: 40m40.651509361s ago: executing program 1 (id=166): r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 40m40.071432849s ago: executing program 1 (id=167): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000740)=['.*\x00'], 0x3}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 40m39.492978908s ago: executing program 2 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000640)='devices.deny\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b00010001000b"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 40m39.151344343s ago: executing program 1 (id=172): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = socket(0x1e, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x100) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000fcffffff000000000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0110000000000000000000000000000000f2ffffffffffffff000000"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r5, &(0x7f0000000c00)='./file1\x00', r5, 0x0, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r9 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000200)={0x4, @win={{0x7fff, 0x7fff, 0xfffffffe}, 0x7, 0x8, 0x0, 0x3, 0x0, 0xff}}) 40m38.186225108s ago: executing program 1 (id=175): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0], 0x3, 0x6c9, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 40m37.551292928s ago: executing program 1 (id=180): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000740)=['.*\x00'], 0x3}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 40m36.948793927s ago: executing program 2 (id=182): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b100f4661504be508b7065d2f6645766dc27d58a5b95c59b6347e126556a5485fb463cd253f62db7af4f59c7c64c64e9b22b1a210fe3a", 0x57}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc050) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 40m36.812378479s ago: executing program 2 (id=185): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) close_range(r0, r0, 0x0) 40m36.699528171s ago: executing program 1 (id=186): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x2218004, &(0x7f0000000440)=ANY=[], 0x1, 0x1d2, &(0x7f0000001ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x1, &(0x7f0000000b80)) 40m35.677995837s ago: executing program 32 (id=186): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x2218004, &(0x7f0000000440)=ANY=[], 0x1, 0x1d2, &(0x7f0000001ec0)="$eJzKKC78z87AwPD3Y00ygwADGDAy8DBcYGBkYGFgYFBnhIgxMDEwMHCBJcHgBZSeCZW2gfIFoPRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbSzacDjzBwHLd/ppKswSnwx95DockVgYdpiM+HlkzGks4J0lpirGxZSqcPXOdgYFB4wjDoxXMG+s88xrrClOn5qXlJVVlVWXNmzhx48zGzsbGlRProtL8VjG2pLhsaupkZHLYoiawmdlQfZKN9oR37aseJjmw9nj4Ne9nYGBIZb5kvLBI6tSKqpkTvihxQv24QkJDw0niioRFgwnDkTr2BleGilvJKQ0MaQphjElqbGJtW87MCWHmZ3NboNCSfIIp9CjH0pkSFgeEqk7+tNR865DoNmPbUwe2MzyHj/OsKegTNDouweC0UPC/DMiYhIaGMo21TEttF3wp0vgr4cXJ4JTB4G7PtKwZGpAsDSByJZQnC9aTkLzCQ0dT0yglOaFhU+wXBoYCQ2WGrXs4Vws0MCBFmwoDA8N2RljcQsA1RgZuhlEwCkbBKBgFo2AUjIJRMApGwSgYBSMGAAIAAP//7bOSJA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x1, &(0x7f0000000b80)) 40m35.661600417s ago: executing program 2 (id=188): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0], 0x3, 0x6c9, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 40m35.287557493s ago: executing program 2 (id=191): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) 40m35.038721726s ago: executing program 0 (id=193): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b100f4661504be508b7065d2f6645766dc27d58a5b95c59b6347e126556a5485fb463cd253f62db7af4f59c7c64c64e9b22b1a210fe3a", 0x57}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc050) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 40m34.939527828s ago: executing program 0 (id=194): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000740)=['.*\x00'], 0x3}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 40m34.655388742s ago: executing program 2 (id=195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0x58, 0x28, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0xfff2}, {0x1, 0xe}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1c, 0xec}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40488c0}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000002240), 0x80) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x9f) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) 40m33.938937323s ago: executing program 33 (id=195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0x58, 0x28, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0xfff2}, {0x1, 0xe}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x1c, 0xec}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7f}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40488c0}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200)) pipe2$watch_queue(&(0x7f0000002240), 0x80) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x9f) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) 40m33.929323453s ago: executing program 0 (id=197): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 40m33.775043086s ago: executing program 0 (id=198): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0], 0x3, 0x6c9, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 40m33.451497721s ago: executing program 0 (id=200): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000), 0x0) 40m33.401893942s ago: executing program 3 (id=201): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000a80)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="922f51c2652f6ebeb647ba19a7f202a8e9581eee20d85e47931757ced80465193b100f4661504be508b7065d2f6645766dc27d58a5b95c59b6347e126556a5485fb463cd253f62db7af4f59c7c64c64e9b22b1a210fe3a", 0x57}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc050) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 40m33.274868904s ago: executing program 3 (id=202): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) 40m32.380600227s ago: executing program 3 (id=203): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/124, 0x7c}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000001800000000000000000000000000000000000000000000001800000000000000840c000000000000000000000000000018000000000000000010000000000000010000000000000067000000000000000fc7190fc1f4f20f1a42bf262e66430f383e1a0f01cbc7442400b9000000c74424029daf0d87ff2c2466bad10466b8440066efc441996bb700000080420fc7ac7502000000b9cb020000b8edf60000ba000000000f30c300000000000000001800000000000000020000000000000001000000000000005800000000000000c463e96874dc0e00b9600900000f324d0fc7a8e40000003666440f579200900000b8010000000f01d9c4a2fd999efc27000067670fc7180f01c56467640fc7ae0e000000f267f4c3000000000000000018000000000000000700000000000000010000000000000067000000000000000f44790f2665f2400f1bf50f7766baf80cb8bed52a8aef66bafc0cb067ee66baf80cb86c10ab83ef66bafc0c66b8060066efc744240093000000c744240200000100ff2c243e3e0fc77afc643e0f01c50fc71cc70f35c301000000000000006d00000000000000673e660f38818545000000b97f0800000f32c401d5fd0f65643e420f01d1460f080fc76f6ec74424005a000000c7442402feffffffff1c24f20f0fce9a363e66420f68d648b804000000000000000f23c80f21f835040020000f23f8c301000000000000006300000000000000c744240000000000c7442402fd9d0000c7442406000000000f011424410fc770140f01f9b805000000b9440000000f01c166b8c0008ed0440f20030fc71ac442fd91b4d1fee700000f09660fc7b35f260000c300000000000000001800000000000000040000000000000000000000000000001800000000000000070000000000000000000000000000001800000000000000800000000000000000000020000000000001000000000000005400000000000000440f01cac4a1f9e7790766b8b8008ec8f226f3f345df43d0c4e1ddd5e9b9800000c00f3235001000000f30430f381e1066b80b000f00d00f79a8da000000430f7021fdc300000000000000001800000000000000060000000000000000000000000000001800000000000000020000000000000000000000000000001800000000000000e50000000000000000000000000000001800000000000000010000800000000000000000000000001800000000000000c0ffffffffffffff000000000000000018000000000000000000ffffffffffff01000000000000006000000000000000c4813dd2190f4b7783c4e1fc51ab000000000f20c035000004000f22c00fc75d0a0f20e035000200000f22e0c4217910b000000080f046ff8f00700000b9800000c00f3235000400000f30f3460f09c3010000000000000059000000000000000f20d835080000000f22d8f30f09410f4207c1a65300000000b9220000400f3266baf80cb8b2f47988ef66bafc0c66b80e0066ef410f01c966f226450f20c5430f01d1c402791800c301000000000000005b00000000000000430f792ac46221b870003e4d0fc72b360f01c5430f0766baf80cb8f49cda8cef66bafc0cedb9800000c00f3235000400000f30f34c0fc78970f64be3660f3881a7000001003e470f00d6c30000000000000000180000000000000015f500000000000000000000000000001800000000000000040000000000000000000000000000001800000000000000000000000000000000000000000000001800000000000000000200000000000000000000000000001800000000000000030000000000000001000000000000007e0000000000000048b80b000000000000000f23c00f21f835010001000f23f8c4e1f1da133636f30f5bc4c463756d1ccd0000000000363e0f09b805000000b9060000000f01d966baf80cb8eee93887ef66bafc0c66edc4217e2c07c4c289ad787ec744240032010000c744240207000100ff1c24c301000000000000007700000000000000640fc75eb20f01c448b8dc000000000000000f23c80f21f8350c00c0000f23f8440f20c03506000000440f22c00fc79a39000000c744240000000000c744240200000100c7442406000000000f01142466ba2000ed66b853000f00d8dad73e2ef3430f53530dc3000000000000000018000000000000000400"/1611], 0x64b}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8e}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x20}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x5adae000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r7, 0x0, 0xffffffdb) 40m32.380342187s ago: executing program 0 (id=204): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000740)=['.*\x00'], 0x3}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 40m31.901555164s ago: executing program 34 (id=204): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000740)=['.*\x00'], 0x3}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 40m30.605921925s ago: executing program 3 (id=206): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0], 0x3, 0x6c9, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 40m30.361718878s ago: executing program 3 (id=207): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x4ec, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x118, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "b665b88e1104a9e19e"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "66af62fa1c4f5787ced2a60f5a0cbdf2f51624e0b65f857224fa269e95a10501f869b61811cf737c15537216891e8008970af657fddd23b10753e3f9c1a0877cc787c15de933898e72f9cc5fe11c13eaf54ba378407f36de59c788f50e0d65fd1a07fe657c8c34d7919d552e4b4d7fa10f8603b2ec9a3035097adb677b2ce4a660bde9"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x39c, 0x3, 0x0, 0x1, [{0x2b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "4898f71c7976dea970d13190680da7f3918c3ad7a0284121"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5e9c}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd9, 0x1, "38aa6f4a0efa598399ae7c421bc02142d4d17f92a5e2de10d985f5b36ae58f41e7644125de1faceb2835837217a4e208f3dd5efd08708eba5df70464fff313c64eacf4a06e0fdbfe98a21d1ad93809a71b6e045e89d69148140bfb766d4c51d620fda11fd02262b3082b9650221ad26f3212abbb3efbf8dcf172b898ea840bb9b799ddbf8361a6c8eca99459abc2960080d7b2695f0cc987ad71d67148ea9214d1f44e40989e7d9776e17d080a8467cc8c304a69dfe4b24917f3807a754df8fc7f7f3f810afd5121e309e50b220ed94853f506a683"}, @NFTA_DATA_VALUE={0x35, 0x1, "537243e9a53f42ee6d402b06bf7a54fdc850661036bb30d4e626e899f7c7225dc47d39d197526626555310a2547d28aadb"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x48, 0x1, "2a6f6ebd8f423f0753379a6fab15749c9cb84696c94eef9fa8392c6cab1500c9bb10741af95e1eafe93b2e90c25e387f8640a5d94b95e56403c39b016786b3db7be87eec"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0x29, 0x6, 0x1, 0x0, "a36a5a21797ba426374e7134d8bac19ff9c57823536cae5ca6e5f43516d9687c895e9f0f18"}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x548}, 0x1, 0x0, 0x0, 0x8040}, 0x894) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 40m29.787500067s ago: executing program 3 (id=208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 40m29.495269501s ago: executing program 35 (id=208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mkdir(0x0, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 40m16.946660454s ago: executing program 5 (id=196): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = socket(0x1e, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x100) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d3566ec8defa14c5753abaaa", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000fcffffff000000000080000000000000", @ANYRES32=0x1, @ANYBLOB='\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0110000000000000000000000000000000f2ffffffffffffff000000"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(r5, &(0x7f0000000c00)='./file1\x00', r5, 0x0, 0x2) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0xf34, @empty}, 0x10, 0x0, 0xffffff06, 0x0, 0xffffffffffffff86, 0x4040004}, 0x4000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x24040800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r9 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000200)={0x4, @win={{0x7fff, 0x7fff, 0xfffffffe}, 0x7, 0x8, 0x0, 0x3, 0x0, 0xff}}) 40m15.92489233s ago: executing program 5 (id=212): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0], 0x3, 0x6c9, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x180) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 40m15.531415376s ago: executing program 5 (id=214): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 40m14.827512726s ago: executing program 5 (id=217): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)='L\x00\x00\x00', 0x4) 40m14.190142816s ago: executing program 36 (id=217): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)='L\x00\x00\x00', 0x4) 26.393686612s ago: executing program 4 (id=6369): syz_usb_connect(0x0, 0x24, &(0x7f0000004480)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x1801, 0x0, 0x0}, {0x99, 0x0, 0x0, 0x0}, {0x6, 0x2000, 0x0, 0x0}], 0x3}) 22.133394488s ago: executing program 4 (id=6381): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) 22.01540586s ago: executing program 4 (id=6382): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) rmdir(&(0x7f0000000040)='./file0\x00') syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 19.866781433s ago: executing program 4 (id=6385): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @union]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 18.159147849s ago: executing program 4 (id=6388): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8e}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) remap_file_pages(&(0x7f0000a31000/0x2000)=nil, 0x2000, 0x2000005, 0x20, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$inet(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40) 16.240518049s ago: executing program 4 (id=6394): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 8.167908654s ago: executing program 8 (id=6407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 7.335385197s ago: executing program 6 (id=6410): r0 = socket$inet(0x2b, 0x801, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r0], 0x0) 6.45352157s ago: executing program 8 (id=6411): syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x8840) r0 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.354303182s ago: executing program 8 (id=6412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f000905"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10dc, &(0x7f0000001600)=ANY=[@ANYBLOB="b600004ebc8605407074b4cfcde2394419d331e188b3408b2a05a1f60b6a95abbc5f043ac03692169e07fa762235d76ad6b4a697609ff388157fc093ec0596bee3b8fb19055d161b89f434288a5f08d0db6420d3b5122de0bac251d78943752e9b8ac2e9904c584f30a09e2778b6883f19b3706377991c9c0ec902de6ea4586c8726e557348564a1364fd5258d81c3c9ca1d66f29dff3741ac7b2d739aff193dff63c2f9e579610902d47acc08e998a5a852fd943998ae926bb000001900004e01c2ebd99eaf3acf056a6d9f7ea32241d92618dbce0b0bcc00000000f90f004e4600000000e0df4a27e29ffb86fb0b2e4fd336ab1221"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x4]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.189323094s ago: executing program 7 (id=6414): mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @local, @val={@void, {0x8100, 0x2, 0x0, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="246dcdd56399", @empty, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) io_setup(0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xd4, 0x1, 0x3, 0x0, 0x0, 0x20000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000000000000, 0x100000000, 0x4, 0x400000000, 0x2, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000043000900000002bb6da7e4b6a47f11"], 0x14}}, 0x24000044) syz_open_dev$ptys(0xc, 0x3, 0x1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 5.289472748s ago: executing program 7 (id=6415): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8e}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) remap_file_pages(&(0x7f0000a31000/0x2000)=nil, 0x2000, 0x2000005, 0x20, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$inet(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) 4.107523626s ago: executing program 6 (id=6416): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.615121874s ago: executing program 6 (id=6417): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, 0x0, 0x280}}], 0x1, 0x40048d1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xc15, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0x1}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 3.277674509s ago: executing program 7 (id=6418): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x1801, 0x0, 0x0}, {0x99, 0x0, 0x0, 0x0}, {0x6, 0x2000, 0x0, 0x0}], 0x3}) 2.57951602s ago: executing program 8 (id=6419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) chdir(0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.56154203s ago: executing program 6 (id=6420): syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x8840) r0 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.327987244s ago: executing program 7 (id=6421): syz_open_dev$usbmon(0x0, 0x1, 0x10280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) close(r3) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_io_uring_setup(0x109, 0x0, 0x0, &(0x7f0000000080)) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) chdir(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.91253394s ago: executing program 6 (id=6422): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0xc02, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000440)="97"}) 930.402266ms ago: executing program 37 (id=6394): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) 919.143416ms ago: executing program 8 (id=6424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 758.826818ms ago: executing program 7 (id=6425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 729.804579ms ago: executing program 6 (id=6426): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x3, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0x0, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8e}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x901f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) remap_file_pages(&(0x7f0000a31000/0x2000)=nil, 0x2000, 0x2000005, 0x20, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socket$inet(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) 640.52596ms ago: executing program 8 (id=6427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f000905"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10dc, &(0x7f0000001600)=ANY=[@ANYBLOB="b600004ebc8605407074b4cfcde2394419d331e188b3408b2a05a1f60b6a95abbc5f043ac03692169e07fa762235d76ad6b4a697609ff388157fc093ec0596bee3b8fb19055d161b89f434288a5f08d0db6420d3b5122de0bac251d78943752e9b8ac2e9904c584f30a09e2778b6883f19b3706377991c9c0ec902de6ea4586c8726e557348564a1364fd5258d81c3c9ca1d66f29dff3741ac7b2d739aff193dff63c2f9e579610902d47acc08e998a5a852fd943998ae926bb000001900004e01c2ebd99eaf3acf056a6d9f7ea32241d92618dbce0b0bcc00000000f90f004e4600000000e0df4a27e29ffb86fb0b2e4fd336ab1221"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x4]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 7 (id=6428): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, 0x0, 0x280}}], 0x1, 0x40048d1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xc15, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0x130, 0x26010000, 0x170, 0x130, 0x260, 0x220, 0x220, 0x260, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x170, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00], 0x4e24, 0x4e22, 0x4e22, 0x4e22, 0xbe, 0x1, 0x2, 0x4, 0x6}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @mss={0x2, 0x1}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) kernel console output (not intermixed with test programs): netlink: 36 bytes leftover after parsing attributes in process `syz.8.4731'. [ 1920.716303][T23775] syz.6.4728: attempt to access beyond end of device [ 1920.716303][T23775] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1920.729823][T23775] hfsplus: unable to find HFS+ superblock [ 1920.740068][T23775] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1920.750386][T23775] cramfs: wrong magic [ 1921.229070][ T5814] usb 5-1: config 0 descriptor?? [ 1921.575300][T23780] fuse: Unknown parameter '0x0000000000000003' [ 1922.123406][T23752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1922.246710][T23752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1922.780336][ T8] usb 5-1: USB disconnect, device number 70 [ 1924.773400][T23815] syz.8.4741: attempt to access beyond end of device [ 1924.773400][T23815] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1924.787683][T23815] hfsplus: unable to find HFS+ superblock [ 1925.709429][T23818] fuse: Unknown parameter '0x0000000000000003' [ 1926.074925][T23833] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4749'. [ 1927.658746][T23850] fuse: Unknown parameter '0x0000000000000003' [ 1927.906222][T23857] syz.7.4757: attempt to access beyond end of device [ 1927.906222][T23857] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1927.919878][T23857] hfsplus: unable to find HFS+ superblock [ 1927.963690][T16355] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1929.328770][T23866] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1929.337884][T23866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1930.447906][T16355] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.497227][T16355] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1930.634926][T23875] fuse: Unknown parameter '0x0000000000000003' [ 1931.198827][T16355] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1931.218560][T16355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.243838][T16355] usb 5-1: Product: syz [ 1931.255041][T16355] usb 5-1: can't set config #1, error -71 [ 1931.280913][T16355] usb 5-1: USB disconnect, device number 71 [ 1931.675177][ T5818] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1932.054899][ T5818] usb 7-1: Using ep0 maxpacket: 16 [ 1932.062092][ T5818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.072386][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1932.082101][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1932.099668][ T5818] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1932.110592][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.118810][ T5818] usb 7-1: Product: syz [ 1932.123050][ T5818] usb 7-1: Manufacturer: syz [ 1932.127754][ T5818] usb 7-1: SerialNumber: syz [ 1932.135311][ T5818] usb 7-1: config 0 descriptor?? [ 1932.148844][ T5818] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1932.155225][ T5818] gspca_stv06xx: st6422 sensor detected [ 1932.432195][ T5818] STV06xx: probe of 7-1:0.0 failed with error -71 [ 1932.451235][ T5818] usb 7-1: USB disconnect, device number 67 [ 1932.471553][ T5814] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1933.410081][ T5814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.441571][ T5814] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1933.478476][ T5814] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.509797][ T5814] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1933.525796][T23903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1933.541314][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.582218][ T5814] usb 9-1: config 0 descriptor?? [ 1933.638519][T23906] fuse: Unknown parameter 'fd0x0000000000000003' [ 1933.948248][ T5814] ath6kl: Failed to submit usb control message: -71 [ 1933.955738][ T5814] ath6kl: unable to send the bmi data to the device: -71 [ 1933.962924][ T5814] ath6kl: Unable to send get target info: -71 [ 1933.986264][ T5814] ath6kl: Failed to init ath6kl core: -71 [ 1934.037276][ T5814] ath6kl_usb: probe of 9-1:0.0 failed with error -71 [ 1934.084174][ T5814] usb 9-1: USB disconnect, device number 68 [ 1935.816727][T23931] fuse: Unknown parameter 'fd0x0000000000000003' [ 1936.153746][ T5837] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1936.414064][ T5837] usb 7-1: Using ep0 maxpacket: 32 [ 1936.434372][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1936.470152][ T5837] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1936.512625][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.574236][ T5837] usb 7-1: Product: syz [ 1936.578715][ T5837] usb 7-1: Manufacturer: syz [ 1936.601031][ T5837] usb 7-1: SerialNumber: syz [ 1936.734372][ T5837] usb 7-1: config 0 descriptor?? [ 1937.105195][T23952] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4793'. [ 1937.207098][ T5837] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1937.440876][ T5837] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1937.466111][ T5837] gs_usb: probe of 7-1:0.0 failed with error -121 [ 1937.734982][T23956] fuse: Unknown parameter 'fd0x0000000000000003' [ 1939.172316][ T5814] usb 7-1: USB disconnect, device number 68 [ 1939.903641][T23985] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1939.913447][T23985] batadv_slave_1: entered promiscuous mode [ 1940.370057][T23974] batadv_slave_1: left promiscuous mode [ 1940.567870][T23986] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1940.578765][T23986] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1943.322162][T16355] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1943.335164][T24006] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4808'. [ 1943.603913][T16355] usb 9-1: Using ep0 maxpacket: 32 [ 1943.614359][T16355] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1943.638596][T16355] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1943.667752][T16355] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.690123][T16355] usb 9-1: Product: syz [ 1943.713632][T16355] usb 9-1: Manufacturer: syz [ 1943.718310][T16355] usb 9-1: SerialNumber: syz [ 1943.731072][T16355] usb 9-1: config 0 descriptor?? [ 1945.105228][T16355] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1945.369266][T16355] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1945.417639][T16355] gs_usb: probe of 9-1:0.0 failed with error -121 [ 1945.632760][T24032] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1946.454454][T24039] trusted_key: encrypted_key: key user:syz not found [ 1947.344977][ T8] usb 9-1: USB disconnect, device number 69 [ 1947.793668][ T8] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1947.993747][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1948.013834][ T8] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1948.048319][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.071959][ T8] usb 9-1: config 0 has no interface number 0 [ 1948.079434][ T8] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1948.121099][ T8] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1948.152023][ T8] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1948.450435][ T8] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1948.624632][ T8] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1948.711852][ T8] usb 9-1: Manufacturer: syz [ 1948.740551][ T8] usb 9-1: config 0 descriptor?? [ 1948.802475][T24057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4823'. [ 1949.168529][ T8] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input10 [ 1949.209619][T24069] batadv_slave_1: entered promiscuous mode [ 1949.728567][T24065] batadv_slave_1: left promiscuous mode [ 1950.227440][T24076] batadv_slave_1: entered promiscuous mode [ 1950.570846][T24071] batadv_slave_1: left promiscuous mode [ 1950.714396][T15637] Bluetooth: hci2: ISO packet for unknown connection handle 238 [ 1950.727656][ T8] usb 9-1: USB disconnect, device number 70 [ 1950.733726][ C0] synaptics_usb 9-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1951.748050][T24086] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4831'. [ 1951.821096][T24089] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1952.583343][T24089] batadv_slave_1: entered promiscuous mode [ 1952.589650][T24089] batadv_slave_1: left promiscuous mode [ 1952.862257][T24098] trusted_key: encrypted_key: key user:syz not found [ 1953.015722][T24100] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4835'. [ 1953.823741][T19634] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 1954.205787][T24106] batadv_slave_1: entered promiscuous mode [ 1954.700089][T24103] batadv_slave_1: left promiscuous mode [ 1954.929568][T19634] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.063691][T19634] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1955.172836][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1955.172945][ T28] audit: type=1326 audit(1750333002.456:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24107 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225f8e929 code=0x7ffc0000 [ 1955.177809][T19634] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1955.201571][ T28] audit: type=1326 audit(1750333002.466:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24107 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225f8e929 code=0x7ffc0000 [ 1955.201626][ T28] audit: type=1326 audit(1750333002.476:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24107 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2225f8e929 code=0x7ffc0000 [ 1955.632484][T19634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.640712][T19634] usb 7-1: Product: syz [ 1955.645024][T19634] usb 7-1: Manufacturer: syz [ 1955.650249][T19634] usb 7-1: SerialNumber: syz [ 1955.650381][ T28] audit: type=1326 audit(1750333003.006:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24107 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225f8e929 code=0x7ffc0000 [ 1955.787242][ T28] audit: type=1326 audit(1750333003.006:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24107 comm="syz.7.4838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225f8e929 code=0x7ffc0000 [ 1955.960745][T19634] usb 7-1: 0:2 : does not exist [ 1955.985539][T19634] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1956.579965][T19634] usb 7-1: USB disconnect, device number 69 [ 1956.592519][T24123] netlink: 'syz.8.4843': attribute type 4 has an invalid length. [ 1956.699753][T23880] udevd[23880]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1958.129104][T24138] syz.7.4848: attempt to access beyond end of device [ 1958.129104][T24138] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1958.143252][T24138] hfsplus: unable to find HFS+ superblock [ 1958.164891][T24138] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1958.176003][T24138] cramfs: wrong magic [ 1960.815977][T24157] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4853'. [ 1962.683684][ T8] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1962.705937][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4861'. [ 1962.743651][T19634] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1962.874362][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 1962.886777][ T8] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1962.895836][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.907923][ T8] usb 9-1: config 0 has no interface number 0 [ 1962.925232][ T8] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1962.937498][ T8] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1962.950984][ T8] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1962.953796][T19634] usb 7-1: Using ep0 maxpacket: 8 [ 1962.970709][ T8] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1962.971747][T19634] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1962.980805][ T8] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1963.000423][ T8] usb 9-1: Manufacturer: syz [ 1963.000792][T19634] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.008755][ T8] usb 9-1: config 0 descriptor?? [ 1963.023290][T19634] usb 7-1: config 0 has no interface number 0 [ 1963.030168][T19634] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1963.041509][T19634] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1963.054746][T19634] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1963.068982][T19634] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1963.078240][T19634] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1963.086568][T19634] usb 7-1: Manufacturer: syz [ 1963.108494][T19634] usb 7-1: config 0 descriptor?? [ 1963.266410][ T8] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input11 [ 1963.362532][T19634] usb 7-1: Can not set alternate setting to 1, error: -71 [ 1963.375545][T19634] synaptics_usb: probe of 7-1:0.52 failed with error -71 [ 1963.398461][T19634] usb 7-1: USB disconnect, device number 70 [ 1963.534316][ C0] synaptics_usb 9-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1963.543542][ T8] usb 9-1: USB disconnect, device number 71 [ 1964.743877][T24196] trusted_key: encrypted_key: key user:syz not found [ 1964.850194][T24203] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1965.849522][T24211] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1966.944400][T24218] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4870'. [ 1967.303795][T16355] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1967.598857][T16355] usb 5-1: Using ep0 maxpacket: 8 [ 1967.668599][T16355] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1967.690221][T16355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1967.785070][T16355] usb 5-1: config 0 has no interface number 0 [ 1967.921145][T16355] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1967.934916][T16355] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1967.949509][T16355] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1967.959685][T16355] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1967.972809][T16355] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1967.982667][T16355] usb 5-1: Manufacturer: syz [ 1967.993721][T16355] usb 5-1: config 0 descriptor?? [ 1968.209058][T16355] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1968.246963][T16355] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 1968.274243][T16355] usb 5-1: USB disconnect, device number 72 [ 1968.369951][T24234] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1969.474618][T19634] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1969.693973][T19634] usb 9-1: Using ep0 maxpacket: 16 [ 1969.715269][T19634] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.725803][T19634] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1969.735592][T19634] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1969.750078][ T28] audit: type=1326 audit(1750333017.107:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24244 comm="syz.4.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd6b8e929 code=0x7ffc0000 [ 1969.753362][T19634] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1969.845728][T19634] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.893808][T19634] usb 9-1: Product: syz [ 1969.913769][T19634] usb 9-1: Manufacturer: syz [ 1969.918520][T19634] usb 9-1: SerialNumber: syz [ 1969.948865][T19634] usb 9-1: config 0 descriptor?? [ 1969.993056][T19634] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1970.000377][T19634] gspca_stv06xx: st6422 sensor detected [ 1970.213766][ T28] audit: type=1326 audit(1750333017.107:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24244 comm="syz.4.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd6b8e929 code=0x7ffc0000 [ 1970.247336][ T28] audit: type=1326 audit(1750333017.137:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24244 comm="syz.4.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3cd6b8e929 code=0x7ffc0000 [ 1970.286935][ T28] audit: type=1326 audit(1750333017.607:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24244 comm="syz.4.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd6b8e929 code=0x7ffc0000 [ 1970.328838][T19634] STV06xx: probe of 9-1:0.0 failed with error -71 [ 1970.360085][ T28] audit: type=1326 audit(1750333017.607:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24244 comm="syz.4.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd6b8e929 code=0x7ffc0000 [ 1970.382659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1970.450838][T19634] usb 9-1: USB disconnect, device number 72 [ 1971.194916][T24260] syz.7.4885: attempt to access beyond end of device [ 1971.194916][T24260] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1971.208485][T24260] hfsplus: unable to find HFS+ superblock [ 1972.325687][T24271] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4889'. [ 1972.863740][T19634] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1973.090763][T19634] usb 5-1: Using ep0 maxpacket: 8 [ 1973.130895][T19634] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1973.184420][T19634] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.220730][T19634] usb 5-1: config 0 has no interface number 0 [ 1973.233741][T19634] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1973.257596][T19634] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1973.278131][T19634] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1973.288115][T19634] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1973.301917][T19634] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1973.310104][T19634] usb 5-1: Manufacturer: syz [ 1973.345292][T19634] usb 5-1: config 0 descriptor?? [ 1973.591514][T19634] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1973.598815][T19634] synaptics_usb: probe of 5-1:0.52 failed with error -71 [ 1973.614534][T19634] usb 5-1: USB disconnect, device number 73 [ 1973.833599][T16355] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 1974.035743][T16355] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.047718][T16355] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1974.064122][T16355] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1974.081764][T16355] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1974.094279][T16355] usb 9-1: Manufacturer: syz [ 1974.109635][T16355] usb 9-1: config 0 descriptor?? [ 1974.341926][T24284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.360657][T24284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.380935][T16355] usb 9-1: USB disconnect, device number 73 [ 1974.543690][T19634] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1974.762561][T19634] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.783365][T19634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1974.805418][T19634] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1974.819035][T19634] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1974.828289][T19634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.839914][T19634] usb 5-1: config 0 descriptor?? [ 1975.079494][T19634] ath6kl: Failed to submit usb control message: -71 [ 1975.110162][T19634] ath6kl: unable to send the bmi data to the device: -71 [ 1975.145033][T19634] ath6kl: Unable to send get target info: -71 [ 1975.154702][T19634] ath6kl: Failed to init ath6kl core: -71 [ 1975.180894][T19634] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 1975.217075][T19634] usb 5-1: USB disconnect, device number 74 [ 1975.249387][T24303] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4900'. [ 1976.181618][T24317] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1976.979112][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.990768][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1978.304236][T24330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4904'. [ 1979.234817][T24347] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4912'. [ 1979.363815][T16355] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1979.571801][T16355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.582766][T16355] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1979.600421][T16355] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1979.610421][T16355] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1979.642510][T16355] usb 5-1: Manufacturer: syz [ 1979.643592][T22416] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 1979.670225][T16355] usb 5-1: config 0 descriptor?? [ 1979.855639][T22416] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.873537][T22416] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1979.895690][T22416] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1979.917808][T22416] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.926489][T22416] usb 9-1: Product: syz [ 1979.930791][T22416] usb 9-1: Manufacturer: syz [ 1979.935941][T22416] usb 9-1: SerialNumber: syz [ 1979.936913][T24340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.956466][T24340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.980981][T19634] usb 5-1: USB disconnect, device number 75 [ 1980.150489][T22416] usb 9-1: 0:2 : does not exist [ 1980.180835][T22416] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1980.212594][T22416] usb 9-1: USB disconnect, device number 74 [ 1980.247780][T24170] udevd[24170]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1981.936174][T24365] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4917'. [ 1983.132501][T24375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4921'. [ 1984.873764][ T5814] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1985.184161][ T5814] usb 9-1: Using ep0 maxpacket: 8 [ 1985.270159][ T5814] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1985.293589][ T5814] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.323928][ T5814] usb 9-1: config 0 has no interface number 0 [ 1985.342899][ T5814] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1985.380447][ T5814] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1985.418331][ T5814] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1985.429976][ T5814] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1985.459828][ T5814] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1985.478559][ T5814] usb 9-1: Manufacturer: syz [ 1985.499638][ T5814] usb 9-1: config 0 descriptor?? [ 1985.773407][ T5814] usb 9-1: Can not set alternate setting to 1, error: -71 [ 1985.784214][T24405] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4932'. [ 1985.889475][T24407] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1985.913750][T24407] batadv_slave_1: entered promiscuous mode [ 1986.428963][T24402] batadv_slave_1: left promiscuous mode [ 1986.553706][ T5814] synaptics_usb: probe of 9-1:0.52 failed with error -71 [ 1986.681343][ T5814] usb 9-1: USB disconnect, device number 75 [ 1986.995815][T24416] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1987.019092][T24416] batadv_slave_1: entered promiscuous mode [ 1987.482403][T24408] batadv_slave_1: left promiscuous mode [ 1989.583980][T24441] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1990.294790][T24439] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4941'. [ 1990.770962][T24452] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1990.795304][T24452] batadv_slave_1: entered promiscuous mode [ 1991.267039][T24442] batadv_slave_1: left promiscuous mode [ 1993.489993][T24475] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1994.185187][T24474] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4952'. [ 1994.610640][T24483] trusted_key: encrypted_key: key user:syz not found [ 1994.760687][T24489] binder_alloc: 24488: binder_alloc_buf, no vma [ 1999.533918][T24517] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4963'. [ 2000.540426][T24527] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4966'. [ 2002.833642][ T787] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2003.046083][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.097251][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2003.167373][ T787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2003.208497][T24553] delete_channel: no stack [ 2003.226575][ T787] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2003.270603][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.314850][ T787] usb 5-1: config 0 descriptor?? [ 2003.549956][ T787] ath6kl: Failed to submit usb control message: -71 [ 2003.558445][ T787] ath6kl: unable to send the bmi data to the device: -71 [ 2003.568727][ T787] ath6kl: Unable to send get target info: -71 [ 2003.597101][ T787] ath6kl: Failed to init ath6kl core: -71 [ 2003.611602][ T787] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 2003.658615][ T787] usb 5-1: USB disconnect, device number 76 [ 2003.955817][T24570] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4978'. [ 2005.835768][ T28] audit: type=1326 audit(1750333053.177:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2005.858377][ C0] vkms_vblank_simulate: vblank timer overrun [ 2005.970674][ T28] audit: type=1326 audit(1750333053.177:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2005.993070][ C0] vkms_vblank_simulate: vblank timer overrun [ 2006.063854][ T28] audit: type=1326 audit(1750333053.237:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4f258d290 code=0x7ffc0000 [ 2006.163709][ T28] audit: type=1326 audit(1750333053.257:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2006.228896][ T28] audit: type=1326 audit(1750333053.287:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2006.292813][ T28] audit: type=1326 audit(1750333053.297:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2006.373654][ T28] audit: type=1326 audit(1750333053.367:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24583 comm="syz.6.4983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2006.964708][T24597] delete_channel: no stack [ 2007.436366][T24607] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4989'. [ 2007.901436][T24613] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4990'. [ 2008.277475][T24619] batadv_slave_1: entered promiscuous mode [ 2008.791228][T24614] batadv_slave_1: left promiscuous mode [ 2010.055445][T24632] delete_channel: no stack [ 2010.083135][T24635] binder: 24634:24635 ioctl c0306201 200000001440 returned -11 [ 2011.288598][T24652] batadv_slave_1: entered promiscuous mode [ 2011.861834][T24649] batadv_slave_1: left promiscuous mode [ 2011.921642][T24646] syz.8.5000: attempt to access beyond end of device [ 2011.921642][T24646] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2012.070695][T24647] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2012.071238][T24646] hfsplus: unable to find HFS+ superblock [ 2012.115624][T24647] cramfs: wrong magic [ 2014.382377][T24678] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5009'. [ 2014.930273][T24686] batadv_slave_1: entered promiscuous mode [ 2015.515294][T24682] batadv_slave_1: left promiscuous mode [ 2016.712736][T24696] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2016.738225][T24696] batadv_slave_1: entered promiscuous mode [ 2017.274723][T24690] batadv_slave_1: left promiscuous mode [ 2017.714491][ T5818] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2018.115746][ T5818] usb 9-1: Using ep0 maxpacket: 8 [ 2018.555234][ T5818] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2018.573631][ T5818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.594337][ T5818] usb 9-1: config 0 has no interface number 0 [ 2018.601851][ T5818] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2018.615990][ T5818] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2018.629347][ T5818] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2018.644741][ T5818] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2018.673619][ T5818] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2018.700180][ T5818] usb 9-1: Manufacturer: syz [ 2018.731757][ T5818] usb 9-1: config 0 descriptor?? [ 2018.757135][T24710] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5018'. [ 2019.469147][T24722] batadv_slave_1: entered promiscuous mode [ 2019.677994][T24713] batadv_slave_1: left promiscuous mode [ 2019.999055][ T5818] usb 9-1: Can not set alternate setting to 1, error: -71 [ 2020.043723][ T5818] synaptics_usb: probe of 9-1:0.52 failed with error -71 [ 2020.072102][ T5818] usb 9-1: USB disconnect, device number 76 [ 2020.462549][T24735] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2020.472477][T24735] batadv_slave_1: entered promiscuous mode [ 2020.924302][T24726] batadv_slave_1: left promiscuous mode [ 2022.116894][T24744] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2025.851998][ T28] audit: type=1326 audit(1750333073.207:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24764 comm="syz.6.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2025.943904][ T28] audit: type=1326 audit(1750333073.207:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24764 comm="syz.6.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2025.970096][ T28] audit: type=1326 audit(1750333073.247:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24764 comm="syz.6.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2026.135047][ T28] audit: type=1326 audit(1750333073.487:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24764 comm="syz.6.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2026.224897][T24779] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2026.532466][ T28] audit: type=1326 audit(1750333073.487:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24764 comm="syz.6.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f258e929 code=0x7ffc0000 [ 2026.731029][T24780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2026.759473][T24780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2026.769640][T24780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2026.784858][T24780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2026.824610][T24780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2026.834157][T24780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2028.811331][ T8460] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.883874][T15637] Bluetooth: hci1: command tx timeout [ 2028.999245][ T8460] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.073961][ T787] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 2029.084169][T24814] trusted_key: encrypted_key: key user:syz not found [ 2029.139581][ T8460] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.237518][ T787] usb 9-1: device descriptor read/64, error -71 [ 2029.249575][ T8460] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.270021][T24775] chnl_net:caif_netlink_parms(): no params data found [ 2029.457923][T24775] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.470523][T24775] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.479596][T24775] bridge_slave_0: entered allmulticast mode [ 2029.492450][T24775] bridge_slave_0: entered promiscuous mode [ 2029.513864][ T787] usb 9-1: new full-speed USB device number 78 using dummy_hcd [ 2029.588391][T24775] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.601373][T24775] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.609080][T24775] bridge_slave_1: entered allmulticast mode [ 2029.616804][T24775] bridge_slave_1: entered promiscuous mode [ 2029.704886][ T787] usb 9-1: device descriptor read/64, error -71 [ 2029.884668][ T787] usb usb9-port1: attempt power cycle [ 2030.305440][T24775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2030.383148][T24775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2030.402967][ T787] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 2030.464628][ T787] usb 9-1: device descriptor read/8, error -71 [ 2030.709923][T24775] team0: Port device team_slave_0 added [ 2030.993725][ T787] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 2031.847630][T15637] Bluetooth: hci1: command tx timeout [ 2031.902821][T24833] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2031.911921][T24833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2031.925604][ T787] usb 9-1: device descriptor read/8, error -71 [ 2032.087716][ T787] usb usb9-port1: unable to enumerate USB device [ 2032.096278][T24775] team0: Port device team_slave_1 added [ 2032.435186][T24775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.545525][T24775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2032.838577][T24775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2033.953607][T24780] Bluetooth: hci1: command tx timeout [ 2035.500090][T24775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.520315][T24775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2035.547161][T24775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2036.101610][T24857] delete_channel: no stack [ 2036.954090][T24871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2036.962898][T24871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2037.240413][T24780] Bluetooth: hci1: command tx timeout [ 2037.369208][T24864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5057'. [ 2037.422011][T24775] hsr_slave_0: entered promiscuous mode [ 2037.444105][T24775] hsr_slave_1: entered promiscuous mode [ 2037.520454][T24775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2037.700282][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.707989][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.724865][T24775] Cannot create hsr debugfs directory [ 2041.078121][T24899] batadv_slave_1: entered promiscuous mode [ 2041.084378][T24899] batadv_slave_1: left promiscuous mode [ 2041.464080][ T8460] bond0: (slave wlan1): Releasing backup interface [ 2043.621470][T24918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2043.649460][T24918] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2043.695840][ T8460] hsr_slave_0: left promiscuous mode [ 2043.722719][ T8460] hsr_slave_1: left promiscuous mode [ 2043.789227][ T8460] veth1_macvtap: left promiscuous mode [ 2043.797381][ T8460] veth0_macvtap: left promiscuous mode [ 2043.803529][ T8460] veth1_vlan: left promiscuous mode [ 2043.810613][ T8460] veth0_vlan: left promiscuous mode [ 2043.840909][T24954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 2046.391539][ T8460] bond0 (unregistering): Released all slaves [ 2046.536910][T24944] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5071'. [ 2048.539625][T24974] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2048.697358][T24975] batadv_slave_1: entered promiscuous mode [ 2048.704021][T24977] batadv_slave_1: entered promiscuous mode [ 2048.710068][T24978] batadv_slave_1: left promiscuous mode [ 2048.720238][T24969] batadv_slave_1: left promiscuous mode [ 2049.959698][T24968] delete_channel: no stack [ 2050.712327][ T28] audit: type=1800 audit(1750333098.067:195): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5079" name="file0" dev="overlay" ino=3088 res=0 errno=0 [ 2050.733301][ C0] vkms_vblank_simulate: vblank timer overrun [ 2051.134727][T25006] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5080'. [ 2052.512730][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5082'. [ 2053.244949][T24775] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2053.322550][T24775] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2053.335891][T24775] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2053.516545][T24775] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2054.058594][T25031] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2054.422156][T25031] batadv_slave_1: entered promiscuous mode [ 2054.429135][T25031] batadv_slave_1: left promiscuous mode [ 2055.699720][T24775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.788589][T24775] 8021q: adding VLAN 0 to HW filter on device team0 [ 2055.790271][T25041] delete_channel: no stack [ 2056.005574][T14573] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.012877][T14573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.608416][T14573] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.615739][T14573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.287199][T25063] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5091'. [ 2057.584765][T25067] syz.8.5093: attempt to access beyond end of device [ 2057.584765][T25067] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2057.610859][T25067] hfsplus: unable to find HFS+ superblock [ 2058.992495][T25073] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2059.003641][T25073] batadv_slave_1: entered promiscuous mode [ 2059.117406][T25071] batadv_slave_1: left promiscuous mode [ 2059.564126][T25088] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5096'. [ 2059.589603][T24775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2062.411127][T25119] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5102'. [ 2062.850808][T25129] syz.6.5103: attempt to access beyond end of device [ 2062.850808][T25129] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2062.944815][T25131] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2062.961747][T25131] batadv_slave_1: entered promiscuous mode [ 2063.474779][T25124] batadv_slave_1: left promiscuous mode [ 2063.606818][T25129] hfsplus: unable to find HFS+ superblock [ 2064.051712][T24775] veth0_vlan: entered promiscuous mode [ 2065.014263][T24775] veth1_vlan: entered promiscuous mode [ 2065.777101][T24775] veth0_macvtap: entered promiscuous mode [ 2065.793376][T24775] veth1_macvtap: entered promiscuous mode [ 2065.861131][T24775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2065.909971][T24775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2065.945447][T24775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.967215][T24775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.978403][T24775] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.990745][T24775] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.054092][ T5814] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 2066.191162][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5112'. [ 2066.271789][ T5814] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2066.326301][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2066.382466][ T5814] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2066.387488][ T8460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2066.409642][ T5814] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2066.421548][ T5814] usb 5-1: Manufacturer: syz [ 2066.543032][ T8] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2066.547795][ T8460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2066.575647][ T5814] usb 5-1: config 0 descriptor?? [ 2066.955996][ T8] usb 9-1: device descriptor read/64, error -71 [ 2066.980389][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.005233][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2067.010426][T25151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.037867][T25151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.082264][ T5814] usb 5-1: USB disconnect, device number 77 [ 2067.253623][ T8] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2067.934940][ T8] usb 9-1: device descriptor read/64, error -71 [ 2068.085544][ T8] usb usb9-port1: attempt power cycle [ 2068.420959][T25193] syz.7.5116: attempt to access beyond end of device [ 2068.420959][T25193] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2068.435128][T25193] hfsplus: unable to find HFS+ superblock [ 2068.480920][T25194] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2068.599306][ T8] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2068.724328][ T8] usb 9-1: device descriptor read/8, error -71 [ 2068.731388][T25194] cramfs: wrong magic [ 2069.661945][ T8] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2070.861092][ T8] usb 9-1: device not accepting address 84, error -71 [ 2070.868652][ T8] usb usb9-port1: unable to enumerate USB device [ 2071.388826][T15637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2071.452888][T15637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2071.463976][T15637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2071.498529][T15637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2071.502705][T15637] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2071.512064][T15637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2071.774856][ T8460] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.409839][T19634] usb 9-1: new full-speed USB device number 85 using dummy_hcd [ 2072.440321][ T8460] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.585368][ T8460] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2072.663847][T19634] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.675885][T19634] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2072.714102][T19634] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2072.723320][T19634] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2072.743538][T19634] usb 9-1: Manufacturer: syz [ 2072.764993][T19634] usb 9-1: config 0 descriptor?? [ 2072.932036][ T8460] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2073.021688][T25222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.249660][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5126'. [ 2073.496828][T25222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.606083][T15637] Bluetooth: hci0: command tx timeout [ 2073.673843][ T5814] usb 9-1: USB disconnect, device number 85 [ 2073.943921][T16428] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2073.996617][T25210] chnl_net:caif_netlink_parms(): no params data found [ 2074.226268][T16428] usb 5-1: device descriptor read/64, error -71 [ 2074.503606][T16428] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2074.664253][T16428] usb 5-1: device descriptor read/64, error -71 [ 2074.960254][T16428] usb usb5-port1: attempt power cycle [ 2075.604408][T16428] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2075.644983][T25210] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.668241][T16428] usb 5-1: device descriptor read/8, error -71 [ 2075.683745][T15637] Bluetooth: hci0: command tx timeout [ 2075.708057][T25210] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.729721][T25210] bridge_slave_0: entered allmulticast mode [ 2075.761246][T25210] bridge_slave_0: entered promiscuous mode [ 2075.782419][T25210] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.791335][T25210] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.798780][T25210] bridge_slave_1: entered allmulticast mode [ 2075.808394][T25210] bridge_slave_1: entered promiscuous mode [ 2075.826795][T25277] delete_channel: no stack [ 2076.032293][T25210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2076.122617][T16428] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2076.123995][T25210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2076.252269][T25291] syz.4.5132: attempt to access beyond end of device [ 2076.252269][T25291] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2076.266183][T25291] hfsplus: unable to find HFS+ superblock [ 2076.356410][T16428] usb 5-1: device not accepting address 81, error -71 [ 2077.693035][T16428] usb usb5-port1: unable to enumerate USB device [ 2077.765579][T15637] Bluetooth: hci0: command tx timeout [ 2077.782999][T25210] team0: Port device team_slave_0 added [ 2077.972682][T25210] team0: Port device team_slave_1 added [ 2078.800740][T25210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.864350][T25210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2079.162158][T25210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2079.685927][T25210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2079.744493][T25210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2079.831655][T25210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2079.853675][T15637] Bluetooth: hci0: command tx timeout [ 2081.598774][T25326] batadv_slave_1: entered promiscuous mode [ 2081.605261][T25326] batadv_slave_1: left promiscuous mode [ 2081.853315][T25210] hsr_slave_0: entered promiscuous mode [ 2081.868547][T25210] hsr_slave_1: entered promiscuous mode [ 2081.878541][T25210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2081.890319][T25210] Cannot create hsr debugfs directory [ 2081.926324][ T8460] bond0: (slave wlan1): Releasing backup interface [ 2082.013846][T19634] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2082.222725][T19634] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.235042][T19634] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 2082.250774][T19634] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2082.265831][T19634] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2082.272595][ T8460] hsr_slave_0: left promiscuous mode [ 2082.279266][ T8460] hsr_slave_1: left promiscuous mode [ 2082.443382][ T8460] veth1_macvtap: left promiscuous mode [ 2082.460391][ T8460] veth0_macvtap: left promiscuous mode [ 2082.472979][ T8460] veth1_vlan: left promiscuous mode [ 2082.504573][ T8460] veth0_vlan: left promiscuous mode [ 2082.507281][T19634] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2082.519746][T19634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.543635][T19634] usb 5-1: config 0 descriptor?? [ 2082.782398][T19634] ath6kl: Failed to submit usb control message: -71 [ 2082.798524][T19634] ath6kl: unable to send the bmi data to the device: -71 [ 2082.852221][T19634] ath6kl: Unable to send get target info: -71 [ 2082.914043][T19634] ath6kl: Failed to init ath6kl core: -71 [ 2082.932731][T19634] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 2082.987513][T19634] usb 5-1: USB disconnect, device number 82 [ 2084.833607][ T5818] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2085.214977][T25372] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2085.740112][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 2085.747942][ T5818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2085.759321][ T5818] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2085.768790][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.777091][ T5818] usb 5-1: Product: syz [ 2085.781288][ T5818] usb 5-1: Manufacturer: syz [ 2085.786054][ T5818] usb 5-1: SerialNumber: syz [ 2085.793508][ T5818] usb 5-1: config 0 descriptor?? [ 2086.219722][ T5818] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 2086.596334][ T8460] bond0 (unregistering): Released all slaves [ 2086.723192][T25372] batadv_slave_1: entered promiscuous mode [ 2086.731962][T25372] batadv_slave_1: left promiscuous mode [ 2086.996690][ T5818] usb 5-1: USB disconnect, device number 83 [ 2092.445586][T25403] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2093.651304][T25403] batadv_slave_1: entered promiscuous mode [ 2093.657980][T25404] batadv_slave_1: left promiscuous mode [ 2094.207572][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5160'. [ 2095.091301][T25210] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2095.126055][T25210] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2095.161407][T25210] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2095.242037][T25428] syz.7.5163: attempt to access beyond end of device [ 2095.242037][T25428] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2095.255585][T25428] hfsplus: unable to find HFS+ superblock [ 2095.406462][T25210] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2097.192350][T25210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2097.280643][T25210] 8021q: adding VLAN 0 to HW filter on device team0 [ 2097.367307][T12393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2097.374693][T12393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2097.430317][T12393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2097.437595][T12393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2097.794489][ T8] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2098.050901][ T8] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2098.253161][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2098.491668][ T8] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2098.639551][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.897613][ T8] usb 9-1: config 0 descriptor?? [ 2099.134372][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.141212][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.356524][ T8] usb 9-1: string descriptor 0 read error: -71 [ 2099.433807][ T8] ath6kl: Failed to submit usb control message: -71 [ 2099.458645][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 2099.493786][ T8] ath6kl: Unable to send get target info: -71 [ 2099.503701][T25210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2099.520849][ T8] ath6kl: Failed to init ath6kl core: -71 [ 2099.575617][ T8] ath6kl_usb: probe of 9-1:0.0 failed with error -71 [ 2099.639733][ T8] usb 9-1: USB disconnect, device number 86 [ 2099.871746][T25466] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2099.888490][T25466] batadv_slave_1: entered promiscuous mode [ 2100.366654][T25460] batadv_slave_1: left promiscuous mode [ 2100.978089][T25480] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5169'. [ 2101.841886][T25487] syz.4.5172: attempt to access beyond end of device [ 2101.841886][T25487] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2101.855634][T25487] hfsplus: unable to find HFS+ superblock [ 2103.557531][T25210] veth0_vlan: entered promiscuous mode [ 2104.079831][T25210] veth1_vlan: entered promiscuous mode [ 2105.262931][T25210] veth0_macvtap: entered promiscuous mode [ 2105.354486][T25210] veth1_macvtap: entered promiscuous mode [ 2105.642509][T25210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2105.854277][T25525] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2106.259222][T25210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.454899][T25210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2106.462365][T25525] batadv_slave_1: entered promiscuous mode [ 2106.474419][T25527] batadv_slave_1: left promiscuous mode [ 2106.601587][T25210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2106.618445][T25210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2106.632337][T25210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2106.661962][T25210] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.708832][T25210] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.733802][T25210] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2106.749256][T25210] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2107.569606][ T6222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2107.609394][ T6222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2107.788096][T14573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2107.812940][T14573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2107.994445][ T5818] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2109.979670][T25561] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2109.995570][T25561] batadv_slave_1: entered promiscuous mode [ 2110.114653][T25556] batadv_slave_1: left promiscuous mode [ 2110.593281][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2110.760945][ T5818] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2110.863589][ T5818] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2110.872760][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.018533][ T5818] usb 5-1: config 0 descriptor?? [ 2111.049603][ T5818] usb 5-1: can't set config #0, error -71 [ 2111.085207][ T5818] usb 5-1: USB disconnect, device number 84 [ 2112.719276][T24780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2112.742168][T24780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2112.761156][T24780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2112.772357][T24780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2112.784811][T24780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2112.796641][T24780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2114.050081][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.718764][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.880488][T25602] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5194'. [ 2115.127476][T24780] Bluetooth: hci4: command tx timeout [ 2115.968681][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2116.706522][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2116.742851][T25588] chnl_net:caif_netlink_parms(): no params data found [ 2116.952073][T25623] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2116.960954][T25623] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2117.139933][T25627] syz.8.5197: attempt to access beyond end of device [ 2117.139933][T25627] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2117.153477][T25627] hfsplus: unable to find HFS+ superblock [ 2117.203561][T24780] Bluetooth: hci4: command tx timeout [ 2118.187385][T25588] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.204464][T25588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.381528][T25588] bridge_slave_0: entered allmulticast mode [ 2118.544024][T25588] bridge_slave_0: entered promiscuous mode [ 2118.962445][T25588] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.999601][T25588] bridge0: port 2(bridge_slave_1) entered disabled state [ 2119.007376][T25588] bridge_slave_1: entered allmulticast mode [ 2119.035328][T25588] bridge_slave_1: entered promiscuous mode [ 2119.139380][T25646] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5203'. [ 2119.161033][T25645] binder: 25643:25645 ioctl c0306201 200000001440 returned -11 [ 2119.164390][T25588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2119.217365][T25588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2119.289825][T24780] Bluetooth: hci4: command tx timeout [ 2119.486637][T25650] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2119.495535][T25650] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2121.170059][T25588] team0: Port device team_slave_0 added [ 2121.262915][T25588] team0: Port device team_slave_1 added [ 2121.342387][T25668] syz.8.5208: attempt to access beyond end of device [ 2121.342387][T25668] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2121.356076][T25668] hfsplus: unable to find HFS+ superblock [ 2121.378108][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5209'. [ 2121.967616][T24780] Bluetooth: hci4: command tx timeout [ 2122.670401][T25687] syz.8.5212: attempt to access beyond end of device [ 2122.670401][T25687] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2122.686732][T25588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2122.694762][T25687] hfsplus: unable to find HFS+ superblock [ 2122.709627][T25688] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2122.722258][T25688] cramfs: wrong magic [ 2122.921034][T25588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.331328][T25588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2123.852279][T25697] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5213'. [ 2123.953969][T25588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2123.961530][T25588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2124.063485][T25588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2124.376007][T25703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2124.385064][T25703] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2124.944320][T25588] hsr_slave_0: entered promiscuous mode [ 2124.956235][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5217'. [ 2124.966398][T25588] hsr_slave_1: entered promiscuous mode [ 2125.001563][T25588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2125.013120][T25588] Cannot create hsr debugfs directory [ 2125.657115][T25724] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2126.207868][T25724] batadv_slave_1: entered promiscuous mode [ 2126.214500][T25724] batadv_slave_1: left promiscuous mode [ 2126.508420][ T48] bond0: (slave wlan1): Releasing backup interface [ 2126.702298][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5219'. [ 2127.171947][T25740] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5221'. [ 2127.512407][T25748] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5224'. [ 2127.637946][ T48] hsr_slave_0: left promiscuous mode [ 2127.651681][ T48] hsr_slave_1: left promiscuous mode [ 2127.709913][ T48] veth1_macvtap: left promiscuous mode [ 2127.718528][ T48] veth0_macvtap: left promiscuous mode [ 2127.729424][ T48] veth1_vlan: left promiscuous mode [ 2127.734946][ T8] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2127.749728][ T48] veth0_vlan: left promiscuous mode [ 2127.945539][ T8] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2127.995033][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.003204][ T8] usb 7-1: Product: syz [ 2128.038972][ T8] usb 7-1: Manufacturer: syz [ 2128.053471][ T8] usb 7-1: SerialNumber: syz [ 2128.067465][ T8] usb 7-1: config 0 descriptor?? [ 2128.099520][ T8] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2129.570906][ T8] gspca_sunplus: reg_r err -71 [ 2129.595760][ T8] sunplus: probe of 7-1:0.0 failed with error -71 [ 2129.649149][ T8] usb 7-1: USB disconnect, device number 71 [ 2130.231338][T25765] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5230'. [ 2131.757777][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5233'. [ 2134.743628][T25789] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5239'. [ 2135.819440][ T48] bond0 (unregistering): Released all slaves [ 2135.970927][T25793] batadv_slave_1: entered promiscuous mode [ 2135.979394][T25796] batadv_slave_1: entered promiscuous mode [ 2135.985930][T25795] batadv_slave_1: left promiscuous mode [ 2135.991820][T25797] batadv_slave_1: left promiscuous mode [ 2138.692201][T25588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2138.782498][T25588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2138.824527][T25588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2138.844594][T25588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2139.036340][T25828] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5246'. [ 2139.202216][T25588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2139.243154][T25832] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5247'. [ 2139.271937][T25588] 8021q: adding VLAN 0 to HW filter on device team0 [ 2139.309342][T12393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2139.316593][T12393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2139.382048][T12393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2139.389316][T12393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2139.397351][ T8] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2139.604448][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 2139.615270][ T8] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2139.624482][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2139.649178][ T8] usb 9-1: config 0 has no interface number 0 [ 2139.682176][ T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2139.713472][ T8] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2139.713543][T22416] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2139.744677][ T8] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2139.805557][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.842804][ T8] usb 9-1: config 0 descriptor?? [ 2139.912231][ T8] hso 9-1:0.1: Failed to find BULK IN ep [ 2139.945730][T22416] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2139.969928][T22416] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2139.993272][T22416] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2140.020784][T22416] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2140.038611][T22416] usb 7-1: Product: syz [ 2140.057046][T22416] usb 7-1: Manufacturer: syz [ 2140.061856][T22416] usb 7-1: SerialNumber: syz [ 2140.080707][T22416] usb 7-1: config 0 descriptor?? [ 2140.113022][T22416] usb 7-1: selecting invalid altsetting 0 [ 2140.818557][T25588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2141.991603][T22416] usb 9-1: USB disconnect, device number 87 [ 2142.416235][T25868] syz.8.5251: attempt to access beyond end of device [ 2142.416235][T25868] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2142.429884][T25868] hfsplus: unable to find HFS+ superblock [ 2143.406798][ T8] usb 7-1: USB disconnect, device number 72 [ 2144.805039][T25588] veth0_vlan: entered promiscuous mode [ 2145.050416][T25588] veth1_vlan: entered promiscuous mode [ 2145.150959][T25880] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5254'. [ 2145.179869][T25588] veth0_macvtap: entered promiscuous mode [ 2145.225662][T25588] veth1_macvtap: entered promiscuous mode [ 2145.278711][T25588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2145.313006][T25588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.333498][T25588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2145.353559][T25588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.395472][T25588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2145.515133][T25588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2145.585230][T25588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.618374][T25588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2145.670933][T25588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.710942][T25588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2145.732861][T25893] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5256'. [ 2145.812862][T25588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.822042][T25588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.850246][T25588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.879473][T25588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2146.004134][ T28] audit: type=1800 audit(1750333193.357:196): pid=25901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5257" name="file0" dev="overlay" ino=163 res=0 errno=0 [ 2146.303551][T12394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.313904][T12394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.409525][T12394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2146.443483][T12394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2146.938861][T25915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5260'. [ 2147.168159][T25917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2147.184739][T25917] batadv_slave_1: entered promiscuous mode [ 2147.567349][T25911] batadv_slave_1: left promiscuous mode [ 2148.333860][ T5818] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 2148.759398][ T5818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.875251][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2148.948832][ T5818] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2149.088939][ T5818] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2149.144599][ T5818] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2149.152690][ T5818] usb 7-1: Manufacturer: syz [ 2149.247788][ T5818] usb 7-1: config 0 descriptor?? [ 2149.294149][T25938] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5265'. [ 2149.445844][T15637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2149.460943][T15637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2149.470147][T15637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2149.490537][T15637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2149.528088][T15637] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2149.540769][T15637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2149.580638][T12394] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.371688][T12394] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.634911][T12394] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2150.650725][T16428] usb 7-1: USB disconnect, device number 73 [ 2150.799358][T12394] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2151.119721][T25941] chnl_net:caif_netlink_parms(): no params data found [ 2151.254305][T16428] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2151.410501][T25941] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.422742][T25941] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.438328][T25941] bridge_slave_0: entered allmulticast mode [ 2151.450233][T25941] bridge_slave_0: entered promiscuous mode [ 2151.510430][T25941] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.538557][T25941] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.564035][T25941] bridge_slave_1: entered allmulticast mode [ 2151.584403][T25941] bridge_slave_1: entered promiscuous mode [ 2151.633712][T16428] usb 5-1: Using ep0 maxpacket: 8 [ 2151.665390][T16428] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.676276][T16428] usb 5-1: config 0 has no interfaces? [ 2151.683848][T24780] Bluetooth: hci2: command tx timeout [ 2151.699468][T16428] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2151.710906][T16428] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2151.720789][T16428] usb 5-1: Manufacturer: syz [ 2151.832611][T16428] usb 5-1: config 0 descriptor?? [ 2152.413211][T25973] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2152.422909][T25973] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2152.434220][T24780] Bluetooth: hci1: command 0x0406 tx timeout [ 2152.728484][T25941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.909740][T25985] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2153.130800][T25941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2153.483826][T25986] batadv_slave_1: entered promiscuous mode [ 2153.490129][T25987] batadv_slave_1: left promiscuous mode [ 2153.764603][T15637] Bluetooth: hci2: command tx timeout [ 2153.936515][T25995] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5273'. [ 2154.023520][T25997] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2154.600355][T25941] team0: Port device team_slave_0 added [ 2154.607191][T25830] usb 5-1: USB disconnect, device number 85 [ 2154.691823][T25997] batadv_slave_1: entered promiscuous mode [ 2154.704041][T25998] batadv_slave_1: left promiscuous mode [ 2154.895176][T25941] team0: Port device team_slave_1 added [ 2155.640321][T25941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2155.656748][T25941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.734404][T25941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2155.843920][T15637] Bluetooth: hci2: command tx timeout [ 2155.849174][T25941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2155.862809][T26020] overlayfs: failed to resolve './file0': -2 [ 2155.886877][T25941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2155.924314][T25941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2156.019560][T12394] bond0: (slave wlan1): Releasing backup interface [ 2156.183565][T25941] hsr_slave_0: entered promiscuous mode [ 2156.201754][T25941] hsr_slave_1: entered promiscuous mode [ 2156.259745][T25941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2156.287052][T25941] Cannot create hsr debugfs directory [ 2156.440288][T26028] batadv_slave_1: entered promiscuous mode [ 2156.562470][T12394] hsr_slave_0: left promiscuous mode [ 2156.594837][T12394] hsr_slave_1: left promiscuous mode [ 2156.675279][T12394] veth1_macvtap: left promiscuous mode [ 2156.681023][T12394] veth0_macvtap: left promiscuous mode [ 2156.694217][T12394] veth1_vlan: left promiscuous mode [ 2156.705296][T12394] veth0_vlan: left promiscuous mode [ 2156.963701][ T5835] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2157.167983][ T5835] usb 5-1: Using ep0 maxpacket: 8 [ 2157.175772][ T5835] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 2157.184545][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2157.196863][ T5835] usb 5-1: config 0 has no interface number 0 [ 2157.203055][ T5835] usb 5-1: config 0 interface 52 has no altsetting 0 [ 2157.211700][ T5835] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2157.221118][ T5835] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2157.229431][ T5835] usb 5-1: Manufacturer: syz [ 2157.240475][ T5835] usb 5-1: config 0 descriptor?? [ 2157.680969][ T5835] usb 5-1: USB disconnect, device number 86 [ 2157.927715][T15637] Bluetooth: hci2: command tx timeout [ 2158.832203][T12394] bond0 (unregistering): Released all slaves [ 2158.960383][T26024] batadv_slave_1: left promiscuous mode [ 2159.569707][T26064] overlayfs: failed to resolve './file0': -2 [ 2159.831309][T26070] random: crng reseeded on system resumption [ 2159.883497][ T5835] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2160.512049][T26074] xt_CT: No such helper "snmp" [ 2160.684624][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.691171][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.743067][ T5835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.772410][ T5835] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2160.829567][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5289'. [ 2161.132499][ T5835] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2161.354568][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2161.378435][ T5835] usb 7-1: SerialNumber: syz [ 2161.508136][T26072] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2161.552293][T26072] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2161.599322][T26072] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 2161.645720][T26078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2161.665867][T26078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2161.678842][T26078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2161.688239][T26078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2161.702307][T26078] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2161.727681][ T5835] usb 7-1: 0:2 : does not exist [ 2161.791901][ T5835] usb 7-1: USB disconnect, device number 74 [ 2161.865523][T25499] udevd[25499]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2162.269265][T26093] batadv_slave_1: entered promiscuous mode [ 2162.533625][ T5835] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2162.687187][T26090] batadv_slave_1: left promiscuous mode [ 2162.731885][ T5835] usb 5-1: config 0 has an invalid interface number: 197 but max is 0 [ 2162.810307][T26106] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2163.316014][T26106] batadv_slave_1: entered promiscuous mode [ 2163.322523][T26106] batadv_slave_1: left promiscuous mode [ 2163.406322][T25941] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2163.484187][ T5835] usb 5-1: config 0 has no interface number 0 [ 2163.484261][T25941] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2163.490450][ T5835] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 2163.490480][ T5835] usb 5-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2163.529462][ T5835] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 2163.540744][T25941] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2163.548395][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.561056][T25941] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2163.568565][ T5835] usb 5-1: Product: syz [ 2163.572808][ T5835] usb 5-1: Manufacturer: syz [ 2163.603861][ T5835] usb 5-1: SerialNumber: syz [ 2163.611233][ T5835] usb 5-1: config 0 descriptor?? [ 2163.632207][T26098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2163.654301][T26112] overlayfs: failed to resolve './file1': -2 [ 2163.819929][T25941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2163.860792][T25941] 8021q: adding VLAN 0 to HW filter on device team0 [ 2163.884991][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 2163.892288][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2163.939771][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 2163.947040][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.058709][T16355] usb 5-1: USB disconnect, device number 87 [ 2164.164892][T26124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5297'. [ 2165.184173][ T5835] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2165.421970][ T5835] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2165.469550][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.521762][ T5835] usb 7-1: Product: syz [ 2165.545894][ T5835] usb 7-1: Manufacturer: syz [ 2165.552320][ T5835] usb 7-1: SerialNumber: syz [ 2165.554627][T25941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2165.584111][ T5835] usb 7-1: config 0 descriptor?? [ 2165.610346][ T5835] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2165.945357][T26147] batadv_slave_1: entered promiscuous mode [ 2166.311641][T25941] veth0_vlan: entered promiscuous mode [ 2166.346644][T25941] veth1_vlan: entered promiscuous mode [ 2166.437841][T25941] veth0_macvtap: entered promiscuous mode [ 2166.460025][T25941] veth1_macvtap: entered promiscuous mode [ 2166.492000][T26143] batadv_slave_1: left promiscuous mode [ 2166.502590][T25941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.514383][T25941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.527112][T25941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2166.546182][T25941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.562265][T25941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2166.622906][T25941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.660091][T25941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.673465][T25941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2166.691272][T25941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2166.708107][T25941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2166.729454][T25941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.825389][T25941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.909035][T25941] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.916930][ T5835] usb 7-1: USB disconnect, device number 75 [ 2167.003728][T25941] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.506216][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2167.528518][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2167.545191][T26179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5303'. [ 2167.631798][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2167.647156][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2167.853632][T19634] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2168.016596][T26191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5306'. [ 2168.611359][T26193] syz.8.5261: attempt to access beyond end of device [ 2168.611359][T26193] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2168.624961][T26193] hfsplus: unable to find HFS+ superblock [ 2169.027471][T19634] usb 5-1: Using ep0 maxpacket: 8 [ 2169.056400][T19634] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2169.073924][T19634] usb 5-1: config 0 has no interface number 0 [ 2169.080166][T19634] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2169.095249][T19634] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2169.108203][T19634] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2169.117371][T19634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.144780][T19634] usb 5-1: config 0 descriptor?? [ 2169.158907][T19634] hso 5-1:0.1: Failed to find BULK IN ep [ 2170.463695][T19634] usb 5-1: USB disconnect, device number 88 [ 2170.797301][T26215] batadv_slave_1: entered promiscuous mode [ 2171.145194][T19634] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 2171.334630][T26204] batadv_slave_1: left promiscuous mode [ 2171.424227][T19634] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.670025][T19634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2171.707372][T19634] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2171.729693][T19634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.778135][T19634] usb 5-1: Product: syz [ 2171.782459][T19634] usb 5-1: Manufacturer: syz [ 2171.794075][T19634] usb 5-1: SerialNumber: syz [ 2172.054017][T19634] usb 5-1: 0:2 : does not exist [ 2172.286400][T26230] Bluetooth: MGMT ver 1.22 [ 2172.374550][T19634] usb 5-1: USB disconnect, device number 89 [ 2172.938371][T26235] syz.7.5315: attempt to access beyond end of device [ 2172.938371][T26235] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2172.951582][T26235] hfsplus: unable to find HFS+ superblock [ 2172.958967][T26235] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2172.966841][T26235] cramfs: wrong magic [ 2173.336651][T26242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5316'. [ 2173.433729][T25499] udevd[25499]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2175.242665][ T8] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2175.409868][T26271] batadv_slave_1: entered promiscuous mode [ 2175.453697][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 2175.488049][ T8] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2175.526890][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.582099][ T8] usb 9-1: config 0 has no interface number 0 [ 2175.616509][ T8] usb 9-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2175.697542][ T8] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2175.902893][T26262] batadv_slave_1: left promiscuous mode [ 2175.916700][ T8] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2176.238912][ T8] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2176.247998][ T8] usb 9-1: Manufacturer: syz [ 2176.342154][ T8] usb 9-1: config 0 descriptor?? [ 2177.740904][ T8] usb 9-1: Can not set alternate setting to 1, error: -71 [ 2177.789531][ T8] synaptics_usb: probe of 9-1:0.52 failed with error -71 [ 2177.831014][ T8] usb 9-1: USB disconnect, device number 88 [ 2178.140175][T26299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5328'. [ 2178.303876][ T5818] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 2178.744195][ T5818] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.792899][ T5818] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2178.852750][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 2179.116530][T26308] batadv_slave_1: entered promiscuous mode [ 2179.695955][T26305] batadv_slave_1: left promiscuous mode [ 2179.929351][T26309] syz.8.5332: attempt to access beyond end of device [ 2179.929351][T26309] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2179.944172][T26309] hfsplus: unable to find HFS+ superblock [ 2180.363659][ T5818] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2180.380999][ T5818] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2180.392531][ T5818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.401286][ T5818] usb 7-1: Product: syz [ 2180.407209][ T5818] usb 7-1: Manufacturer: syz [ 2180.411877][ T5818] usb 7-1: SerialNumber: syz [ 2180.661373][ T5818] usb 7-1: 0:2 : does not exist [ 2181.113833][ T5814] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2181.191506][ T5818] usb 7-1: USB disconnect, device number 76 [ 2181.393711][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 2181.418810][ T5814] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 2181.443678][ T5814] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.479946][ T5814] usb 5-1: config 0 has no interface number 0 [ 2181.503823][ T5814] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2181.555435][ T5814] usb 5-1: config 0 interface 52 has no altsetting 0 [ 2181.572361][ T5814] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2181.611854][ T5814] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2181.666377][ T5814] usb 5-1: Manufacturer: syz [ 2181.692096][ T5814] usb 5-1: config 0 descriptor?? [ 2182.188524][T26342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5341'. [ 2182.769383][ T5814] usb 5-1: USB disconnect, device number 90 [ 2183.078632][T26351] batadv_slave_1: entered promiscuous mode [ 2183.581707][T26344] batadv_slave_1: left promiscuous mode [ 2183.902498][T26358] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.5348'. [ 2183.923964][ T5818] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2183.970715][T26359] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5347'. [ 2184.217536][ T5818] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2184.309213][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.397145][ T5818] usb 9-1: Product: syz [ 2184.412794][ T5818] usb 9-1: Manufacturer: syz [ 2184.486858][ T5818] usb 9-1: SerialNumber: syz [ 2184.571111][ T5818] usb 9-1: config 0 descriptor?? [ 2184.824732][ T5818] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2185.173603][T25830] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2185.381124][ T5814] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2185.388040][T25830] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.407662][T25830] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2185.420352][T25830] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2185.429506][T25830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2185.437687][T25830] usb 5-1: SerialNumber: syz [ 2186.053190][T25830] usb 5-1: 0:2 : does not exist [ 2186.079467][ T5818] usb 9-1: USB disconnect, device number 89 [ 2186.153074][T25830] usb 5-1: USB disconnect, device number 91 [ 2186.278136][T25530] udevd[25530]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2186.455898][ T5814] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 2186.465975][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.474114][ T5814] usb 7-1: Product: syz [ 2186.478333][ T5814] usb 7-1: Manufacturer: syz [ 2186.483000][ T5814] usb 7-1: SerialNumber: syz [ 2186.490944][ T5814] usb 7-1: config 0 descriptor?? [ 2186.569741][T26382] batadv_slave_1: entered promiscuous mode [ 2187.109804][T26378] batadv_slave_1: left promiscuous mode [ 2187.321951][T26387] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.5357'. [ 2187.591534][ T5814] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2187.648786][ T5814] asix: probe of 7-1:0.0 failed with error -71 [ 2187.684299][T26394] trusted_key: encrypted_key: insufficient parameters specified [ 2187.707935][T26394] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2187.717254][T26394] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2188.106112][ T5814] usb 7-1: USB disconnect, device number 77 [ 2192.647971][T26429] batadv_slave_1: entered promiscuous mode [ 2193.038770][T26418] batadv_slave_1: left promiscuous mode [ 2193.400243][T26437] trusted_key: encrypted_key: insufficient parameters specified [ 2193.424768][T26437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2193.433908][T26437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2194.901610][T26445] syz.6.5373: attempt to access beyond end of device [ 2194.901610][T26445] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2194.915174][T26445] hfsplus: unable to find HFS+ superblock [ 2197.458227][T26460] syz.8.5375: attempt to access beyond end of device [ 2197.458227][T26460] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2197.472578][T26460] hfsplus: unable to find HFS+ superblock [ 2197.484756][T26460] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2197.497527][T26460] cramfs: wrong magic [ 2198.012951][T26465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5379'. [ 2198.676630][T26480] batadv_slave_1: entered promiscuous mode [ 2198.995202][T26468] batadv_slave_1: left promiscuous mode [ 2199.277969][T26483] trusted_key: encrypted_key: insufficient parameters specified [ 2199.289124][T26483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2199.299334][T26483] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2199.457533][T24780] Bluetooth: hci0: command 0x0406 tx timeout [ 2200.236477][T26486] syz.8.5385: attempt to access beyond end of device [ 2200.236477][T26486] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2200.250381][T26486] hfsplus: unable to find HFS+ superblock [ 2200.989363][T26495] syz.6.5389: attempt to access beyond end of device [ 2200.989363][T26495] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2201.002977][T26495] hfsplus: unable to find HFS+ superblock [ 2201.016821][T26498] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2201.026773][T26498] cramfs: wrong magic [ 2201.058980][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5388'. [ 2202.243901][ T8] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2202.443689][ T8] usb 9-1: Using ep0 maxpacket: 8 [ 2202.470202][ T8] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2202.499748][ T8] usb 9-1: config 0 has no interface number 0 [ 2202.519666][ T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2202.552226][ T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2202.587711][ T8] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2202.774288][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.115393][ T8] usb 9-1: config 0 descriptor?? [ 2204.615400][ T8] usb 9-1: can't set config #0, error -71 [ 2205.395298][ T8] usb 9-1: USB disconnect, device number 90 [ 2205.713394][T26540] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2205.729022][T26540] batadv_slave_1: entered promiscuous mode [ 2206.292536][T26536] batadv_slave_1: left promiscuous mode [ 2207.495710][T26550] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2207.502413][T26550] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.608759][T26550] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 2210.202431][T26569] syz.7.5406: attempt to access beyond end of device [ 2210.202431][T26569] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2210.216138][T26569] hfsplus: unable to find HFS+ superblock [ 2210.227600][T26569] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2210.237478][T26569] cramfs: wrong magic [ 2213.614134][ T8] usb 9-1: new full-speed USB device number 91 using dummy_hcd [ 2213.868619][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.903173][ T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2214.008804][ T8] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2214.032087][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.093057][ T8] usb 9-1: Product: syz [ 2214.117979][ T8] usb 9-1: Manufacturer: syz [ 2214.142248][ T8] usb 9-1: SerialNumber: syz [ 2214.455454][ T8] usb 9-1: 0:2 : does not exist [ 2214.496439][ T8] usb 9-1: unit 6 not found! [ 2214.603062][T19634] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2214.622298][ T8] usb 9-1: USB disconnect, device number 91 [ 2214.645808][T26607] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2214.654248][T26607] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2214.692118][T26607] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 2214.813835][T26603] udevd[26603]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2215.690279][T19634] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2215.714332][T19634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2215.722415][T19634] usb 7-1: Product: syz [ 2215.743437][T19634] usb 7-1: Manufacturer: syz [ 2215.748218][T19634] usb 7-1: SerialNumber: syz [ 2215.771607][T19634] usb 7-1: config 0 descriptor?? [ 2215.790044][T19634] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2216.689192][T19634] gspca_sunplus: reg_r err -71 [ 2216.724036][T19634] sunplus: probe of 7-1:0.0 failed with error -71 [ 2216.864745][T26629] trusted_key: encrypted_key: key user:syz not found [ 2216.876210][T19634] usb 7-1: USB disconnect, device number 78 [ 2217.166474][T26636] syz.4.5426: attempt to access beyond end of device [ 2217.166474][T26636] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2217.181459][T26636] hfsplus: unable to find HFS+ superblock [ 2217.193144][T26636] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2217.205258][T26636] cramfs: wrong magic [ 2217.423849][T19634] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2217.884073][T19634] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2217.967480][T19634] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2218.059788][T19634] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2218.129352][T19634] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2218.223205][T19634] usb 7-1: Product: syz [ 2218.241989][T19634] usb 7-1: Manufacturer: syz [ 2218.261341][T19634] usb 7-1: SerialNumber: syz [ 2218.281668][T19634] usb 7-1: config 0 descriptor?? [ 2218.311522][T19634] usb 7-1: selecting invalid altsetting 0 [ 2219.410320][T22416] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 2219.736720][T22416] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.747167][T22416] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2219.759204][T22416] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2220.031114][ T5818] usb 7-1: USB disconnect, device number 79 [ 2220.246931][T19634] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2220.255106][T22416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.263287][T22416] usb 5-1: Product: syz [ 2220.267642][T22416] usb 5-1: Manufacturer: syz [ 2220.272327][T22416] usb 5-1: SerialNumber: syz [ 2220.501276][T19634] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2220.581333][T19634] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.613589][T19634] usb 9-1: Product: syz [ 2220.617845][T19634] usb 9-1: Manufacturer: syz [ 2220.623182][T19634] usb 9-1: SerialNumber: syz [ 2220.644433][T22416] usb 5-1: 0:2 : does not exist [ 2220.649485][T22416] usb 5-1: unit 6 not found! [ 2220.663877][T19634] usb 9-1: config 0 descriptor?? [ 2220.702848][T19634] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2220.737988][T22416] usb 5-1: USB disconnect, device number 92 [ 2220.851360][T26603] udevd[26603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2221.833561][T26668] ucma_write: process 322 (syz.7.5437) changed security contexts after opening file descriptor, this is not allowed. [ 2222.014797][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.021195][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.241616][T19634] gspca_sunplus: reg_r err -110 [ 2223.283602][T19634] sunplus: probe of 9-1:0.0 failed with error -110 [ 2224.831783][T19634] usb 9-1: USB disconnect, device number 92 [ 2224.856522][T26691] trusted_key: encrypted_key: key user:syz not found [ 2225.450643][T25830] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2225.752527][T25830] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2225.763470][T25830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2225.776017][T25830] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2225.786668][T25830] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2225.797974][T25830] usb 5-1: Product: syz [ 2225.802294][T25830] usb 5-1: Manufacturer: syz [ 2225.807905][T25830] usb 5-1: SerialNumber: syz [ 2225.844579][T25830] usb 5-1: config 0 descriptor?? [ 2225.855997][T25830] usb 5-1: selecting invalid altsetting 0 [ 2226.296578][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5445'. [ 2226.583535][T19634] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2226.821577][T22416] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2226.946215][T19634] usb 9-1: Using ep0 maxpacket: 8 [ 2226.979993][T19634] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2226.995880][T19634] usb 9-1: config 0 has no interface number 0 [ 2227.011150][T19634] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2227.022956][T19634] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2227.129961][T22416] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.151100][T19634] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2227.234568][T22416] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2227.250165][T19634] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.318308][T22416] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2227.679710][T19634] usb 9-1: config 0 descriptor?? [ 2227.685034][T22416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2227.693172][T22416] usb 7-1: SerialNumber: syz [ 2227.702678][T19634] hso 9-1:0.1: Failed to find BULK IN ep [ 2228.182702][T22416] usb 7-1: 0:2 : does not exist [ 2228.542598][T22416] usb 7-1: USB disconnect, device number 80 [ 2228.611100][ T8] usb 5-1: USB disconnect, device number 93 [ 2228.671242][T26603] udevd[26603]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2229.683959][ T8] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2229.804763][T16428] usb 9-1: USB disconnect, device number 93 [ 2230.119621][ T8] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2230.129059][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2230.137698][ T8] usb 7-1: Product: syz [ 2231.446188][T26732] fuse: Bad value for 'fd' [ 2231.700011][T26731] syz.8.5454 uses obsolete (PF_INET,SOCK_PACKET) [ 2231.707995][T26731] syzkaller1: entered promiscuous mode [ 2231.713593][T26731] syzkaller1: entered allmulticast mode [ 2232.679971][ T8] usb 7-1: Manufacturer: syz [ 2232.688040][ T8] usb 7-1: SerialNumber: syz [ 2232.745238][ T8] usb 7-1: config 0 descriptor?? [ 2232.775405][ T8] usb 7-1: can't set config #0, error -71 [ 2232.825167][ T8] usb 7-1: USB disconnect, device number 81 [ 2233.964354][T26746] syz.7.5458: attempt to access beyond end of device [ 2233.964354][T26746] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2233.978259][T26746] hfsplus: unable to find HFS+ superblock [ 2234.063919][T16428] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2234.567645][T26761] batadv_slave_1: entered promiscuous mode [ 2234.585077][T16428] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2234.595607][T16428] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2234.943952][ T8] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2234.987542][T16428] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2234.996848][T16428] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2235.005448][T16428] usb 9-1: Product: syz [ 2235.009781][T16428] usb 9-1: Manufacturer: syz [ 2235.015241][T16428] usb 9-1: SerialNumber: syz [ 2235.023598][T16428] usb 9-1: config 0 descriptor?? [ 2235.036256][T26754] batadv_slave_1: left promiscuous mode [ 2235.043835][T16428] usb 9-1: selecting invalid altsetting 0 [ 2235.188926][ T8] usb 5-1: no configurations [ 2235.194273][ T8] usb 5-1: can't read configurations, error -22 [ 2236.654030][ T8] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2236.998865][ T8] usb 5-1: no configurations [ 2237.034760][ T8] usb 5-1: can't read configurations, error -22 [ 2237.128684][ T8] usb usb5-port1: attempt power cycle [ 2237.758848][T16428] usb 9-1: USB disconnect, device number 94 [ 2238.927982][T26798] syz.7.5472: attempt to access beyond end of device [ 2238.927982][T26798] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2238.941680][T26798] hfsplus: unable to find HFS+ superblock [ 2239.499300][T15637] Bluetooth: hci4: command 0x0406 tx timeout [ 2239.657558][T26804] batadv_slave_1: entered promiscuous mode [ 2239.777713][T26795] batadv_slave_1: left promiscuous mode [ 2241.002668][T26807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5475'. [ 2241.206125][T26809] lo speed is unknown, defaulting to 1000 [ 2241.212415][T26809] lo speed is unknown, defaulting to 1000 [ 2241.221306][T26809] lo speed is unknown, defaulting to 1000 [ 2241.235233][T26809] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 2241.250463][T26809] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2241.297933][T26809] lo speed is unknown, defaulting to 1000 [ 2241.307580][T26809] lo speed is unknown, defaulting to 1000 [ 2241.316274][T26809] lo speed is unknown, defaulting to 1000 [ 2241.324485][T26809] lo speed is unknown, defaulting to 1000 [ 2242.363918][ T8] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 2242.403901][T16355] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2242.584114][ T8] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2242.606913][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2242.623374][T16355] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2242.634388][T16355] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2242.646705][T16355] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2242.663468][ T8] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2242.673204][T16355] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2242.693507][ T8] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2242.701748][ T8] usb 7-1: Product: syz [ 2242.706117][T16355] usb 9-1: SerialNumber: syz [ 2242.720520][ T8] usb 7-1: Manufacturer: syz [ 2242.733423][ T8] usb 7-1: SerialNumber: syz [ 2242.747463][ T8] usb 7-1: config 0 descriptor?? [ 2242.785665][ T8] usb 7-1: selecting invalid altsetting 0 [ 2242.941703][T16355] usb 9-1: 0:2 : does not exist [ 2242.982716][T16355] usb 9-1: USB disconnect, device number 95 [ 2243.090023][T26603] udevd[26603]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2245.056558][ T5814] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 2245.440854][ T5835] usb 7-1: USB disconnect, device number 82 [ 2245.532234][T26848] batadv_slave_1: entered promiscuous mode [ 2246.080921][T26842] batadv_slave_1: left promiscuous mode [ 2246.197487][ T5814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2246.323040][ T5814] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2246.340381][ T5814] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2246.356896][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.382117][ T5814] usb 5-1: Product: syz [ 2246.394933][ T5814] usb 5-1: Manufacturer: syz [ 2246.406413][ T5814] usb 5-1: SerialNumber: syz [ 2246.714092][ T5814] usb 5-1: 0:2 : does not exist [ 2246.719124][ T5814] usb 5-1: unit 6 not found! [ 2246.753647][ T5835] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 2246.756652][ T5814] usb 5-1: USB disconnect, device number 97 [ 2247.236522][T26603] udevd[26603]: setting mode of /dev/bus/usb/005/097 to 020664 failed: No such file or directory [ 2247.408030][T26603] udevd[26603]: setting owner of /dev/bus/usb/005/097 to uid=0, gid=0 failed: No such file or directory [ 2247.598586][T26603] udevd[26603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2247.891127][T26867] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2247.900332][T26867] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2248.405537][ T5835] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2248.425243][ T5835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2248.451479][ T5835] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2248.496045][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2248.545866][ T5835] usb 7-1: Product: syz [ 2248.575464][ T5835] usb 7-1: Manufacturer: syz [ 2248.607628][ T5835] usb 7-1: SerialNumber: syz [ 2248.626490][ T5835] usb 7-1: config 0 descriptor?? [ 2248.653956][ T5835] usb 7-1: selecting invalid altsetting 0 [ 2249.037781][T16355] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 2249.532314][T16355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2249.562510][T16355] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2249.587709][T16355] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2249.612484][T16355] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2249.631719][T16355] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2250.350418][T16355] usb 5-1: Manufacturer: syz [ 2250.365685][T16355] usb 5-1: config 0 descriptor?? [ 2250.535380][T16355] usb 7-1: USB disconnect, device number 83 [ 2250.711568][T25830] usb 5-1: USB disconnect, device number 98 [ 2253.061254][T26905] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2253.070681][T26905] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2253.978657][T26903] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5501'. [ 2256.513951][ T5814] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 2257.006634][ T5814] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2257.087226][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2257.142065][ T5814] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2257.206788][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2257.393557][ T5814] usb 7-1: Product: syz [ 2257.526569][ T5814] usb 7-1: Manufacturer: syz [ 2257.634785][ T5814] usb 7-1: SerialNumber: syz [ 2257.764054][ T5814] usb 7-1: config 0 descriptor?? [ 2257.838075][T26934] random: crng reseeded on system resumption [ 2257.855008][ T5814] usb 7-1: selecting invalid altsetting 0 [ 2258.456955][ T5814] usb 7-1: USB disconnect, device number 84 [ 2258.873654][T26602] udevd[26602]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2268.807533][T27006] random: crng reseeded on system resumption [ 2274.155678][T27052] random: crng reseeded on system resumption [ 2275.287211][T15637] Bluetooth: hci2: command 0x0406 tx timeout [ 2275.353433][T16355] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 2277.183012][T16355] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2277.209585][T16355] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2277.232688][T16355] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2277.252432][T16355] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2277.272772][T16355] usb 7-1: Product: syz [ 2277.283249][T16355] usb 7-1: Manufacturer: syz [ 2277.288622][T16355] usb 7-1: SerialNumber: syz [ 2277.377648][T16355] usb 7-1: config 0 descriptor?? [ 2278.243744][T16355] usb 7-1: can't set config #0, error -71 [ 2278.309877][T16355] usb 7-1: USB disconnect, device number 85 [ 2278.940721][T27082] kAFS: No cell specified [ 2283.532549][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.543459][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.763806][ T5814] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 2285.064538][ T5835] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2285.086729][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2285.097841][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2285.109633][ T5814] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2285.118847][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.131197][ T5814] usb 7-1: config 0 descriptor?? [ 2285.895544][ T5835] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2285.896389][ T5814] hid-led 0003:1D34:000A.0004: unknown main item tag 0x2 [ 2285.922605][ T5814] hid-led: probe of 0003:1D34:000A.0004 failed with error -71 [ 2285.923864][ T5835] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2285.938832][ T5814] usb 7-1: USB disconnect, device number 86 [ 2285.968711][ T5835] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2285.983953][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2285.992179][ T5835] usb 9-1: SerialNumber: syz [ 2286.084809][T27147] syz.4.5564: attempt to access beyond end of device [ 2286.084809][T27147] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2286.098519][T27147] hfsplus: unable to find HFS+ superblock [ 2286.115338][T27147] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2286.126008][T27147] cramfs: wrong magic [ 2286.348318][ T5835] usb 9-1: 0:2 : does not exist [ 2286.527809][ T5835] usb 9-1: USB disconnect, device number 96 [ 2287.152243][T26982] udevd[26982]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2288.723416][ T8] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2288.903644][ T8] usb 9-1: device descriptor read/64, error -71 [ 2289.843804][ T8] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2289.936613][T27183] UBIFS error (pid: 27183): cannot open "", error -22 [ 2290.121621][ T8] usb 9-1: device descriptor read/64, error -71 [ 2290.363765][ T8] usb usb9-port1: attempt power cycle [ 2291.233482][ T8] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2291.264032][ T8] usb 9-1: device descriptor read/8, error -71 [ 2295.123950][ T5835] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 2295.327936][ T5835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2295.359015][ T5835] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2295.388471][ T5835] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2295.408411][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2295.431671][ T5835] usb 7-1: SerialNumber: syz [ 2296.319057][ T5835] usb 7-1: 0:2 : does not exist [ 2296.341520][ T5835] usb 7-1: USB disconnect, device number 87 [ 2296.379660][T26982] udevd[26982]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2297.632872][T27259] binder: 27258:27259 ioctl c0306201 0 returned -14 [ 2297.642669][T27259] binder: 27258:27259 ioctl c0306201 200000001440 returned -11 [ 2300.538285][T27282] trusted_key: encrypted_key: key user:syz not found [ 2300.811623][T27287] binder: 27286:27287 ioctl c0306201 200000001440 returned -11 [ 2303.352267][T27311] binder: 27309:27311 ioctl c0306201 200000001440 returned -11 [ 2303.363434][ T5835] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 2303.933075][ T5835] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2303.944595][ T5835] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2304.151549][ T5835] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2304.172756][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2304.192959][ T5835] usb 7-1: Product: syz [ 2304.209694][ T5835] usb 7-1: Manufacturer: syz [ 2304.261160][ T5835] usb 7-1: SerialNumber: syz [ 2304.286875][ T5835] usb 7-1: config 0 descriptor?? [ 2304.469776][ T5835] usb 7-1: selecting invalid altsetting 0 [ 2306.363451][T22416] usb 7-1: USB disconnect, device number 88 [ 2307.913789][T27351] binder: 27350:27351 ioctl c0306201 200000001440 returned -11 [ 2307.969588][T27352] trusted_key: encrypted_key: key user:syz not found [ 2311.793235][T27388] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2311.812346][T27388] batadv_slave_1: entered promiscuous mode [ 2312.334433][T27384] batadv_slave_1: left promiscuous mode [ 2312.781253][T27394] binder: 27393:27394 ioctl c0306201 200000001440 returned -11 [ 2315.232936][T27418] trusted_key: encrypted_key: key user:syz not found [ 2315.653112][T27424] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2315.671426][T27424] batadv_slave_1: entered promiscuous mode [ 2316.201096][T27419] batadv_slave_1: left promiscuous mode [ 2316.906187][T27433] binder: BINDER_SET_CONTEXT_MGR already set [ 2316.912884][T27433] binder: 27432:27433 ioctl 4018620d 200000000040 returned -16 [ 2316.939849][T27433] binder: 27432:27433 ioctl c0306201 200000001440 returned -11 [ 2318.183378][ T8] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2318.424765][ T8] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2318.446815][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2318.470220][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2318.677747][ T8] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2318.686996][ T8] usb 5-1: Product: syz [ 2318.691232][ T8] usb 5-1: Manufacturer: syz [ 2318.696833][ T8] usb 5-1: SerialNumber: syz [ 2318.714493][ T8] usb 5-1: config 0 descriptor?? [ 2318.726341][ T8] usb 5-1: selecting invalid altsetting 0 [ 2319.952877][T27468] binder: 27467:27468 ioctl c0306201 200000001440 returned -11 [ 2320.221945][ T8] usb 5-1: USB disconnect, device number 99 [ 2320.658635][T27478] trusted_key: encrypted_key: key user:syz not found [ 2321.831842][T27495] binder: 27494:27495 ioctl c0306201 0 returned -14 [ 2321.888714][T27495] binder: 27494:27495 ioctl c0306201 200000001440 returned -11 [ 2323.714246][T27518] binder: 27517:27518 ioctl c0306201 0 returned -14 [ 2323.725636][T27518] binder: 27517:27518 ioctl c0306201 200000001440 returned -11 [ 2323.823365][ T8] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2324.023230][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.045380][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.057648][ T8] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2324.069621][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.082243][ T8] usb 5-1: config 0 descriptor?? [ 2324.726409][T27526] trusted_key: encrypted_key: key user:syz not found [ 2325.022427][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5680'. [ 2325.227401][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 2325.243790][ T8] usbhid: probe of 5-1:0.0 failed with error -71 [ 2325.275315][ T8] usb 5-1: USB disconnect, device number 100 [ 2326.717466][T27547] binder: 27546:27547 ioctl c0306201 0 returned -14 [ 2326.746682][T27547] binder: 27546:27547 ioctl c0306201 200000001440 returned -11 [ 2327.835629][ T5814] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2328.060216][ T5814] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2328.093418][ T5814] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2328.132852][ T5814] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2328.365318][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2328.383616][ T5814] usb 5-1: Product: syz [ 2328.387891][ T5814] usb 5-1: Manufacturer: syz [ 2328.392536][ T5814] usb 5-1: SerialNumber: syz [ 2328.434221][ T5814] usb 5-1: config 0 descriptor?? [ 2328.445887][ T5814] usb 5-1: selecting invalid altsetting 0 [ 2328.523746][T27572] trusted_key: encrypted_key: key user:syz not found [ 2328.613474][T27575] binder: 27570:27575 ioctl c0306201 200000001440 returned -11 [ 2330.186230][T19634] usb 5-1: USB disconnect, device number 101 [ 2330.956461][T27594] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5700'. [ 2332.084341][T27607] binder: 27606:27607 ioctl c0306201 200000001440 returned -11 [ 2333.124159][T27619] random: crng reseeded on system resumption [ 2333.374739][T25830] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 2334.205772][T25830] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2334.302557][T25830] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2334.577800][T25830] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2334.617925][T25830] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2334.672306][T25830] usb 7-1: Product: syz [ 2334.696480][T25830] usb 7-1: Manufacturer: syz [ 2334.718907][T25830] usb 7-1: SerialNumber: syz [ 2334.793513][T25830] usb 7-1: config 0 descriptor?? [ 2335.046795][T25830] usb 7-1: selecting invalid altsetting 0 [ 2335.879467][T27645] binder: 27644:27645 ioctl c0306201 200000001440 returned -11 [ 2335.977591][T27643] trusted_key: encrypted_key: key user:syz not found [ 2337.683796][T27654] random: crng reseeded on system resumption [ 2339.093867][T19634] usb 7-1: USB disconnect, device number 89 [ 2339.987103][T27678] binder: 27676:27678 ioctl c0306201 200000001440 returned -11 [ 2341.711286][T27696] trusted_key: encrypted_key: key user:syz not found [ 2342.280389][T27694] random: crng reseeded on system resumption [ 2342.341912][T27697] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2342.349122][T27697] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2342.375202][T27697] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 2343.093531][T16428] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2343.303695][T16428] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2343.338193][T16428] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2343.387947][T16428] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2343.421505][T16428] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2343.451906][T16428] usb 9-1: Product: syz [ 2343.474108][T16428] usb 9-1: Manufacturer: syz [ 2343.503289][T16428] usb 9-1: SerialNumber: syz [ 2343.511068][T16428] usb 9-1: config 0 descriptor?? [ 2343.541800][T16428] usb 9-1: selecting invalid altsetting 0 [ 2344.247400][T27722] binder: 27721:27722 ioctl c0306201 200000001440 returned -11 [ 2345.087029][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.129416][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.333755][ T5814] usb 9-1: USB disconnect, device number 101 [ 2348.325766][T27761] syz.8.5749: attempt to access beyond end of device [ 2348.325766][T27761] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2348.339285][T27761] hfsplus: unable to find HFS+ superblock [ 2348.777303][T27753] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2348.785137][T27753] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2355.938521][T27828] trusted_key: encrypted_key: key user:syz not found [ 2360.276392][T22416] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2360.516461][T22416] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2360.536301][T22416] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2360.552943][T22416] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2360.566080][T22416] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2360.743322][T22416] usb 5-1: Product: syz [ 2360.747581][T22416] usb 5-1: Manufacturer: syz [ 2360.763879][T22416] usb 5-1: SerialNumber: syz [ 2362.619131][T22416] usb 5-1: config 0 descriptor?? [ 2362.640228][T22416] usb 5-1: selecting invalid altsetting 0 [ 2363.314045][T27888] syz.7.5784: attempt to access beyond end of device [ 2363.314045][T27888] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2363.327755][T27888] hfsplus: unable to find HFS+ superblock [ 2363.341479][T27888] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2363.354746][T27888] cramfs: wrong magic [ 2366.257662][T27921] trusted_key: encrypted_key: key user:syz not found [ 2367.498163][T27925] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2367.533868][ T5814] usb 5-1: USB disconnect, device number 102 [ 2367.916886][T27925] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.139902][T27925] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.358225][T27925] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2368.455695][T27936] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=890508460 (1781016920 ns) > initial count (776 ns). Using initial count to start timer. [ 2368.678689][T27925] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.722952][T27925] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.762221][T27925] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2368.807023][T27925] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2369.943528][ T5835] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 2370.043579][T25830] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2370.113770][T25282] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2370.298526][T25282] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2370.319459][T25282] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2370.329440][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2370.340804][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2370.351499][ T5835] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2370.356427][T25282] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2370.361133][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.377889][T25282] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2370.380054][T25830] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2370.388130][T25282] usb 5-1: Product: syz [ 2370.398617][T25830] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 2370.410188][T25830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.421031][T25830] usb 9-1: Product: syz [ 2370.425783][T25830] usb 9-1: Manufacturer: syz [ 2370.430482][T25830] usb 9-1: SerialNumber: syz [ 2370.539770][ T5835] usb 7-1: config 0 descriptor?? [ 2370.558571][T25830] usb 9-1: config 0 descriptor?? [ 2371.097952][T25282] usb 5-1: Manufacturer: syz [ 2371.102661][T25282] usb 5-1: SerialNumber: syz [ 2371.220180][T25282] usb 5-1: config 0 descriptor?? [ 2371.232802][T25282] usb 5-1: selecting invalid altsetting 0 [ 2371.369043][ T5835] hid-led 0003:1D34:000A.0005: unknown main item tag 0x2 [ 2371.564800][ T5835] hid-led: probe of 0003:1D34:000A.0005 failed with error -71 [ 2371.742743][T27968] trusted_key: encrypted_key: key user:syz not found [ 2371.795790][ T5835] usb 7-1: USB disconnect, device number 90 [ 2372.422165][T27975] binder: BINDER_SET_CONTEXT_MGR already set [ 2372.440343][T27975] binder: 27974:27975 ioctl 4018620d 200000000040 returned -16 [ 2372.485753][T27975] binder: 27974:27975 ioctl c0306201 200000001440 returned -11 [ 2372.846382][ T5835] usb 9-1: USB disconnect, device number 102 [ 2374.100553][T27992] syz.8.5810: attempt to access beyond end of device [ 2374.100553][T27992] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2374.114110][T27992] hfsplus: unable to find HFS+ superblock [ 2374.782562][T25830] usb 5-1: USB disconnect, device number 103 [ 2376.235490][T28007] binder_alloc: 28006: binder_alloc_buf, no vma [ 2377.541634][T28021] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2377.558464][T28021] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2377.795949][T28017] random: crng reseeded on system resumption [ 2378.073970][T28027] syz.6.5821: attempt to access beyond end of device [ 2378.073970][T28027] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2378.088814][T28027] hfsplus: unable to find HFS+ superblock [ 2379.238261][T28045] binder_alloc: 28043: binder_alloc_buf, no vma [ 2379.835987][T28057] syz.8.5831: attempt to access beyond end of device [ 2379.835987][T28057] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2379.850101][T28057] hfsplus: unable to find HFS+ superblock [ 2380.838004][T28059] random: crng reseeded on system resumption [ 2382.374920][T28076] binder: 28074:28076 ioctl c0306201 0 returned -14 [ 2383.803322][ T5835] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2384.019421][ T5835] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2384.043282][ T5835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2384.060961][ T5835] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2384.083549][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2384.091817][ T5835] usb 5-1: Product: syz [ 2384.103314][ T5835] usb 5-1: Manufacturer: syz [ 2384.113522][ T5835] usb 5-1: SerialNumber: syz [ 2384.126447][ T5835] usb 5-1: config 0 descriptor?? [ 2384.147976][ T5835] usb 5-1: selecting invalid altsetting 0 [ 2384.786973][T28108] binder: 28106:28108 ioctl c0306201 0 returned -14 [ 2386.644320][T28130] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2386.654242][T28130] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2387.250569][ T5818] usb 5-1: USB disconnect, device number 104 [ 2389.136189][T28160] lo speed is unknown, defaulting to 1000 [ 2389.142324][T28160] lo speed is unknown, defaulting to 1000 [ 2389.154287][T28160] lo speed is unknown, defaulting to 1000 [ 2389.192245][T28160] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2389.282091][T28160] lo speed is unknown, defaulting to 1000 [ 2389.336157][T28160] lo speed is unknown, defaulting to 1000 [ 2389.349791][T28160] lo speed is unknown, defaulting to 1000 [ 2389.373050][T28160] lo speed is unknown, defaulting to 1000 [ 2391.010583][T28187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5874'. [ 2391.234019][ T5818] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 2391.454323][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2391.475749][ T5818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2391.497121][ T5818] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2391.532064][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.585623][ T5818] usb 7-1: config 0 descriptor?? [ 2392.113799][ T5818] usbhid 7-1:0.0: can't add hid device: -71 [ 2392.141739][ T5818] usbhid: probe of 7-1:0.0 failed with error -71 [ 2392.150138][T28193] siw: device registration error -23 [ 2392.177836][ T5818] usb 7-1: USB disconnect, device number 91 [ 2394.521757][T22416] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 2396.148949][T22416] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2396.252553][T22416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.319308][T22416] usb 7-1: Product: syz [ 2396.332679][T22416] usb 7-1: Manufacturer: syz [ 2396.359057][T22416] usb 7-1: SerialNumber: syz [ 2396.395438][T22416] usb 7-1: config 0 descriptor?? [ 2396.437234][T22416] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2396.843548][ T5814] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2396.941477][T28246] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5894'. [ 2397.048409][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2397.059530][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2397.070364][T22416] gspca_sunplus: reg_r err -32 [ 2397.076042][T22416] sunplus: probe of 7-1:0.0 failed with error -32 [ 2397.082653][ T5814] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2397.099172][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.139258][ T5814] usb 5-1: config 0 descriptor?? [ 2397.233611][ T5835] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2397.433509][ T5835] usb 9-1: Using ep0 maxpacket: 8 [ 2397.455204][ T5835] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2397.465288][ T5835] usb 9-1: config 0 has no interface number 0 [ 2397.471548][ T5835] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2397.482475][ T5835] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2397.492623][ T5835] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2397.501964][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.512901][ T5835] usb 9-1: config 0 descriptor?? [ 2397.534689][ T5835] hso 9-1:0.1: Failed to find BULK IN ep [ 2397.567837][ T5814] usbhid 5-1:0.0: can't add hid device: -71 [ 2397.586081][ T5814] usbhid: probe of 5-1:0.0 failed with error -71 [ 2397.603094][ T5814] usb 5-1: USB disconnect, device number 105 [ 2399.573609][ T5835] usb 7-1: USB disconnect, device number 92 [ 2400.564720][T28273] trusted_key: encrypted_key: key user:syz not found [ 2401.334885][ T5835] usb 9-1: USB disconnect, device number 103 [ 2401.916884][ T5835] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2402.149550][ T5835] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2402.173448][ T5835] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.191988][ T5835] usb 9-1: Product: syz [ 2402.198710][ T5835] usb 9-1: Manufacturer: syz [ 2402.207354][ T5835] usb 9-1: SerialNumber: syz [ 2402.221314][ T5835] usb 9-1: config 0 descriptor?? [ 2402.248495][ T5835] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2402.503508][T16428] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 2402.655648][T16428] usb 5-1: device descriptor read/64, error -71 [ 2402.710378][T28287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2402.718493][T28287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2402.893396][ T5835] gspca_sunplus: reg_r err -32 [ 2402.898350][ T5835] sunplus: probe of 9-1:0.0 failed with error -32 [ 2402.933354][T16428] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 2403.105603][T16428] usb 5-1: device descriptor read/64, error -71 [ 2403.235901][T16428] usb usb5-port1: attempt power cycle [ 2403.265622][T28287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2403.326167][T28287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2403.643446][T16428] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 2403.710966][T16428] usb 5-1: device descriptor read/8, error -71 [ 2403.793551][T28287] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.804299][T28287] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.817128][T28287] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.826576][T28287] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2403.983656][T16428] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 2404.024153][T16428] usb 5-1: device descriptor read/8, error -71 [ 2404.153638][T16428] usb usb5-port1: unable to enumerate USB device [ 2405.192701][T28299] usb 9-1: USB disconnect, device number 104 [ 2406.352575][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.360160][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.523566][T16428] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2406.685623][T28299] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2406.706110][T16428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2406.717279][T16428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2406.727835][T16428] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2406.737187][T16428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.748475][T16428] usb 5-1: config 0 descriptor?? [ 2406.773349][ T5818] usb 7-1: new full-speed USB device number 93 using dummy_hcd [ 2406.875866][T28299] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2406.886251][T28299] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2406.898773][T28299] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2406.908001][T28299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2406.917009][T28299] usb 9-1: SerialNumber: syz [ 2406.923681][ T5818] usb 7-1: device descriptor read/64, error -71 [ 2407.144240][T28299] usb 9-1: 0:2 : does not exist [ 2407.159957][T28299] usb 9-1: USB disconnect, device number 105 [ 2407.167212][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 2407.182153][T16428] usbhid 5-1:0.0: can't add hid device: -71 [ 2407.189675][T16428] usbhid: probe of 5-1:0.0 failed with error -71 [ 2407.206093][ T5818] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 2407.206894][T16428] usb 5-1: USB disconnect, device number 110 [ 2407.231549][T28070] udevd[28070]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2407.393383][ T5818] usb 7-1: device descriptor read/64, error -71 [ 2407.513550][ T5818] usb usb7-port1: attempt power cycle [ 2407.923474][ T5818] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 2408.013388][ T5818] usb 7-1: device descriptor read/8, error -71 [ 2408.434094][ T5818] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 2408.506568][ T5818] usb 7-1: device descriptor read/8, error -71 [ 2408.687041][ T5818] usb usb7-port1: unable to enumerate USB device [ 2409.941848][T28375] fuse: Bad value for 'fd' [ 2410.062770][T28382] siw: device registration error -23 [ 2410.263467][T28290] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2412.065722][T28290] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2412.101329][T28290] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2412.120007][T28290] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2412.132121][T28290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2412.144729][T28290] usb 5-1: SerialNumber: syz [ 2412.508003][T28290] usb 5-1: 0:2 : does not exist [ 2412.614327][T28290] usb 5-1: USB disconnect, device number 111 [ 2412.863787][T28070] udevd[28070]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2413.220359][T16428] usb 9-1: new full-speed USB device number 106 using dummy_hcd [ 2413.457252][T16428] usb 9-1: device descriptor read/64, error -71 [ 2413.833449][T16428] usb 9-1: new full-speed USB device number 107 using dummy_hcd [ 2413.941251][T28417] siw: device registration error -23 [ 2414.183287][T16428] usb 9-1: device descriptor read/64, error -71 [ 2414.303510][T16428] usb usb9-port1: attempt power cycle [ 2414.580231][T28228] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2415.575808][T16428] usb 9-1: new full-speed USB device number 108 using dummy_hcd [ 2415.626635][T28228] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2415.640178][T16428] usb 9-1: device descriptor read/8, error -71 [ 2415.663700][T28228] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2415.674592][T28228] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2415.694307][T28228] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2415.703601][T28228] usb 5-1: Product: syz [ 2415.707846][T28228] usb 5-1: Manufacturer: syz [ 2415.712504][T28228] usb 5-1: SerialNumber: syz [ 2415.757920][T28228] usb 5-1: config 0 descriptor?? [ 2415.860454][T28228] usb 5-1: selecting invalid altsetting 0 [ 2415.953653][T16428] usb 9-1: new full-speed USB device number 109 using dummy_hcd [ 2415.981298][T25830] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 2416.040813][T16428] usb 9-1: device descriptor read/8, error -71 [ 2416.217565][T16428] usb usb9-port1: unable to enumerate USB device [ 2416.269053][T25830] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2416.314407][T25830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.335764][T25830] usb 7-1: Product: syz [ 2416.340118][T25830] usb 7-1: Manufacturer: syz [ 2416.357342][T25830] usb 7-1: SerialNumber: syz [ 2416.430801][T25830] usb 7-1: config 0 descriptor?? [ 2416.475179][T25830] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2417.196458][T16428] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 2417.455787][T16428] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2417.475328][T16428] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2417.487402][T16428] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2417.497907][T16428] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2417.509140][T16428] usb 9-1: SerialNumber: syz [ 2417.737407][T16428] usb 9-1: 0:2 : does not exist [ 2417.742443][T16428] usb 9-1: unit 5 not found! [ 2417.783849][T16428] usb 9-1: USB disconnect, device number 110 [ 2417.835418][T28073] udevd[28073]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2418.041601][T28455] siw: device registration error -23 [ 2418.382962][T16428] usb 5-1: USB disconnect, device number 112 [ 2418.448024][T22416] usb 7-1: USB disconnect, device number 97 [ 2421.083063][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5966'. [ 2423.831399][T28509] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2423.838969][T28509] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2423.945675][T28512] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2425.317291][T28525] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2429.960801][T28553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5988'. [ 2430.383418][T28228] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 2430.403309][T22416] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2430.463904][T28563] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2430.810840][T28228] usb 7-1: Using ep0 maxpacket: 8 [ 2430.940566][T22416] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2431.029440][T28228] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2431.043564][T22416] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2431.052797][T28228] usb 7-1: config 0 has no interface number 0 [ 2431.065602][T28228] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2431.083445][T22416] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2431.103077][T28228] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2431.119829][T22416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2431.148702][T22416] usb 5-1: SerialNumber: syz [ 2431.153825][T28228] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2431.215361][T28228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.252738][T28228] usb 7-1: config 0 descriptor?? [ 2431.425713][T28228] hso 7-1:0.1: Failed to find BULK IN ep [ 2431.586225][T22416] usb 5-1: 0:2 : does not exist [ 2431.766064][T22416] usb 5-1: unit 5 not found! [ 2431.974149][T22416] usb 5-1: USB disconnect, device number 113 [ 2432.127630][T28562] udevd[28562]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2434.370652][T28228] usb 7-1: USB disconnect, device number 98 [ 2438.157751][T28638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6010'. [ 2438.513535][T28290] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 2438.542573][T25830] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2438.733853][T28290] usb 9-1: Using ep0 maxpacket: 8 [ 2438.768152][T28290] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2438.780866][T28290] usb 9-1: config 0 has no interface number 0 [ 2438.787678][T28290] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2438.845771][T28290] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2438.859840][T28290] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2438.869516][T28290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.886615][T28290] usb 9-1: config 0 descriptor?? [ 2438.919025][T28290] hso 9-1:0.1: Failed to find BULK IN ep [ 2438.998064][T25830] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2439.011062][T25830] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2439.843115][T25830] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2439.939839][T25830] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2440.120785][T25830] usb 5-1: Product: syz [ 2440.633506][T25830] usb 5-1: Manufacturer: syz [ 2440.686039][T25830] usb 5-1: SerialNumber: syz [ 2440.786151][T25830] usb 5-1: config 0 descriptor?? [ 2440.830352][T25830] usb 5-1: selecting invalid altsetting 0 [ 2441.466790][T25830] usb 5-1: USB disconnect, device number 114 [ 2441.831872][T28228] usb 9-1: USB disconnect, device number 111 [ 2443.217163][T28688] random: crng reseeded on system resumption [ 2445.843698][T28712] syz.7.6030: attempt to access beyond end of device [ 2445.843698][T28712] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2445.857239][T28712] hfsplus: unable to find HFS+ superblock [ 2446.153706][ T5818] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2446.417716][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2446.506402][ T5818] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2446.593353][ T5818] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2446.645530][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2446.686123][ T5818] usb 5-1: SerialNumber: syz [ 2446.701049][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6031'. [ 2446.971739][ T5818] usb 5-1: 0:2 : does not exist [ 2446.985034][T28719] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2446.992516][T28719] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2447.097770][ T5818] usb 5-1: USB disconnect, device number 115 [ 2447.169538][T28711] udevd[28711]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2447.646039][T28299] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2448.422154][T28299] usb 7-1: Using ep0 maxpacket: 8 [ 2449.336004][T28299] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2449.357175][T28299] usb 7-1: config 0 has no interface number 0 [ 2449.391301][T28748] random: crng reseeded on system resumption [ 2449.401697][T28299] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2449.446552][T28299] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2449.582071][T28299] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2449.699252][T28299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.819996][T28299] usb 7-1: config 0 descriptor?? [ 2449.905458][T28299] usb 7-1: can't set config #0, error -71 [ 2450.724764][T28299] usb 7-1: USB disconnect, device number 99 [ 2451.305945][T28759] fuse: Bad value for 'fd' [ 2451.454199][T28761] syz.7.6042: attempt to access beyond end of device [ 2451.454199][T28761] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2451.468561][T28761] hfsplus: unable to find HFS+ superblock [ 2452.509913][T28774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6047'. [ 2452.734176][T28290] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 2452.973078][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6051'. [ 2453.024087][T28290] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2453.050884][T28290] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2453.069587][T28290] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2453.090909][T28290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2453.103080][T28290] usb 9-1: SerialNumber: syz [ 2453.334416][T22416] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2453.564668][T22416] usb 5-1: Using ep0 maxpacket: 8 [ 2453.620754][T28290] usb 9-1: 0:2 : does not exist [ 2453.629555][T22416] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2453.655181][T22416] usb 5-1: config 0 has no interface number 0 [ 2453.693339][T22416] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2453.709129][T22416] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2453.752127][T22416] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2453.783756][T28290] usb 9-1: USB disconnect, device number 112 [ 2453.826698][T22416] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2453.866763][T22416] usb 5-1: config 0 descriptor?? [ 2453.897218][T22416] hso 5-1:0.1: Failed to find BULK IN ep [ 2453.905838][T28711] udevd[28711]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2453.980640][T28790] syz.6.6053: attempt to access beyond end of device [ 2453.980640][T28790] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2453.994181][T28790] hfsplus: unable to find HFS+ superblock [ 2454.008451][T28790] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2454.018171][T28790] cramfs: wrong magic [ 2455.883695][T28801] random: crng reseeded on system resumption [ 2456.771817][T28806] syz.7.6057: attempt to access beyond end of device [ 2456.771817][T28806] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2456.785382][T28806] hfsplus: unable to find HFS+ superblock [ 2457.209866][T25830] usb 5-1: USB disconnect, device number 116 [ 2457.745112][T28813] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6059'. [ 2458.762630][T28834] syz.4.6063: attempt to access beyond end of device [ 2458.762630][T28834] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2458.776991][T28834] hfsplus: unable to find HFS+ superblock [ 2458.796309][T28834] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2458.806951][T28834] cramfs: wrong magic [ 2459.089720][ T8] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 2460.358212][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2460.369421][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2461.030862][ T8] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 2461.058844][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2461.194541][ T8] usb 9-1: config 0 descriptor?? [ 2461.357402][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6070'. [ 2461.629950][ T8] hid-led 0003:1D34:000A.0006: unknown main item tag 0x2 [ 2461.651521][T16428] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2461.827563][ T8] hid-led: probe of 0003:1D34:000A.0006 failed with error -71 [ 2461.849935][ T8] usb 9-1: USB disconnect, device number 113 [ 2462.057717][T16428] usb 7-1: Using ep0 maxpacket: 8 [ 2462.542434][T16428] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2462.751015][T16428] usb 7-1: config 0 has no interface number 0 [ 2462.761457][T16428] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2462.773522][T16428] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2462.784923][T16428] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2462.794417][T16428] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.816512][T16428] usb 7-1: config 0 descriptor?? [ 2462.846470][T16428] hso 7-1:0.1: Failed to find BULK IN ep [ 2462.961145][T28876] syz.7.6075: attempt to access beyond end of device [ 2462.961145][T28876] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2462.974671][T28876] hfsplus: unable to find HFS+ superblock [ 2462.994828][T28876] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2463.004818][T28876] cramfs: wrong magic [ 2465.585528][T25282] usb 7-1: USB disconnect, device number 100 [ 2466.568362][T28909] syz.6.6086: attempt to access beyond end of device [ 2466.568362][T28909] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2466.582762][T28909] hfsplus: unable to find HFS+ superblock [ 2466.595567][T28909] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2466.605890][T28909] cramfs: wrong magic [ 2467.870152][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.877917][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.793014][T28925] binder: 28924:28925 ioctl c0306201 200000000240 returned -14 [ 2472.389534][T28961] syz.7.6101: attempt to access beyond end of device [ 2472.389534][T28961] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2472.404399][T28961] hfsplus: unable to find HFS+ superblock [ 2473.921116][ T28] audit: type=1326 audit(1750333551.283:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28970 comm="syz.7.6105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabaa18e929 code=0x0 [ 2474.841152][T28985] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2474.849892][T28985] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2477.018323][T29014] syz.4.6116: attempt to access beyond end of device [ 2477.018323][T29014] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2477.031915][T29014] hfsplus: unable to find HFS+ superblock [ 2477.043548][T29014] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2477.054103][T29014] cramfs: wrong magic [ 2480.346949][T29050] binder: 29048:29050 ioctl c0306201 200000000240 returned -11 [ 2482.780496][T29078] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2482.791886][T29078] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2485.303400][T25282] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 2485.509030][T25282] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2485.594630][T25282] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2485.624151][T25282] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2485.657827][T25282] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2485.682177][T25282] usb 9-1: SerialNumber: syz [ 2486.362433][T25282] usb 9-1: 0:2 : does not exist [ 2486.461301][T25282] usb 9-1: USB disconnect, device number 114 [ 2486.651024][T29095] udevd[29095]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2487.601606][T29119] netlink: 'syz.8.6147': attribute type 1 has an invalid length. [ 2488.114832][T29127] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2488.139775][T29127] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2492.116894][T28290] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2492.209896][T29148] netlink: 'syz.7.6158': attribute type 1 has an invalid length. [ 2492.354968][T28290] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2492.383234][T28290] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2492.393981][T28290] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2492.403095][T28290] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2492.423241][T28290] usb 7-1: SerialNumber: syz [ 2492.648706][T28290] usb 7-1: can't set config #1, error -71 [ 2493.434589][T28290] usb 7-1: USB disconnect, device number 101 [ 2496.442925][ T8] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 2497.279000][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2497.306629][ T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2497.334764][ T8] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2497.355076][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2497.370186][ T8] usb 9-1: SerialNumber: syz [ 2497.595181][ T8] usb 9-1: 0:2 : does not exist [ 2497.636497][ T8] usb 9-1: unit 5 not found! [ 2497.693594][ T8] usb 9-1: USB disconnect, device number 115 [ 2497.759099][T29095] udevd[29095]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2500.093513][ T8] usb 9-1: new full-speed USB device number 116 using dummy_hcd [ 2500.286034][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2500.307143][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2500.338845][ T8] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2500.358427][ T8] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2500.385288][ T8] usb 9-1: Manufacturer: syz [ 2500.411389][ T8] usb 9-1: config 0 descriptor?? [ 2501.338651][ T8] usb 9-1: USB disconnect, device number 116 [ 2501.677758][T29248] syz.6.6185: attempt to access beyond end of device [ 2501.677758][T29248] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2501.692409][T29248] hfsplus: unable to find HFS+ superblock [ 2503.893470][T22416] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2504.512371][T22416] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2504.523323][T22416] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2504.534633][T22416] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2504.544541][T22416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2504.553931][T22416] usb 7-1: SerialNumber: syz [ 2504.856606][T22416] usb 7-1: 0:2 : does not exist [ 2505.829374][T29282] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2505.838003][T29282] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2506.443620][T22416] usb 7-1: USB disconnect, device number 102 [ 2506.517609][T29095] udevd[29095]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2510.141803][T29300] syz.7.6198: attempt to access beyond end of device [ 2510.141803][T29300] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2510.155460][T29300] hfsplus: unable to find HFS+ superblock [ 2510.750851][T29306] binder: 29305:29306 ioctl c0306201 200000000240 returned -11 [ 2512.963844][T29325] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2512.972718][T29325] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2513.578143][T29332] syz.6.6209: attempt to access beyond end of device [ 2513.578143][T29332] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2513.592216][T29332] hfsplus: unable to find HFS+ superblock [ 2515.833481][ T8] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2517.138104][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 2517.146055][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2517.156308][ T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2517.363657][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.501896][ T8] usb 5-1: config 0 descriptor?? [ 2518.157280][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6220'. [ 2518.252420][ T8] lenovo 0003:17EF:6062.0007: item fetching failed at offset 4/5 [ 2518.267345][ T8] lenovo 0003:17EF:6062.0007: hid_parse failed [ 2518.277509][ T8] lenovo: probe of 0003:17EF:6062.0007 failed with error -22 [ 2518.467970][ T8] usb 5-1: USB disconnect, device number 117 [ 2518.486404][T28299] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2518.614380][T28291] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 2518.739733][T28299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2518.825882][T28299] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2518.940379][T28299] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2519.017282][T28299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2519.071918][T28299] usb 7-1: SerialNumber: syz [ 2519.483505][T28291] usb 9-1: Using ep0 maxpacket: 8 [ 2519.494925][T28291] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2519.505036][T28291] usb 9-1: config 0 has no interface number 0 [ 2519.511406][T28291] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2519.525894][T28291] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2519.537263][T28291] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2519.547723][T28291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.567681][T28291] usb 9-1: config 0 descriptor?? [ 2519.587407][T28291] hso 9-1:0.1: Failed to find BULK IN ep [ 2519.622120][T28299] usb 7-1: 0:2 : does not exist [ 2519.668889][T28299] usb 7-1: USB disconnect, device number 103 [ 2519.722616][T29371] udevd[29371]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2520.770494][T29388] binder: 29386:29388 ioctl c0306201 200000000240 returned -11 [ 2522.037818][T25830] usb 9-1: USB disconnect, device number 117 [ 2523.701541][T29426] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2523.739983][T29426] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2524.153927][T28299] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2524.168169][ T28] audit: type=1326 audit(1750333601.523:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29429 comm="syz.7.6236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabaa18e929 code=0x0 [ 2524.365621][T28299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2524.380087][T28299] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2524.391435][T28299] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2524.412369][T28299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2524.429443][T28299] usb 7-1: SerialNumber: syz [ 2524.666790][T28299] usb 7-1: 0:2 : does not exist [ 2524.696400][T28299] usb 7-1: USB disconnect, device number 104 [ 2525.478707][T29371] udevd[29371]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2526.093748][T25830] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2526.737792][T29457] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2526.753464][T29457] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2526.783331][T25830] usb 5-1: device descriptor read/64, error -71 [ 2526.928753][T28291] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 2527.053719][T25830] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2527.233415][T25830] usb 5-1: device descriptor read/64, error -71 [ 2527.293936][T28291] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2527.310107][T28291] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2527.329524][T28291] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2527.355938][T25830] usb usb5-port1: attempt power cycle [ 2527.363904][T28291] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2527.397963][T28291] usb 7-1: Manufacturer: syz [ 2527.461482][T28291] usb 7-1: config 0 descriptor?? [ 2527.765987][T28299] usb 7-1: USB disconnect, device number 105 [ 2527.774223][T25830] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2527.834060][T25830] usb 5-1: device descriptor read/8, error -71 [ 2528.116635][T25830] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2528.154174][T25830] usb 5-1: device descriptor read/8, error -71 [ 2528.790167][T25830] usb usb5-port1: unable to enumerate USB device [ 2529.219529][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.227660][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.015918][T29482] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2530.087547][T29482] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2530.248503][T28299] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2530.446797][T28299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2530.457215][T28299] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2530.471726][T28299] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2530.482318][T28299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2530.494460][T28299] usb 7-1: SerialNumber: syz [ 2530.623451][T25830] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 2530.722026][T28299] usb 7-1: 0:2 : does not exist [ 2530.736146][T28299] usb 7-1: USB disconnect, device number 106 [ 2531.234099][T25830] usb 9-1: device descriptor read/64, error -71 [ 2531.263954][T29371] udevd[29371]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2531.474354][ T28] audit: type=1326 audit(1750333608.843:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29500 comm="syz.4.6261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddf778e929 code=0x0 [ 2531.513424][T25830] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2531.663443][T25830] usb 9-1: device descriptor read/64, error -71 [ 2531.784233][T25830] usb usb9-port1: attempt power cycle [ 2531.815642][T28299] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 2532.019813][T28299] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 2532.029076][T28299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.037205][T28299] usb 7-1: Product: syz [ 2532.041406][T28299] usb 7-1: Manufacturer: syz [ 2532.046072][T28299] usb 7-1: SerialNumber: syz [ 2532.052677][T28299] usb 7-1: config 0 descriptor?? [ 2532.061620][T28299] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 2532.193279][T25830] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 2532.234884][T25830] usb 9-1: device descriptor read/8, error -71 [ 2532.503263][T25830] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2532.534604][T25830] usb 9-1: device descriptor read/8, error -71 [ 2532.709439][T25830] usb usb9-port1: unable to enumerate USB device [ 2533.101523][T25830] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2533.394007][T28299] gspca_sunplus: reg_r err -32 [ 2533.398934][T28299] sunplus: probe of 7-1:0.0 failed with error -32 [ 2533.407489][T25830] usb 9-1: device descriptor read/64, error -71 [ 2533.441564][T28299] usb 7-1: USB disconnect, device number 107 [ 2535.135902][ T28] audit: type=1326 audit(1750333612.503:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29532 comm="syz.6.6271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa432b8e929 code=0x0 [ 2535.289471][T29541] 9pnet_fd: Insufficient options for proto=fd [ 2535.616761][T29510] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2535.638335][T29510] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2537.045320][T29561] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 2537.707417][T29565] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2537.716505][T29565] overlayfs: missing 'lowerdir' [ 2539.054286][T29576] 9pnet_fd: Insufficient options for proto=fd [ 2540.726541][T29593] fuse: Bad value for 'fd' [ 2540.772177][T29595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6289'. [ 2540.894697][T29599] binder: 29598:29599 ioctl c0306201 200000000240 returned -11 [ 2542.114532][T29615] 9pnet_fd: Insufficient options for proto=fd [ 2542.733294][T16428] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 2542.947925][T16428] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2543.014383][T16428] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2543.043628][T16428] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2543.074742][T16428] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2543.094668][T16428] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2543.113685][T16428] usb 5-1: Manufacturer: syz [ 2543.135827][T16428] usb 5-1: config 0 descriptor?? [ 2543.255947][T29630] fuse: Bad value for 'fd' [ 2544.026593][T16428] usb 5-1: USB disconnect, device number 122 [ 2544.151850][T29647] syz.6.6305: attempt to access beyond end of device [ 2544.151850][T29647] loop6: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2544.166041][T29647] hfsplus: unable to find HFS+ superblock [ 2544.183647][T29647] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2544.194027][T29647] cramfs: wrong magic [ 2545.548773][T29660] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=890508460 (1781016920 ns) > initial count (776 ns). Using initial count to start timer. [ 2546.214119][T29672] binder: 29671:29672 ioctl c0306201 200000000240 returned -11 [ 2547.103214][T22416] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2547.273323][T22416] usb 7-1: device descriptor read/64, error -71 [ 2547.553466][T22416] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2547.753239][T22416] usb 7-1: device descriptor read/64, error -71 [ 2547.777613][T29688] syz.8.6317: attempt to access beyond end of device [ 2547.777613][T29688] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2547.791669][T29688] hfsplus: unable to find HFS+ superblock [ 2547.923859][T29690] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2547.931129][T29690] cramfs: wrong magic [ 2547.953702][T22416] usb usb7-port1: attempt power cycle [ 2547.963285][T28299] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 2548.164882][T28299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2548.194155][T28299] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2548.205734][T28299] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2548.221274][T28299] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2548.232421][T28299] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2548.248403][T28299] usb 5-1: Manufacturer: syz [ 2548.256717][T28299] usb 5-1: config 0 descriptor?? [ 2548.483304][T22416] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2548.544104][T22416] usb 7-1: device descriptor read/8, error -71 [ 2548.585300][T28299] usb 5-1: USB disconnect, device number 123 [ 2548.688117][T29693] 9pnet_fd: Insufficient options for proto=fd [ 2548.978405][T22416] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2549.024025][T22416] usb 7-1: device descriptor read/8, error -71 [ 2549.175630][T22416] usb usb7-port1: unable to enumerate USB device [ 2551.023308][T28299] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2551.221281][T28299] usb 7-1: Using ep0 maxpacket: 8 [ 2551.232478][T28299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2551.256930][T28299] usb 7-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2551.281269][T28299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.311556][T28299] usb 7-1: config 0 descriptor?? [ 2551.760307][T28299] usbhid 7-1:0.0: can't add hid device: -71 [ 2551.776895][T28299] usbhid: probe of 7-1:0.0 failed with error -71 [ 2551.810651][T28299] usb 7-1: USB disconnect, device number 112 [ 2552.321586][T29725] 9pnet_fd: Insufficient options for proto=fd [ 2552.553297][T29733] tipc: Started in network mode [ 2552.564036][T29733] tipc: Node identity 2d812247aaeb9506002e, cluster identity 4711 [ 2554.955130][T29751] 9pnet_fd: Insufficient options for proto=fd [ 2555.450945][T28299] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 2555.723348][T28299] usb 9-1: Using ep0 maxpacket: 8 [ 2555.757290][T28299] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2555.799310][T28299] usb 9-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 2555.815032][T28299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.829279][T28299] usb 9-1: config 0 descriptor?? [ 2556.972665][T28299] usbhid 9-1:0.0: can't add hid device: -71 [ 2556.981030][T28299] usbhid: probe of 9-1:0.0 failed with error -71 [ 2556.992776][T28299] usb 9-1: USB disconnect, device number 124 [ 2557.141095][T29778] 9pnet_fd: Insufficient options for proto=fd [ 2558.373363][T28299] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2559.579543][T28299] usb 9-1: Using ep0 maxpacket: 32 [ 2559.587766][T28299] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2559.597888][T28299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.609828][T28299] usb 9-1: config 0 descriptor?? [ 2559.960092][T28299] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2560.280519][T28299] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2560.294956][T28299] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2560.388743][T28291] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2560.448120][T29810] 9pnet_fd: Insufficient options for proto=fd [ 2560.564406][T28291] usb 7-1: device descriptor read/64, error -71 [ 2561.023382][T28291] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2561.183586][T28291] usb 7-1: device descriptor read/64, error -71 [ 2561.331243][T28291] usb usb7-port1: attempt power cycle [ 2561.896878][T29832] syz.8.6367: attempt to access beyond end of device [ 2561.896878][T29832] loop8: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2561.910616][T29832] hfsplus: unable to find HFS+ superblock [ 2561.921753][T29832] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2561.932750][T29832] cramfs: wrong magic [ 2562.855382][T28291] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2563.134804][T28291] usb 7-1: device descriptor read/8, error -71 [ 2563.142316][T12393] wlan1: Trigger new scan to find an IBSS to join [ 2563.168698][T29836] 9pnet_fd: Insufficient options for proto=fd [ 2563.844480][T28298] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2563.863238][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6374'. [ 2564.063266][T28298] usb 5-1: Using ep0 maxpacket: 32 [ 2565.644514][T28298] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2565.841627][T28298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.223045][T28298] usb 5-1: config 0 descriptor?? [ 2566.545508][T28298] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2569.375279][T29890] syz.7.6380: attempt to access beyond end of device [ 2569.375279][T29890] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2569.393411][T29890] hfsplus: unable to find HFS+ superblock [ 2569.405727][T29890] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2569.417899][T29890] cramfs: wrong magic [ 2569.468268][T26895] wlan1: Trigger new scan to find an IBSS to join [ 2571.856889][T12393] wlan1: Creating new IBSS network, BSSID aa:2f:ea:ed:a5:4e [ 2572.338148][T29922] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2572.348082][T29922] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2573.611764][T29931] syz.7.6393: attempt to access beyond end of device [ 2573.611764][T29931] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 2573.625488][T29931] hfsplus: unable to find HFS+ superblock [ 2573.637260][T29931] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2573.656179][T29931] cramfs: wrong magic [ 2575.513236][ T8] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2575.673316][ T8] usb 7-1: device descriptor read/64, error -71 [ 2577.289508][ T8] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2577.443347][ T8] usb 7-1: device descriptor read/64, error -71 [ 2577.563390][ T8] usb usb7-port1: attempt power cycle [ 2578.053218][ T8] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2579.562524][ T8] usb 7-1: device descriptor read/8, error -71 [ 2579.723481][T29969] binder: 29968:29969 ioctl c0306201 200000000240 returned -11 [ 2583.545338][T30004] binder: 30003:30004 ioctl c0306201 200000000240 returned -11 [ 2583.624005][ T8] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2583.793523][ T8] usb 7-1: device descriptor read/64, error -71 [ 2584.113633][ T8] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2584.313946][ T8] usb 7-1: device descriptor read/64, error -71 [ 2584.456749][ T8] usb usb7-port1: attempt power cycle [ 2584.893433][ T8] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2584.936352][ T8] usb 7-1: device descriptor read/8, error -71 [ 2585.216591][ T8] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2585.256148][ T8] usb 7-1: device descriptor read/8, error -71 [ 2585.375322][ T8] usb usb7-port1: unable to enumerate USB device [ 2585.984347][T30011] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2585.993274][T30011] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2588.850546][T30046] binder: 30045:30046 ioctl c0306201 200000000240 returned -11 [ 2589.795451][T30063] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2589.810938][T30063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2589.821892][T30063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2589.836056][T30063] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2589.844748][T30063] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2589.852238][T30063] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2589.884113][T30061] trusted_key: encrypted_key: key user:syz not found [ 2589.992844][T30062] lo speed is unknown, defaulting to 1000 [ 2590.284063][T30065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2590.292840][T30065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2590.651176][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.657688][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.845386][T30062] chnl_net:caif_netlink_parms(): no params data found [ 2591.973361][T30063] Bluetooth: hci3: command tx timeout [ 2591.988061][T30062] bridge0: port 1(bridge_slave_0) entered blocking state [ 2592.005873][T30062] bridge0: port 1(bridge_slave_0) entered disabled state [ 2592.013327][T30062] bridge_slave_0: entered allmulticast mode [ 2592.020950][T30062] bridge_slave_0: entered promiscuous mode [ 2592.031237][T30062] bridge0: port 2(bridge_slave_1) entered blocking state [ 2592.038592][T30062] bridge0: port 2(bridge_slave_1) entered disabled state [ 2592.046442][T30062] bridge_slave_1: entered allmulticast mode [ 2592.054251][T30062] bridge_slave_1: entered promiscuous mode [ 2592.089244][T30062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2592.102167][T30062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2592.135118][T30082] trusted_key: encrypted_key: keylen parameter is missing [ 2592.705709][T30062] team0: Port device team_slave_0 added [ 2592.745395][T30062] team0: Port device team_slave_1 added [ 2592.927220][T30062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2592.934372][T30062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2592.973337][T30062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2593.008543][T30062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2593.021033][T30062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2593.039308][T30090] binder: 30088:30090 ioctl c0306201 200000000240 returned -11 [ 2593.058541][T30062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2593.147456][T30062] hsr_slave_0: entered promiscuous mode [ 2593.160965][T30062] hsr_slave_1: entered promiscuous mode [ 2593.767362][T30062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2593.782191][T30062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2593.800258][T30062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2593.818885][T30062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2593.826190][T28301] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2594.003308][T30063] Bluetooth: hci3: command tx timeout [ 2594.028202][T28301] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.087760][T28301] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2594.155025][T28301] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2594.202078][T28301] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2594.230965][T30062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2594.237961][T28301] usb 7-1: SerialNumber: syz [ 2594.340470][T30062] 8021q: adding VLAN 0 to HW filter on device team0 [ 2594.367689][T26895] bridge0: port 1(bridge_slave_0) entered blocking state [ 2594.374994][T26895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2594.428991][T26895] bridge0: port 2(bridge_slave_1) entered blocking state [ 2594.436283][T26895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2594.478365][T28301] usb 7-1: 0:2 : does not exist [ 2594.592123][T28301] usb 7-1: USB disconnect, device number 125 [ 2594.746565][T30101] udevd[30101]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2595.143636][T30062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2595.418862][T30062] veth0_vlan: entered promiscuous mode [ 2595.434489][T30062] veth1_vlan: entered promiscuous mode [ 2595.468826][T30062] veth0_macvtap: entered promiscuous mode [ 2595.480365][T30062] veth1_macvtap: entered promiscuous mode [ 2595.501510][T30062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.512542][T30062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.522489][T30062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2595.534803][T30062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.546437][T30062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2595.568920][T30062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.579942][T30062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.592094][T30062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2595.604518][T30062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2595.615974][T30062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2595.629052][T30062] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2595.638346][T30062] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2595.647769][T30062] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2595.656688][T30062] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2595.750194][T27317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2595.768024][T27317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2595.801450][ T8460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2595.809870][ T8460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2596.083450][T30063] Bluetooth: hci3: command tx timeout [ 2598.163446][T30063] Bluetooth: hci3: command tx timeout [ 2601.933499][T12393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2621.382473][T28299] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2621.398937][T28298] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2621.414476][T28298] dvb_usb_az6027: probe of 5-1:0.0 failed with error -2 [ 2621.423172][T28299] dvb_usb_az6027: probe of 9-1:0.0 failed with error -110 [ 2621.489589][T28298] usb 5-1: USB disconnect, device number 124 [ 2621.504651][T28299] usb 9-1: USB disconnect, device number 125 [ 2622.285264][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2622.367375][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2622.449475][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2622.510319][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2623.870253][ T40] hsr_slave_0: left promiscuous mode [ 2623.876816][ T40] hsr_slave_1: left promiscuous mode [ 2623.885064][ T40] bridge_slave_1: left allmulticast mode [ 2623.890788][ T40] bridge_slave_1: left promiscuous mode [ 2623.896927][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 2623.907295][ T40] bridge_slave_0: left allmulticast mode [ 2623.913002][ T40] bridge_slave_0: left promiscuous mode [ 2623.919126][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.956495][ T40] veth1_macvtap: left promiscuous mode [ 2623.962112][ T40] veth0_macvtap: left promiscuous mode [ 2623.968361][ T40] veth1_vlan: left promiscuous mode [ 2623.974058][ T40] veth0_vlan: left promiscuous mode [ 2624.780224][ T40] team0 (unregistering): Port device team_slave_1 removed [ 2624.856375][ T40] team0 (unregistering): Port device team_slave_0 removed [ 2624.931756][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2625.005827][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2625.860200][ T40] bond0 (unregistering): Released all slaves [ 2625.971212][T16428] lo speed is unknown, defaulting to 1000 [ 2632.857880][T18484] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2652.088991][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.096602][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2663.782870][ T8460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2694.707541][T26895] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2713.530160][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.543107][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.613312][T30063] Bluetooth: hci3: command 0x0406 tx timeout [ 2725.632389][ T40] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2756.557102][T12393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2774.969167][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.975652][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2787.584590][T12393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2818.509113][T12393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2836.409614][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.416143][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2849.435058][T27317] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2880.358657][T26895] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2884.403523][ T59] kworker/dying (59) used greatest stack depth: 19176 bytes left