last executing test programs: 2m44.996929045s ago: executing program 0 (id=1205): r0 = userfaultfd(0x80001) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 2m40.00606286s ago: executing program 0 (id=1214): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000000100000001909e608303951e902bbac14141000000000d0946eadd6fe0000000000000000000000000000fffe000000003b00000041ebdbc9c47a225efe5a2131fb4b115c7f753effb7f75e4352cfef021e15a7461eb8bd4bae69b6e2173e77766f7e3b0ce9a6fdb3a389d45a23580e99d9d609f8bbe756c2c824b27b9012533ef09f352900efe8b00437eed95c162f1fb099b8fb3285d9add39f971b8d7583422d6a614ceb14c172ae085cea5abd212cf234864b65e114186e7d5972676f89d752ed0d644726aec35f194e54c01bdbc2c107c757ea70ef381160434d217bb180dcea899aae103f70a4060b8ebd137490f4d7fedb54f08f123ff1ef570300000000000000d6aee2f87a311d38f9676366618af0cfdd92cb40c989da3db6619d507ed6666043ccf1f6faac7a3e4af55c6714bf2bec739acf518f86770276efce89c9a08f8da6f3ef8d7abe1391a00a05418139a730d3087f929f6fac48e0fcd95be16967f82f99a43535b523d6f89bcc101a67a44825fed2950bafb3f58ca066efbae3a05e90308d45c9217bb15890f4de80b7db0a02920ee155bfafcb5f562b387e0c15fe6b26a9f5760c5d6025741f1a9113119411f2ce0b58720d96496c99ec406509a66dcc4c575125ca812d1b40710299c04289e00bb309ea42a1f608bba2d568e7b3dbc8ed3faab39bb042eca0645950d096d1e1ca6da16e3cf858a3bef62cb01acda6d3caad18a0775f4d2dec2fc14e92c49bcfac61dd4f4727a84c6462fb9616df668aa86c718c0aaa1a53320ab877ec38c815ec71cbbb7926c988d2618284ca34873de7f5528b8bdd8c803d5d10d32aa5c3cf659add561a2c6340db5bd82c9e1cdc1214adabffd85a1c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000410000000232000000fe8000000000000000000000000000bb07000000000000000000000000000000fffffeffffffffff0000000000000000040000000000000006000000000000000900000000000000000000000000000061f4ffffffffffff0000000000000000000000000000000000000100000000000300000002000000000000002abd70000000000002000000300000000000000048000200656362286369706865725f6e756c6c2900"/224], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3c49525f, 0x8d}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x3, 0xb, 0xfc, '\x00', 0x3}, {0xbe, 0x9, 0xfc, '\x00', 0x7d}, {0xbc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xec}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0x1f, 0x4, 0x2}, {0xf9, 0x0, 0x0, '\x00', 0x4}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x1, 0x1, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x8}, {0xc2, 0x0, 0x0, '\x00', 0x49}, {0x1, 0x21, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0x10, 0x1}, {0x0, 0x12, 0x3, '\x00', 0x35}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x80, 0xff, 0x1, '\x00', 0x7}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/59, 0x3b) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv2(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x4, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r7, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="3a0c02000000020f"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="6009aa00000041e0ac9ab0e719150ecc4d79f6cac965f470abbf53b1eb44769193f3216c3e757d12afdc0992b3a7c3b4faef289cf782ffa01a05c70f809b8f1beb8503e4e6f4a805ac31629f0e49453010ef352511cd745dae5a19f37ce6890cdc5e63225f34df8d5de0dfb2237ab4a7801e6b1e4cdead20aa3bb8610ece2d6f2524dbaa591d94bfd65a752a5a4a42090bed1480755a650badcc16125bfabdab2745f6189e18fade556b5490a63c19bbbf2b6c"], 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m35.824963438s ago: executing program 0 (id=1228): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x4, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) 2m34.505842005s ago: executing program 0 (id=1233): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x400}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 2m31.206755902s ago: executing program 0 (id=1240): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000410000000232000000fe8000000000000000000000000000bb07000000000000000000000000000000fffffeffffffffff0000000000000000040000000000000006000000000000000900000000000000000000000000000061f4ffffffffffff0000000000000000000000000000000000000100000000000300000002000000000000002abd70000000000002000000300000000000000048000200656362286369706865725f6e756c6c2900"/224], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3c49525f, 0x8d}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x3, 0xb, 0xfc, '\x00', 0x3}, {0xbe, 0x9, 0xfc, '\x00', 0x7d}, {0xbc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xec}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0x1f, 0x4, 0x2}, {0xf9, 0x0, 0x0, '\x00', 0x4}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x1, 0x1, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x8}, {0xc2, 0x0, 0x0, '\x00', 0x49}, {0x1, 0x21, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0x10, 0x1}, {0x0, 0x12, 0x3, '\x00', 0x35}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x80, 0xff, 0x1, '\x00', 0x7}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/59, 0x3b) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv2(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x4, 0x3, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r7, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="3a0c02000000020f"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="6009aa00000041e0ac9ab0e719150ecc4d79f6cac965f470abbf53b1eb44769193f3216c3e757d12afdc0992b3a7c3b4faef289cf782ffa01a05c70f809b8f1beb8503e4e6f4a805ac31629f0e49453010ef352511cd745dae5a19f37ce6890cdc5e63225f34df8d5de0dfb2237ab4a7801e6b1e4cdead20aa3bb8610ece2d6f2524dbaa591d94bfd65a752a5a4a42090bed1480755a650badcc16125bfabdab2745f6189e18fade556b5490a63c19bbbf2b6c"], 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.155582524s ago: executing program 0 (id=1248): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) close_range(r2, 0xffffffffffffffff, 0x0) 2m13.97518946s ago: executing program 32 (id=1248): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) close_range(r2, 0xffffffffffffffff, 0x0) 18.64892075s ago: executing program 2 (id=1624): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103ff0310fc43"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x3, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_socket_connect_nvme_tcp() close(r6) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff80}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x8000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 17.070859897s ago: executing program 5 (id=1628): r0 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f00000004c0), &(0x7f00000005c0)=""/211, &(0x7f00000006c0)="c313d339d48c65aeede6daa5572455d8e1d5c3adba8b61dc3ea10ac91d8574a8a46d515260a8668715e1c495071ad475e05a95bdcb36cf8e795afbd41779015f3c2a8d68491c104bd5ee2a9eb4871a27b48e908ea464890b255299d4327ed6b2e08163a5ae6f88db685d24f3cf749b33089183932b431715ede3fbe6e0e72f7f36b5fc7cffc128ee2d66e5f0241ab7379a04f1e03f013e6e26ae7303c8c17cd53cf80f8b1227670830183d1eea79abc05aa298be89ce8886bdbfc96d15098ca2", &(0x7f00000007c0)="fdc74db740fa0906f42c4f3c0070b9bfef6221c3fc7005857abc9ea1022cc69a03", 0xf4f, r3}, 0x38) setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8010) shutdown(r2, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 14.536548668s ago: executing program 4 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000000180)={"4f148885365c01f6327cffbfde3271087d11fca10a424a283dddd79b4894"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x1, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 11.367824071s ago: executing program 1 (id=1637): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x169) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 11.366426369s ago: executing program 3 (id=1638): syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r3}, 0x38) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'wrr\x00', 0x30, 0x3, 0x4e}, 0x2c) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) recvfrom(r2, 0x0, 0x0, 0x20, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket(0x1d, 0x2, 0x6) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 11.054931215s ago: executing program 5 (id=1639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, 0x0, 0x0) sysfs$1(0x7ffffffe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xff1) syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x6, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 10.245077424s ago: executing program 1 (id=1640): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f00000000c0), 0x1, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000200)={0x0, 0x0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40000, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r9}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000c00)={@rand_addr, 0x0}, &(0x7f0000000c40)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001d80)={'syztnl1\x00', &(0x7f0000004380)={'syztnl1\x00', 0x0, 0x2f, 0xd2, 0x1, 0x9, 0x40, @mcast2, @mcast1, 0x10, 0x8000, 0x7, 0xfff}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004400)={'team0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000004780)=[{{&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="2ba7205b9bb88b18065b6757d61bffc5b875776d14b22c69fbdbefb72bcc78596187229a848e", 0x26}, {&(0x7f0000000240)="faf37df1a661d30643189e069ce5237f71660919218acd8776394b0d537576d8ebf1b1b4063bc5e703d27ad4273231d324bacc6f68cd1e242842d065a22054acb033d0019ec13b726cffb47516e612b6c2742121b2ad41f27d8a9b286cc1f42dc262beeff4907403bb011b3af34d789e35fbd5519f63659377c7b749ec759fd43f1e89663b8477c5021dea30cafcbe7fa4929d56fc224bb2a6dd036ed3fd89", 0x9f}, {&(0x7f0000000300)="5227e9d1b238d5269891dac242f98354cec2800dbbb8c2b1fcbca9154827a28746ed54a4a0df4641a9f29e55f5ac4fb3fbc93bc180e09aedd05f950df4a1ca24e85e74f3addebea0ce3f019fc77e3363eaa938342cc8fd978d7ba1d3324ffc4e57758237a53f", 0x66}, {&(0x7f00000001c0)="17a68bee5b28a3f390ee39757b00b63339a7c4a0ae86b5328ea0c433d063880d3ad9625a5258fb8e928fb5a6d95d8610d5b872d8d1bf", 0x36}, {&(0x7f0000000380)="a1c0fc55721ba3795041c9bb3c57c72124fe830f0ce529523961801b6543afd955af2bf9467e04b0915121d7def34fce50d7555eeaec3bf74bad30a83e58356f7d7cb6c40996dedd1443113fc96c50cf68b28cc54187fdd3593df2d66ead5d86fc5b2fd34c6cfb867a618e48aca8257bb432330d8cfdc0afb00d52ec2d2659acb1da30afaa5b4a11c9fd31b2a429c276eadc1c7682c709e42d5163cdca912ca1ce4590d43d30d7234b5382a79d66372faffc09682fb160eac7f7934fd1e994df58a7d6666956b751b0", 0xc9}], 0x5, &(0x7f0000000500)=[@ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xbc, 0x1, 0x3, [{@rand_addr=0x64010102, 0x6}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010102, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xb8}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000740)="95f2a8b6a7e9a196edd26bbd350ad8ae32efc474c1fcb3fa7dbf22c158283ce8a6ac04fddb422a22dd19f61e213db769779ab2b7be0d6abc9bf2ecc6e03faba5f6c91b43a1b1b11dbdc7643104f6639c75a4dbe7b36e71cf7ec9d3aa3fa3fbd2e0794cb6290b5fa5fca6e110f095d95c1f8eec6947579ad695b10fb33f4233f997446bec00959b4474b8019cdad6207aaa1881a2cb5a36413f773081e448e859b7e98b7b98f8012892432a4eafd58eeec661d69552c0a6cad3fe96a02fe87c2f4dcaf0cda1a29700f86863d4dc879b4189dff333a047bb9e1569c939763a667ea6269219c8b9f8914b0925d1c68a88f1805bf8", 0xf3}, {&(0x7f0000000600)="595fdce6021c4328f4140fb7e565310c559012b1", 0x14}, {&(0x7f0000000640)="d3e0afd54fa419301cac", 0xa}, {&(0x7f0000000840)="4b951f0c1730650463c29e836dc6734c074234da3ac9b2f35c6f0f1da4c57890f9e556ea2964aa7511c80310f5126a2c59c96d508b6096cf0df61f49a949fea25b02830ce8ac4001bb18fe3089428f3cfd57a11c3bc3419cfe44c6b40a6cbe4b52f934da021ece9da5491d51ce5f74edcfae10fcc2e53b4c8294909f", 0x7c}, {&(0x7f00000008c0)="5807180432e4ce76d1265ca7782001bad5a77758d7c324bd013cd5d7185c690fb32926dd", 0x24}, {&(0x7f0000000900)="2b3b03af07ae184a5585a2b305df024380ab1b3b4dc424ff0806ed5a83dec373fe1697d525e5caf4f3c27949b8ecb73b88ac35dcc05143c59d6b5ffec5a9afe7fb8ab2025fd32e1672adf82aaa76026a68400fd74bd166723d03361dfafb1be71345378dca38724fc08ebc91ec01190da897915faf7f7e9ec3f2ad9da49014a3b53a7a8bc428fffc6ae2e840cf35d9137895488e876cafec4650e08c0fec4421523f86b5e0c1e0971c6a60910d5bbb1b9c04767c15b22b0602b2fd567fdd05e170469ada86f0d6e886b46a7336ec437ab880556356880e6a5161b4b0edbba2b9ae578f234641bcfbc9888a0c0f67cf5a7351b8d9ca19479ecb", 0xf9}, {&(0x7f0000000a00)="1b54aaa39e09b865e136bd580ff1c31abbb624678717a54a06a185adfb6538e2f539d89a88eb971bd1e90999b709a3c830a4586d8c80b8622f5b270a6c23445d92a0466e251427ced5c179d508c8ba0ed354987549d22004c2069e0114094d281226a65034590db07ae3d25edaa1d812a4953da5c70679d8d486d787b98ac832cc527fc0343ab05a18a811caa7e8c474272c8294fead686ba01d88dbe36dfe2c68c449e9ca5efa7a9addfdc19e13ceeb5ff09c1a70f758b6d18d19181367ff7f9d258b201f00c7140082789e530af53230b9a6b7d5ccb6aaf82ab64f788099c05d6050eeefc949", 0xe7}, {&(0x7f0000000b00)="9a7996ab2a2201791b3989bc4eaf6df08abb9d258b0d18f7140f5c2e6ab70a545cd7dbc8e521045617ec409d4d7e1aeca37ba462eaf8f5bed5f3042d60c39cd501fa9bcb1448deb81f14e60a", 0x4c}], 0x8, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @cipso={0x86, 0x45, 0xffffffffffffffff, [{0xda79969b56d8d75d, 0xa, "037061e9fee6312b"}, {0x6, 0xc, "4ec4b04c8127b3da50f4"}, {0x1, 0x12, "65c7fb5cf068083cbb5fdc9ebd9f7bca"}, {0x2, 0xe, "086c6a1771ac5c6daf3506e6"}, {0x6, 0x9, "afc83ece33fb88"}]}, @ssrr={0x89, 0xf, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0x90, 0x1, 0x4, [{@private=0xa010102, 0x4}, {@broadcast, 0x4}, {@empty, 0x800}]}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x83, 0x9, "58d0c42339e0c9"}, @timestamp_prespec={0x44, 0x1c, 0x6b, 0x3, 0x9, [{@rand_addr=0x64010102, 0xffff}, {@rand_addr=0x64010101, 0x8}, {@remote, 0xb82}]}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}]}, @generic={0x7, 0x3, '|'}, @rr={0x7, 0xf, 0x5, [@rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x18, 0xb3, 0x0, 0x5, [0x2f00, 0xc9b, 0x200, 0x0, 0x1]}, @lsrr={0x83, 0x7, 0xc4, [@remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x36, [@broadcast, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x3, 0x3e}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x25, 0x0, 0x6, [0x76d7, 0x39, 0xa, 0x10000, 0x35]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @local, @multicast1}}}], 0x1e8}}, {{&(0x7f0000000e80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000001e00)="d6ff86717d7b20bafb8ab9249bb7f433a7d94189e42823dacc148baf96fcd5f9caf15480000d08cc3a005aa7e2b7d91f2e9d6546426823ed86033c19335dca3323176d07786aacf496fe92bb27742fac2a5a05b08b427318154699d39c5b58c688fc892ac7bde668631606921f1d5db0bba86688ebd52c7afda9d166694d1fd15600c2290bc03a70b7b49f93004e0cf8c5f1d8fad83e6560dbfe91773df9259115ca39f12148cd08e3d186dab9d48d557ecf0cdf92a6dac2f80bb822f9c6cb575be627da30945cf14a185cc5fef4fdfdaaad265f4a13025ac0b3ebf4b58799640d6b0711fd0af028ade510527a2a231e65ae1118cd937a01b15dab635866254772af6a33c56af5ffaa60af8e77283dc6ed4e37c080c2168f320afce995e83e9b59a490d9f2b83bd3ef9ebf0b18cb573483a310b97f09458fff16782e17d38c02503d72862b7ba1b061e093f464de9d1e8f72936f0cf9dc7b5f0b2c59259f7ee462a62535bf55b259390dd2404dbe4a8135e8f8401ba7b74a768cddd1c7c3a7982b08f510d6e657025653405a2fa2d56b2b149974b6eb702e834b2004d77f86a7dbce8105fb2214fa1d4fc09d7222a20e80a35ba112863b8224760a720cdf0603cd6fe4c6bd49f3371137c12af1d796145c31ead1aa7a50c0fc81a30cee1c5427da4895fcbd6f33a2109934459f7c5330c97d6ecc50fd81579716f188722073eb43ba23e1de116cd50a0c17a3fab4392fd6a43c9361048b33262912a23c390d15ba84b1cfea2a2222f503d040a51f4ed9a97f21e397e6ae6f84ca856b0dfa9f059d02ae5fd724c952e3e89be72d3d14daac1a0ca60861a2c9081f9398f84902741d15e311eb2cb4d705192fc81019d325bda42f095ee2307f6dc4bc693c22b714728a68f84d2373f24bd134c089a1e2d636914e3879f9d3de05936d74b7fad6f883981c12de63df062d15074779072cb001e07e0c476f3b2940b6235cf9cbe82b0a0ace225ef9ef9e982b0829906a90c2ac33f7d09beac4f1e0e39d2a7811a8ec141e5bf692e5eb08749b14a35afb141a18b2436d3a22d00fa1a211713ec50e68fa036e8f141e0664291ef0ab5dff76f2ba4f9ab687b8d365e1c22e1169c60b9416fe7e6d28bef6d54b83ee11973a36b7c2e0e4fbe2ed85e2d6e1f886c73e835c45b1911fee870f5b54951d0096311804b3af1b7bf351257baf8f4bf34e52858789174ed110fe614d29b8ad0ac0350fefc254d663d301bbe6e20202c5b04fb42dca4d7d22c299b61f1d2dd0d43493563bb78343e70292b37208c3ff4b9316a33213a8187ab31aaa35bf9987d1525518656b1708280cbade3f11596f2ce6f7eb8f5727163d62fac8743613f7701b444c1e13034ae9c91543652a76fcd0ec3803bbcaa244ceb6f3ed1b45213dcdcd4d7cd401ae9212e203136e5494a0ec23e1a3efe89ab83e904f1ced5f61408393e1d38f0b55a481164fa02bda3490fd8b640343629f1658007bf0e59ca2ed20e8ffda67c600cf29e8797ef257ee90dc2deb61100057dda16a168f957b0a2697031a6f4dd9b37de21c6fdfa772461e90210a1c5cbfd790f98d5f273087c73246a788825c2bc6aaafd69c3188763c5aea44cd4bca747323c08ef624b1eab342a8e4ff295eacec31150871083aeaa399deced499f43d65e21a0bcbe5965ba3ab2d89a7f0504d204f20db56e3b35452327f1a54c9367b4f28f355c091e45841228046ba1da9338731741f93793639f27c3393d258bfa87cfc970d3d078f365e368671cf0f394c19dabdc78ad1f2aeb295f5c8a346006c1dc07176c10940845cdc1af34f92a5d066a7ffaecb795da383be394f7b0ddd99d977037a06ee3856e35e21681b26af76596fb243c46cd1c93acd653191ecee8622f7620ed381f38e6b92ead841057ac343c518c43a2631388d7c655d128369504842920023d309c562f17b9097fdd7ac598e18b261c508f2b6d99c0db21d985aa933d36ecc717d0b644df1247a850dab586e06ae14d8fa92e33909e7685c6e0f3d0b1f9d18cc5dd008a3300fe7d84ca458e1d56c31469425a797f97f0e2e79689bf1601e3da30d6b015df2b52a448b8a51b3fcf510a773e75b07d3cffae7e7f6b1a9f40ed5b397640ac7b1c7ea0d1042ec63fe2ac0af105236aac99c150222e264938ed872bf918c3583e84ae109b1187546cd2b55011b9af388c211dfdfe9cce6a30afa7640af719af3d97e9b9921e1e4c34119be6b18ae53b44b5a6bd6f151bb2825a530e0b2f206089ab3ae65ed9c1834d9652241d6872f58b5cb7c31ed157c825567e127869378100f4730a18ebef5c959e2a14eae3e565f7ce093da5f76c2b28e93a24661aae0d6c29ce71ae3992ad21b4cecbfc96b9b417add868b856588fad91d3eaa5405b97a3d2456b635218d1f288e7cbf3fa3ee98c43b2c43972434526e359361cd5c58ed3e82026a593f134bc7fc50c51949c5eba1c000f4b8ffae1242f21ac291262903ebd2f95993d328c7b26517109e3afee8968560de4b7525066fc90f570bb3fe6333718d664f4332856fe4bb2513e3beb59e3c1417850041699b8ebd395a5dbc74cf7c2f881371fd5bc39d73ad79a2edce87acd65b429ddd7bd07e214da277e5d9261b69a5230b2c78efaf77228e6488fcd03ef9afd20b5d89ab9b6f63c53263494c055e210154bc7c3021e03ecb0952b25f8b540e3b6836f8435fd0d9a4929c77c798074351b9e574f5530073109c7746085388d5a006908ce1eecedf4e34fe861abce2004fc92aa0be13436fe2e1811fd850a7bf077e641f204b628684a19469285c3803eff1b24d05cffa9b548335f4fbf19f9ac40373e6ba946ecdd17e97b7101c460e9f106eb5c056cb1455746033eb542e6768d1de4864ca3274e0a6de2ff87d5ead83a457fb72a10fa47db24af8e3419f07ceeb3492a4ad87c9901540b16bc881a0a2d6b33d5eac353120b5648f44c964167fc51af16a98510a11836a9f9671bae79d2e01dba6912e31a0d922ae763b1d8c88889fba50626e08afc4e87047b248aac748512ab5009c8afdb9bb265b2be547ede8f7c676a76190b066fd2b30fb2575ef1f2c781101cbe988f746e8d1336ff9950de10b1a2533b26617a411f9b7b97572b93b6af10330a4677e8db45296edd015cc4c80089f3bc9035bf2916608f2367efc47be01c19910c4db01114abc379879b2a441e1a7165c45355af790e20c8334eed68f33a65437396dbf129496a8cb74270a47d2fe00201a0eef9e57410b6489f6f106d6e0897117ce3fa36a24c0f5d2b7f6c5300603dc00d5a0897ae5acf947e137fc8ef572a1135601e2726cbc399f51e9f530786ec7574ab950623d23f8eaa78ccc5681a9ef45106c0024f750055dc33570a4b6e839e49e3d551f03a26dcfba0e0f9e0c8782eb6e7a86ad5bc9cdaa09b1ecb87239f6e8ba2d8aa38ab3f8b8eb44ba64ea55db339d3584d807566813cc9bfcf6324f6d616dd06c033ad99204c185d1bb9148c117ee137550f2668c81cf42e6066166f5d7cbc7d9b9b0b7ee25d2487da2e9de07d2550d521cba162d9fb4f48b1dd29b3da26152c9a951ff88515e279994e11b26f8bd7b624b19b8ac89c57bb77d0186a26c37f3d9ce7797f8959ec8c95b166ee3019b2dc7eeff0112e3ee15125239670e12ac3867ffa327b0e78504fb942ba1576036ca9b7b198070fcbac8f191fcc24320ab0d11feb87b5c4a0d06aa4bfb8dc33cb87da4a591a48cc9c8eff09788f68995243f647d82a5d3aab4bea812b45a66ec2f962097bf0a7159034cb3bc26d618972c20e54e2efc6ba45d460f98eea35aac4c4a715407a132bdd3ddae53b5f4675f9d3dccf592eef49614a7418d2563ef47831c47a821c6611ba47bd633299af886ff5e5a27989c2ed4d2faf8e6a2eb64ae92f223049ef8a5d71c98bf25037a8e6dcf813e4d4230054ccb2c068de8bb2435e94a24fd184a9495336a41bfc794813d9dcf7419058f2a65c42f6dbaada6ee21f9eb4670bb48acc4e11fd06896df713ef42c93d0e0357f0e2bac16d3eb492ce914be8223363ba0638cc6e5a3ab88e78dba2d5b7e879cb45fd249fb98e534fcb1dfbda2a8a684ef835454d8a94c1ba7d12c56d5e6b0f62e82bbcfc6d121fa0e58d4c7a9883e78778ba079efae15905b3c8db8100643b852539100dba82ec8e96e980e93510b679bbc8e53778807b5fba4669dadae77008bda49a03430fca43a77cb9e61c346984bb8cc854cf7765f488d84d83c4a4b8e951c2ab319e3bbac866600860cb6f066473786bfb36a2099d41edb1c95aeb796b1911bd7fda97adfad2ca3545945a4ab44d1e7c82339dd561c9106554d5fd6ab4f551b0425d30889ab7051121f66809110faa8ab36ce21a37db9e9d2a5f727aa6d7f0d5fc1b9479eb2c74b46494ee60dd53303b7c9e86f29ec8d3cdd67d423bf8cff8a265ac7bfd180a4081d79743633267ada8ac7fc1f88a034a5b98b1a3f9e1a8e4c1db0ee17301d42fff345d4e7c2d91c97cd22ff382f0cbb913cc64cafef60fc909c0e1b506df1920628332987b4b50c1c8391d76a72e8947ca90d4ccc67b1a9c3389f7216caf2b4220b423e5303c954c93937bd26863a5eb6301be4691942ff7674980052dc4c7723a570fb55bce89968dd6f40b9d443b287e5d53ab25c0ba57e9658a10e7b4620694d709d4fea54846ec92bb29ee13e4b696f49ec34994159792956499dcc9ea0ae4dfe6e2538c6f3d0f2384f6d000fabcfac39b803af66e3f5a092d8ba85510fac0cd744efcd818a17cc84c533d60c82488a948c7fec5aa0600a44b2a4935ed5d860da7f1eb755bf69cce5225c410f1d747d377e046199eaa9474475a30da9991feb294762ec63fcad1c8646ce896e116f93c4250a66d105c8aea10d49641921791460fd875052ecc37640b9a337faacc062a6bac63b138756171b760b6623c8521f51b3d0bbeb06fe9be1ec8ebd9c1e0bf7f1f23581868524900a58b735df0e2660b95a5ce0a4e3796623ad90ae19d93033abb3b3a710799944859e08a343dbc11a37e0a24e1999f8f51e5f570920acbd16fce89ddac49d24a3f92857d8580ae9cb3390857f510edec521cca8e5592278ea9849fdbb54f0a6ead5f3fbf4660f31db632a1f4ae6eca2a80bb2728ea42d2c41ba8edba15e9c621575fea5e102afd6a1cf3937c3be426884432109c125642b25bfb12b6d0d71c48e9fedac08b1613094e4b810145b4196e016651820c7926cc5e351f1cf6b705b6fd6cee58050ba58b8e2aa33e09ad4bc9297103735f256fee0e883bd1450dc121d3dff8b23dc03c939d7ddeeecb5ee111d143bffac9ac881dd399052eb493724ae8af81cab009c1250ccd8b50f9d1e5246904388c4f0704bedad6949bddd34808781731a82402001645d326868b42cfc2b1bf010f037c085ce66034853f7dcd19768342a49be42b700554fec672e8ed75c6020af91370f3b05b09ca9c87fc88377c573a9f45d7dc7e9e5ed06e555bdce162b8fc83ea6eef5071515862aef6582fb4a192eb9ae0d7a9ddf0a782f25cc668dc713dfe42d6c1f208e03d2791c376bbecde0eea761d3b12994e5e9f161de63fcdd0dedbbb3800d6a4ce76777f751e228b9d0eb6a30739f4309d21e735a823cdf350aa4f1039844ec4561968d80fbde01453ba3960bcab6d960073b13d4b9a8f8409a419b41508001b7db3e87d75f365693b749a946bab4ab259b7cb5e7f754abf559828abd702fd676d73f861466ccf354d9a7a2e56a84acea34b99ca9a0", 0x1000}, {&(0x7f0000000ec0)="24ab152e0082a81e246e7cf00a4318a1275734b889dfd78237bf345af678b283f7f2c667c93aa8f28ad072ec531ee1b418568ea05d6ff4600c7d4eacf82ea62456", 0x41}, {&(0x7f0000000f40)="8eb1739c9995165eee0153b433320b1a68082ce7b764a0c3e85ba15aa1234e656c2477857de43dcd4a705fb61fec38ee173852b013832387fbfd8c8b76c648cadabd4a7392a13ee208c839f0d90154cbe55c70946b324e639af9edda2b5e8f985db559d2e4747c0fbc98b1dddaeca7a0d93a13257c2555d0e98022234ffdc8fa36f0768b8b754884984848e6eca2f3fc71e464b9c8ef9ac96d3f4cbcabd8113bb38097fc176be82642672a79dadad24415291180a9b7da5bd0f964048b0f9af8e44a6d30a8490979bcbee8c0cc", 0xcd}, {&(0x7f0000001040)="f8395a850d11246a02285853a1d4f2fd3a671868d522096b", 0x18}, {&(0x7f0000001080)="ab9f", 0x2}, {&(0x7f00000010c0)="79190681a8996e903f99ae243ddc46ffec4a1c5daaca5a822c7fb01a3fd861e2cff20fa605024a435b1a1d44c5246acba0376e30300b5c7c9480c3d684ebe1911c6c79c672e513cba4a7d08065b02347291de8ee59db02eb0a72c200356a24c591c3", 0x62}], 0x6, &(0x7f00000011c0)}}, {{&(0x7f0000001200)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001240)="861b9622b3e695440709e40d9d13fa95644b149a49754a5fc4bdbf1914bff9c817f8f5428d3ba84d0211f65e9cac5f855c757dd626e8952655d3a8567409db314c203fe7ebac95f81da7160984daf68a6a1b8ac56b62219d351dcbdd6b89026e73173738d63ad13e9fa7211a64afbdab74", 0x71}, {&(0x7f00000012c0)="c321b5ff82026889d898f9f135c395e884a158bb109d4a1aadb1e58db4", 0x1d}, {&(0x7f0000001300)="01c029995c2d2a6063", 0x9}, {&(0x7f0000001340)="dec12fadd45d33ed88ccdfc1b183983551174674fb2dedc0d4c5540761657811331581f3558773bc459bfadcf4aa77baa5ef646552f44704bac94b53aacbc55f0397e5d267e9865be8d6f45181b71e7df56ba787fa1ab1971922f738b27605603dcd90d6e5fe04d327fac332114bedd429eabb590a0e88f0e62a574a7ac28a80134989e1e4b9d5007fb0f5ad314c11a9", 0x90}], 0x4, &(0x7f0000001440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8b8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x17, 0x9d, [@broadcast, @loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @rr={0x7, 0xb, 0x17, [@local, @empty]}, @timestamp_addr={0x44, 0x1c, 0xe8, 0x1, 0xf, [{@multicast1, 0x7}, {@multicast1}, {@empty, 0x5}]}, @generic={0x86, 0x4, "969b"}, @generic={0x94, 0xf, "d8a5fbf1c8dd9b20bf31ba16ae"}, @rr={0x7, 0x17, 0x1d, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x108}}, {{&(0x7f0000001580)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001900)=[{&(0x7f00000015c0)="0098ab99c51df33dcbd37b28bfc62ab47a", 0x11}, {&(0x7f0000001600)="f283da07a485ab654018d332ff1b48994b658fd248b91d05344737ee8bd25f75d10be867e73b50f3f85d54858b8a566630d43cd74e350003b79c0788b14dc8682eed1f52fbfe2e4c8ff4b011fde3ea3e17ff6b352841008c33a1228a1729a0790989d5c161d098158378e110cc63d8bc373bd92bb06db420e0dcfa43caa35e0684fb0cc9b0da82beb5c0da284b32bf6f947b696ed7ee49d3f90d490bebbd0bbd7df23360c4b7b3fd2fe538136e0620c13f136bf878fb17e871ce71c44f0c61de9bb2cb8763a7653399b9e4e1e6b999b1f5a62405f88c", 0xd6}, {&(0x7f0000001700)="2dbe8d4e39f064a7343aaafde977c41ad1fa900d915320cebd20401d54b009374adad345ee21777886ce77d50125926e34c158a23b9e902af9e5407fb5b9c0e6336d5ba5bb61e49428593a4a025f0d6999992b358f8d28c025b6b32c463fe7d8cac43e0ce7732c5a8155f3f5cc2b6bab3f9722394866ea6066a095585b3bfcdc66d9ae16d00ae5014a10b623fd6aeb478cac3012070fcbd15304974be2e3e29e655d9be5cde289b1e46c263d5a494f3c5e1a84", 0xb3}, {&(0x7f00000017c0)="285f453366c083f18072159eca49d132169708b739e8488bc8429c8f2ea55be287f42c596d958e269295c9673b276d7e4186abca1096a0e6b1557af0c820439afe4fb70321adacde4fe7d96ff04b81a5bea65aa2e102ab461b1f1282827b63a1d9122d0168f3df", 0x67}, {&(0x7f0000001840)="cb1e637bb1058a203e33ace5ee8e47a5c1c8a8957c67b8de502cca689ddfc0b32e657c6e50c8bbdc97f881ff7dd4fefad229eb3b6d187b718c3fb4fd299127063a7e91232833ebe46ff27b86744edced4edcc4d6b780384a4dbe21c770f4eb32d6f311ec041f586e3b6e451b04c17c14b098d9ca5f6a564a911d597041029f327f7b3703727ce0d7b9baebd29bd5db3ff3ea", 0x92}], 0x5, &(0x7f0000001980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x30}}, {{&(0x7f00000019c0)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="3ee07b", 0x3}, {&(0x7f0000001a40)="696427a65746d5eb11caedba3e2ea3aa0a77d9339e002ab57d60d77a7e4bc0c68d4fbdba6b7f491efa5b81b4fb306a930fc201bb230af039390fc87ad04c7f3f28691d6e4086211ecb468ec620a7ddbd7ccadf8c699b72459d8b37aba7fcd60016178617b4f65b026baad88f71ced1787997104b350701be62019cf10ef53f882bb95f77242bd2c0afac363c9e74eeacf900cb8c22764802a904af0fcf377d8627c72221b2f72ef9bf19c49422ec03631ff42e954c8b944a52547beefbd5c5", 0xbf}, {&(0x7f0000001b00)="0c3e942b43fe7ea3cb675bcf4e6c39ccabb1c7919a3d058e6de7311283ada50331f6d09a698e93b3e2b28787aa093f83661f1538bfc7fcb614f08ba0ebade74ed13e6cb919119526b961dee6d41b4c16953aae6711a63f1561389d2110420f6813bf01808adc9ae98615d5c79afd24a8d4c9b8d2a7a9642dc24138edb0dda9ad8d4a", 0x82}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000001bc0)="82300cb48b296a0dc4d2edacd51aeb9a8542cfb161c73f6849ce9e7ec7de11b1c219eefccde021634f0ba08d9f8db8f699e372e416d4a6936a5fb7f700e4d5478e37615244d7a77c6d699f1dede4351ae5d062b96bdd5ab7ad59801f7d6823b178074001063ddcb094916c3ba06bd96856fae048f02da1109b02cc34866e69e597480c4ec9d2ba6a19d10473d6cc741a691e75659b4672df27df2fefadd2c58e2fdcb2c43df98fe8a586279b1971797ec0c43ad1a48c61664148d032b6cd869486111e530371fe1af9a860352059817fd80d85a5bd1f79e501", 0xd9}], 0x5, &(0x7f0000003e00)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x1}]}, @timestamp={0x44, 0x4, 0x6c, 0x0, 0x4}, @end]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x56, [@broadcast, @multicast2, @multicast2]}, @ssrr={0x89, 0x1f, 0x39, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @loopback, @multicast2, @broadcast, @local]}, @timestamp_addr={0x44, 0x1c, 0x70, 0x1, 0xd, [{@remote}, {@multicast1, 0x9}, {@private=0xa010101, 0xf}]}, @ssrr={0x89, 0x7, 0x95, [@multicast1]}, @cipso={0x86, 0x2b, 0x3, [{0x5, 0x7, "e38132e70f"}, {0x0, 0xd, "0cfeae809095479c0f9423"}, {0x96871e016791d24b, 0x9, "3a833458e9544d"}, {0x5, 0x6, "e5ac7690"}, {0x5, 0x2}]}, @lsrr={0x83, 0x7, 0xf6, [@multicast1]}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x20, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}, @remote, @local, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x128}}, {{&(0x7f0000001d40)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004300)=[{&(0x7f0000003f40)="dfc934a4ee06a27b81e350a19114e839099ff12394d392b80da38b0ab2fef4e11e93c700fe2f76c6c19abcb5988b13eba4b20064224217de01f24ec41316f27f1c912d2d2841f01cb8", 0x49}, {&(0x7f0000004000)="badb2dde932349e7b3b46dc3212b46c20ed04f0791d27827b0ed16bb2b2318e19422dfdf4f198a573916878423e106ed7351f82753bf74b552e8eb8e1737c422a0cc8020514aea31ca98e7a977d6922f", 0x50}, {&(0x7f0000004080)="c2d3a31866d0f30d84851c9ff4391e9946e1e593f579d50edd00c335ad0cb9e2d4987f6f4ebd521164344a5ffcb8e0faf48ec5fa88ff13403999b3f2eea6353c08e886f67fc81867f58d1b482a2f0805fa5161b4158704d921ca57bdcc5c114239abce8b6a41e6f0646cb75e5d8edc3503ea0b84086ff0bccc39cb5de8a8a7b9c7e67aed39734c1a7576dd49afcc4c8836c0fb028bcb5b455618d2e6fe304e2636dfb0dfb1933d", 0xa7}, {0x0}], 0x4, &(0x7f0000004440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @multicast2}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x4b, [@local, @local, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}]}, @generic={0x44, 0xa, "9e5f4aa7b9e685e9"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_retopts={{0xdc, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x5f, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @broadcast, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x3c, 0xd8, 0x3, 0x8, [{@private=0xa010102, 0x400}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x1}, {@dev={0xac, 0x14, 0x14, 0xa}, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0x3}, {@multicast1, 0x7fff}, {@broadcast, 0x1}]}, @lsrr={0x83, 0x23, 0xbd, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1b, 0x36, [@multicast1, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2a}]}, @end, @ssrr={0x89, 0x1b, 0x8b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @loopback, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x50, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x6e}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@lsrr={0x83, 0x2b, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @local, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @rand_addr=0x1000, @remote]}, @lsrr={0x83, 0x17, 0x7, [@empty, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0x4c, 0xcd, 0x3, 0x8, [{@empty}, {@local, 0x7}, {@empty, 0xd}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0xffffffff}, {@local, 0x406}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40}, {@loopback, 0x1ff}]}]}}}], 0x230}}, {{&(0x7f0000004680)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000004740)=[{&(0x7f00000046c0)="37d2408765101982825028dffe3582c233b58c5d406dad4ab80c50a6a1d4c8b5bd360ab1cd1103f060c529a3fc273d4af36269840aab1272de4a4e", 0x3b}, {&(0x7f0000004700)="045ab5fa13ec2cb60c6a3ee027f399bd24", 0x11}], 0x2}}], 0x8, 0x80) 10.230189528s ago: executing program 2 (id=1641): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x1, '_'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.461963888s ago: executing program 5 (id=1642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 9.071571949s ago: executing program 1 (id=1643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000410000000232000000fe8000000000000000000000000000bb07000000000000000000000000000000fffffeffffffffff0000000000000000040000000000000006000000000000000900000000000000000000000000000061f4ffffffffffff0000000000000000000000000000000000000100000000000300000002000000000000002abd70000000000002000000300000000000000048000200656362286369706865725f6e756c6c2900"/224], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3c49525f, 0x8d}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x3, 0xb, 0xfc, '\x00', 0x3}, {0xbe, 0x9, 0xfc, '\x00', 0x7d}, {0xbc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xec}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0x1f, 0x4, 0x2}, {0xf9, 0x0, 0x0, '\x00', 0x4}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x1, 0x1, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x8}, {0xc2, 0x0, 0x0, '\x00', 0x49}, {0x1, 0x21, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0x10, 0x1}, {0x0, 0x12, 0x3, '\x00', 0x35}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x80, 0xff, 0x1, '\x00', 0x7}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/59, 0x3b) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv2(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x4, 0x3, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r8, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="3a0c02000000020f"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="6009aa00000041e0ac9ab0e719150ecc4d79f6cac965f470abbf53b1eb44769193f3216c3e757d12afdc0992b3a7c3b4faef289cf782ffa01a05c70f809b8f1beb8503e4e6f4a805ac31629f0e49453010ef352511cd745dae5a19f37ce6890cdc5e63225f34df8d5de0dfb2237ab4a7801e6b1e4cdead20aa3bb8610ece2d6f2524dbaa591d94bfd65a752a5a4a42090bed1480755a650badcc16125bfabdab2745f6189e18fade556b5490a63c19bbbf2b6c"], 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.840757387s ago: executing program 5 (id=1644): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x400}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 8.836787861s ago: executing program 4 (id=1645): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x400}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000), &(0x7f0000000180)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x4000004) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x270, 0x1d8, 0x190, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x8, [0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e22], [0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 7.670362217s ago: executing program 3 (id=1646): fanotify_init(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x180000, 0x11a) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59500"/20, @ANYRES32=r2, @ANYBLOB="14000200ff0200000000000000000000000000010800080002070000"], 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) 4.408448799s ago: executing program 3 (id=1647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r2, 0x25, 0x4, @void}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) 4.329074465s ago: executing program 2 (id=1648): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x208000) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) dup3(r4, r5, 0x80000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) 4.311356252s ago: executing program 4 (id=1649): r0 = syz_open_dev$loop(0x0, 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r5}, 0x20) r6 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000027c0)={0x0, 0x0}) read$FUSE(r8, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000002280)=@sr0, r9, &(0x7f00000022c0)='./file0\x00') read$FUSE(r8, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004340)="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", 0x2000, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x8001, 0x3, 0x0, {0x1, 0xfffffffffffffffe, 0xd1, 0x219, 0x2, 0xc, 0x1000, 0x0, 0x1, 0xa000, 0xbca4, r10, r11, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r13}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.04923501s ago: executing program 1 (id=1651): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f00000004c0), &(0x7f00000005c0)=""/211, &(0x7f00000006c0)="c313d339d48c65aeede6daa5572455d8e1d5c3adba8b61dc3ea10ac91d8574a8a46d515260a8668715e1c495071ad475e05a95bdcb36cf8e795afbd41779015f3c2a8d68491c104bd5ee2a9eb4871a27b48e908ea464890b255299d4327ed6b2e08163a5ae6f88db685d24f3cf749b33089183932b431715ede3fbe6e0e72f7f36b5fc7cffc128ee2d66e5f0241ab7379a04f1e03f013e6e26ae7303c8c17cd53cf80f8b1227670830183d1eea79abc05aa298be89ce8886bdbfc96d15098ca2", &(0x7f00000007c0)="fdc74db740fa0906f42c4f3c0070b9bfef6221c3fc7005857abc9ea1022cc69a03", 0xf4f, r3}, 0x38) setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8010) shutdown(r2, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3.04863306s ago: executing program 2 (id=1652): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x8000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.015126767s ago: executing program 5 (id=1653): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = io_uring_setup(0x3e45, &(0x7f0000000280)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2.964851781s ago: executing program 3 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 2.430274527s ago: executing program 3 (id=1655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x208000) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) dup3(r6, r7, 0x80000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000050) getpid() 1.77159084s ago: executing program 5 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000000000020000000800a000fa09000008009f000500"/38], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x31, &(0x7f00000002c0)=@string={0x31, 0x3, "1ffd5bf20fea03f45bd4e017a7d68feeedc066e0a42003cf07aace19c4c7626f475da8dffc3dbb68ab608505c109ad"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r3, 0x29, 0xcd, &(0x7f0000000280), 0x0) mkdir(0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x40048820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0403"], 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000180)={[{@gid}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) 1.586981058s ago: executing program 4 (id=1657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84806ca00f3ff000e000a0028000000028000001294", 0x28}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) write$binfmt_aout(r3, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="bb31a8e78145d48cc75ff132c17cbddc3a45e2444719f376d8f817f89009507d9ce936a55aee7dfd7032b07771e8a90bd53a31c7430ecd26", 0x38}], 0x1, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)="14ade5479ae022b6a13c7fe4df60a27edb139b5e37222c11e4017a0e448a4898f000acb28bf5846d491b7accc93ad27dad2cc9ebf20212525e45be1bcd8b33617db336c3d6c47f32ee6ac730955a19c070b7a3858f5adcd28cd6f97bbd431834c9bc436baa9b39bc70c00a55097e4d8cbcab61c2060bdbefe6", 0x79}, {0x0}, {&(0x7f0000000840)="d7bfab7476aac5ab3a5c20ad35b27b297147be06fb6a882d5d7adf0954c5270cf50457d8d70142c7157307bd01eea2b3f72da8b3ccead48d840f", 0x3a}, {&(0x7f0000000b00)="1ad155271d333130a2a86bb8ab43f4efc72295d59a968117a910ee6ede078ef78f510a904dc1df5f14e6e9dfdce495e490258bab17da4769ccc79e96217472c2d777015b4b2f0686ad3ef052273339a2d409f60c77018543ef21cf7eeb52871ea8851d8a730886e076feed95ab8c57dd5b805177a45d36a7e93d95a6dfd899ffbe0d816364913cd8b2098913a7c330ebe33c8b91291d19604e21b871f362b1dda897efe583383726beb9fbbdf324d5f55e798c97664c1449a41ecce6cae0391d666cfc2c6e68d4e0e3e32233fc0d7e", 0xcf}], 0x4}}], 0x2, 0x40001) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sched_setscheduler(r5, 0x6, &(0x7f00000001c0)=0x9) 1.427245267s ago: executing program 3 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000180)={"4f148885365c01f6327cffbfde3271087d11fca10a424a283dddd79b4894"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r3}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x1, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1.277451668s ago: executing program 1 (id=1659): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x400}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) syz_io_uring_setup(0x1e21, 0x0, &(0x7f0000002000), &(0x7f0000000180)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000001c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x4000004) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x270, 0x1d8, 0x190, 0x270, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff]}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x8, [0x4e22, 0x4e23, 0x4e23, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e23, 0x4e22], [0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 46.317366ms ago: executing program 4 (id=1660): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="38010000100013070000000000000000fe80000000000000000000100000001909e608303951e902bbac14141000000000d0946eadd6fe0000000000000000000000000000fffe000000003b00000041ebdbc9c47a225efe5a2131fb4b115c7f753effb7f75e4352cfef021e15a7461eb8bd4bae69b6e2173e77766f7e3b0ce9a6fdb3a389d45a23580e99d9d609f8bbe756c2c824b27b9012533ef09f352900efe8b00437eed95c162f1fb099b8fb3285d9add39f971b8d7583422d6a614ceb14c172ae085cea5abd212cf234864b65e114186e7d5972676f89d752ed0d644726aec35f194e54c01bdbc2c107c757ea70ef381160434d217bb180dcea899aae103f70a4060b8ebd137490f4d7fedb54f08f123ff1ef570300000000000000d6aee2f87a311d38f9676366618af0cfdd92cb40c989da3db6619d507ed6666043ccf1f6faac7a3e4af55c6714bf2bec739acf518f86770276efce89c9a08f8da6f3ef8d7abe1391a00a05418139a730d3087f929f6fac48e0fcd95be16967f82f99a43535b523d6f89bcc101a67a44825fed2950bafb3f58ca066efbae3a05e90308d45c9217bb15890f4de80b7db0a02920ee155bfafcb5f562b387e0c15fe6b26a9f5760c5d6025741f1a9113119411f2ce0b58720d96496c99ec406509a66dcc4c575125ca812d1b40710299c04289e00bb309ea42a1f608bba2d568e7b3dbc8ed3faab39bb042eca0645950d096d1e1ca6da16e3cf858a3bef62cb01acda6d3caad18a0775f4d2dec2fc14e92c49bcfac61dd4f4727a84c6462fb9616df668aa86c718c0aaa1a53320ab877ec38c815ec71cbbb7926c988d2618284ca34873de7f5528b8bdd8c803d5d10d32aa5c3cf659add561a2c6340db5bd82c9e1cdc1214adabffd85a1c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000410000000232000000fe8000000000000000000000000000bb07000000000000000000000000000000fffffeffffffffff0000000000000000040000000000000006000000000000000900000000000000000000000000000061f4ffffffffffff0000000000000000000000000000000000000100000000000300000002000000000000002abd70000000000002000000300000000000000048000200656362286369706865725f6e756c6c2900"/224], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3c49525f, 0x8d}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x3, 0xb, 0xfc, '\x00', 0x3}, {0xbe, 0x9, 0xfc, '\x00', 0x7d}, {0xbc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xec}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0x1f, 0x4, 0x2}, {0xf9, 0x0, 0x0, '\x00', 0x4}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x1, 0x1, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x8}, {0xc2, 0x0, 0x0, '\x00', 0x49}, {0x1, 0x21, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x80}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0x10, 0x1}, {0x0, 0x12, 0x3, '\x00', 0x35}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x80, 0xff, 0x1, '\x00', 0x7}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/59, 0x3b) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv2(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x4, 0x3, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r8, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="3a0c02000000020f"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="6009aa00000041e0ac9ab0e719150ecc4d79f6cac965f470abbf53b1eb44769193f3216c3e757d12afdc0992b3a7c3b4faef289cf782ffa01a05c70f809b8f1beb8503e4e6f4a805ac31629f0e49453010ef352511cd745dae5a19f37ce6890cdc5e63225f34df8d5de0dfb2237ab4a7801e6b1e4cdead20aa3bb8610ece2d6f2524dbaa591d94bfd65a752a5a4a42090bed1480755a650badcc16125bfabdab2745f6189e18fade556b5490a63c19bbbf2b6c"], 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=1661): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x7}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendto$netrom(r4, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x7, 0x1, 0x10, 0x7fffffff, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x64, 0x0, 0xac, 0x4, 0x0, @remote, @remote, {[@generic={0x86, 0x3, "ae"}, @timestamp_addr={0x44, 0x4, 0x47, 0x1, 0x3}, @generic={0xd51dbac4c04e8bdd, 0x2}, @generic={0x94, 0x12, "912774a99b3461c3c036ff9a2aa6084b"}, @end, @ssrr={0x89, 0xf, 0xdb, [@private=0xa010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0x29, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @loopback, @local, @local]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) kernel console output (not intermixed with test programs): tsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.723642][ T974] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.736745][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.957267][ T974] usb 5-1: usb_control_msg returned -32 [ 462.272072][ T974] usbtmc 5-1:16.0: can't read capabilities [ 462.307884][T10377] binder: BINDER_SET_CONTEXT_MGR already set [ 462.314151][T10377] binder: 10373:10377 ioctl 4018620d 200000000040 returned -16 [ 462.325612][T10377] netlink: 'syz.3.1230': attribute type 21 has an invalid length. [ 462.333640][T10377] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1230'. [ 462.343161][T10377] netlink: 'syz.3.1230': attribute type 6 has an invalid length. [ 462.351078][T10377] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1230'. [ 463.588222][ T5827] block nbd1: Receive control failed (result -32) [ 463.827106][ T5840] block nbd1: shutting down sockets [ 464.410032][ T2149] usb 5-1: USB disconnect, device number 44 [ 465.220328][ T5830] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 465.502865][T10405] tipc: Enabling of bearer rejected, already enabled [ 466.030294][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 466.031597][T10408] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1240'. [ 466.042009][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.084588][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.091872][T10408] kvm: apic: phys broadcast and lowest prio [ 466.110302][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.140359][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.418613][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.428042][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.470314][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 466.649962][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.663059][ T5830] usb 5-1: GET_CAPABILITIES returned 0 [ 466.668572][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 466.675356][ T43] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.704700][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.719820][ T43] usb 1-1: config 0 descriptor?? [ 467.157142][ T5944] usb 5-1: USB disconnect, device number 45 [ 467.494154][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 467.518858][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 467.529309][ T43] usb 1-1: USB disconnect, device number 48 [ 467.877035][ T30] audit: type=1326 audit(1750443018.335:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.4.1245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01c018e929 code=0x0 [ 468.250405][ T5940] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 468.460566][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 468.585568][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 468.593181][ T5940] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 468.689459][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 468.698277][ T5940] usb 2-1: Product: syz [ 468.704943][ T5940] usb 2-1: config 0 descriptor?? [ 470.159597][ T5940] waterforce 0003:1044:7A4D.0044: unknown main item tag 0x0 [ 470.181080][ T5940] waterforce 0003:1044:7A4D.0044: unknown main item tag 0x0 [ 470.217529][ T5940] waterforce 0003:1044:7A4D.0044: unknown main item tag 0x0 [ 470.224965][ T5940] waterforce 0003:1044:7A4D.0044: unknown main item tag 0x0 [ 470.244271][ T5940] waterforce 0003:1044:7A4D.0044: unknown main item tag 0x0 [ 470.270412][ T5940] waterforce 0003:1044:7A4D.0044: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 470.380512][ T5940] waterforce 0003:1044:7A4D.0044: fw version request failed with -38 [ 470.464891][ T5940] usb 2-1: USB disconnect, device number 50 [ 470.513267][T10462] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 470.727439][T10463] fido_id[10463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 471.107613][ T30] audit: type=1326 audit(1750443021.435:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.142653][ T30] audit: type=1326 audit(1750443021.435:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.696894][ T30] audit: type=1326 audit(1750443021.435:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.737963][ T30] audit: type=1326 audit(1750443021.445:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.741117][T10475] block nbd2: NBD_DISCONNECT [ 471.771944][T10475] block nbd2: Send disconnect failed -32 [ 471.819572][ T30] audit: type=1326 audit(1750443021.445:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.843483][ T30] audit: type=1326 audit(1750443021.445:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.910666][ T30] audit: type=1326 audit(1750443021.565:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 471.998598][ T30] audit: type=1326 audit(1750443021.565:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 472.026668][ T30] audit: type=1326 audit(1750443021.595:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10466 comm="syz.1.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 472.766816][T10490] netlink: 'syz.4.1264': attribute type 10 has an invalid length. [ 472.775784][T10490] bond0: (slave wlan1): Opening slave failed [ 473.301233][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 473.860398][ T5830] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 474.083068][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 474.269796][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 474.269812][ T30] audit: type=1326 audit(1750443024.725:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 474.392228][ T30] audit: type=1326 audit(1750443024.725:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 474.417213][ T5830] usb 2-1: config 0 interface 0 has no altsetting 0 [ 474.425668][ T5830] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 474.435191][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 474.446585][ T30] audit: type=1326 audit(1750443024.765:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 474.500939][ T5830] usb 2-1: Product: syz [ 474.662363][ T5830] usb 2-1: config 0 descriptor?? [ 474.945860][ T9423] block nbd0: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 60 seconds [ 474.956599][ T9423] block nbd0: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 60 seconds [ 474.967515][ T9423] block nbd0: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 60 seconds [ 474.978554][ T9423] block nbd0: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 60 seconds [ 475.016154][ T30] audit: type=1326 audit(1750443024.765:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.039552][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.193229][ T30] audit: type=1326 audit(1750443024.765:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.220620][ T30] audit: type=1326 audit(1750443024.765:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.243804][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.260070][ T30] audit: type=1326 audit(1750443024.855:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.323938][ T30] audit: type=1326 audit(1750443024.855:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.354441][ T5830] waterforce 0003:1044:7A4D.0045: unknown main item tag 0x0 [ 475.362324][ T5830] waterforce 0003:1044:7A4D.0045: unknown main item tag 0x0 [ 475.369597][ T5830] waterforce 0003:1044:7A4D.0045: unknown main item tag 0x0 [ 475.378845][ T5830] waterforce 0003:1044:7A4D.0045: unknown main item tag 0x0 [ 475.386342][ T30] audit: type=1326 audit(1750443024.885:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.409630][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.415956][ T5830] waterforce 0003:1044:7A4D.0045: unknown main item tag 0x0 [ 475.431249][ T5830] waterforce 0003:1044:7A4D.0045: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 475.445036][ T30] audit: type=1326 audit(1750443024.885:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10511 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c018e929 code=0x7ffc0000 [ 475.555707][ T5830] waterforce 0003:1044:7A4D.0045: fw version request failed with -38 [ 476.157306][ T5940] usb 2-1: USB disconnect, device number 51 [ 476.374972][T10526] fido_id[10526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 476.589122][T10530] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 476.725331][T10530] bond0: (slave wlan1): Opening slave failed [ 476.889981][T10543] overlayfs: missing 'lowerdir' [ 478.440336][ T5830] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 478.613319][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.630266][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.650275][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.669747][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.381947][ T5830] usb 4-1: usb_control_msg returned -32 [ 479.435878][ T5830] usbtmc 4-1:16.0: can't read capabilities [ 479.542813][ T5830] usb 4-1: USB disconnect, device number 53 [ 479.710210][T10578] bridge_slave_0: left allmulticast mode [ 479.751786][T10579] netlink: 'syz.1.1291': attribute type 10 has an invalid length. [ 479.780025][T10578] bridge_slave_0: left promiscuous mode [ 479.790537][T10578] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.804589][T10578] bridge_slave_1: left allmulticast mode [ 479.811258][T10578] bridge_slave_1: left promiscuous mode [ 479.817279][T10578] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.897594][T10582] netlink: 'syz.2.1290': attribute type 21 has an invalid length. [ 479.905582][T10582] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1290'. [ 480.066528][T10578] bond0: (slave bond_slave_0): Releasing backup interface [ 480.259184][T10578] bond0: (slave bond_slave_1): Releasing backup interface [ 480.287898][T10578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.307308][T10578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.328456][T10578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.337038][T10578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.345394][T10587] overlayfs: missing 'workdir' [ 480.378893][T10579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.388625][T10579] bond0: (slave wlan1): Opening slave failed [ 480.408167][T10582] netlink: 'syz.2.1290': attribute type 6 has an invalid length. [ 480.416561][T10582] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1290'. [ 480.624954][ T5944] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 480.825523][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 481.393298][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 481.480197][ T5944] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 481.494038][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 481.506202][ T5944] usb 4-1: Product: syz [ 481.528553][ T5944] usb 4-1: config 0 descriptor?? [ 481.826070][T10612] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 482.261555][ T5944] waterforce 0003:1044:7A4D.0046: unknown main item tag 0x0 [ 482.399819][ T5944] waterforce 0003:1044:7A4D.0046: unknown main item tag 0x0 [ 482.420022][ T5944] waterforce 0003:1044:7A4D.0046: unknown main item tag 0x0 [ 482.436562][ T5944] waterforce 0003:1044:7A4D.0046: unknown main item tag 0x0 [ 482.452679][ T5944] waterforce 0003:1044:7A4D.0046: unknown main item tag 0x0 [ 482.750394][ T5944] waterforce 0003:1044:7A4D.0046: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.3-1/input0 [ 482.840524][ T5944] waterforce 0003:1044:7A4D.0046: fw version request failed with -38 [ 482.853977][ T5944] usb 4-1: USB disconnect, device number 54 [ 482.923524][T10623] fido_id[10623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 483.011429][ T2149] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 483.050726][ T10] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 483.225465][ T2149] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.240344][ T2149] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.243535][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.253522][ T2149] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.280282][ T2149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.352478][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.362478][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 483.482231][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.559028][T10632] netlink: 'syz.3.1306': attribute type 21 has an invalid length. [ 483.567029][T10632] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1306'. [ 483.576531][T10632] netlink: 'syz.3.1306': attribute type 6 has an invalid length. [ 483.584394][T10632] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1306'. [ 484.058800][ T2149] usb 2-1: usb_control_msg returned -32 [ 484.062472][ T10] usb 5-1: config 0 descriptor?? [ 484.076067][ T2149] usbtmc 2-1:16.0: can't read capabilities [ 484.098470][ T2149] usb 2-1: USB disconnect, device number 52 [ 484.553685][T10636] netlink: 'syz.3.1307': attribute type 21 has an invalid length. [ 484.561891][T10636] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1307'. [ 484.571329][T10636] netlink: 'syz.3.1307': attribute type 6 has an invalid length. [ 484.579100][T10636] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1307'. [ 484.923096][ T10] savu 0003:1E7D:2D5A.0047: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 484.989631][ T10] usb 5-1: USB disconnect, device number 46 [ 485.251539][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.265097][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.281521][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.289477][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.296929][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.747619][T10638] fido_id[10638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 485.785631][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 485.785645][ T30] audit: type=1400 audit(1750443036.245:504): avc: denied { mounton } for pid=10641 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 486.020421][ T5830] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 486.180598][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 486.316272][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.326578][ T5830] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.336081][ T5830] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 486.346604][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.364418][ T5830] usb 4-1: config 0 descriptor?? [ 486.979035][ T5940] usb 4-1: USB disconnect, device number 55 [ 487.150184][T10641] chnl_net:caif_netlink_parms(): no params data found [ 487.361477][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.368674][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.379491][T10641] bridge_slave_0: entered allmulticast mode [ 487.397727][T10641] bridge_slave_0: entered promiscuous mode [ 487.419357][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.433457][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.443424][T10641] bridge_slave_1: entered allmulticast mode [ 487.455646][T10641] bridge_slave_1: entered promiscuous mode [ 487.489939][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.502463][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.541765][T10641] team0: Port device team_slave_0 added [ 487.549729][T10641] team0: Port device team_slave_1 added [ 487.585270][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.592744][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.619052][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.630501][ T5830] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 487.633225][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.649803][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.679046][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.730781][ T5928] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 487.744403][T10641] hsr_slave_0: entered promiscuous mode [ 487.751167][T10641] hsr_slave_1: entered promiscuous mode [ 487.757210][T10641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.766013][T10641] Cannot create hsr debugfs directory [ 487.822097][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 487.836677][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.850172][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.859307][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.867688][ T5827] Bluetooth: hci5: command tx timeout [ 487.905417][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.933642][ T5928] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.943328][ T5928] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 487.952743][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.978474][ T5928] usb 3-1: config 0 descriptor?? [ 488.027851][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.034990][T10641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.042485][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.049585][T10641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.095172][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.103625][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.136717][ T5830] usb 5-1: usb_control_msg returned -32 [ 488.142606][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 488.177375][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.217699][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.238333][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.245455][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.260669][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.267952][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.483348][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.485911][T10692] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 488.693380][T10641] veth0_vlan: entered promiscuous mode [ 488.707144][T10641] veth1_vlan: entered promiscuous mode [ 488.737093][T10641] veth0_macvtap: entered promiscuous mode [ 488.748255][T10641] veth1_macvtap: entered promiscuous mode [ 488.768807][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.786080][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.902634][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.913085][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.964164][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.974595][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.001911][ T30] audit: type=1400 audit(1750443039.455:505): avc: denied { mount } for pid=10641 comm="syz-executor" name="/" dev="gadgetfs" ino=6467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 489.024328][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.100600][T10700] overlayfs: missing 'workdir' [ 489.314820][T10706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1322'. [ 489.420332][ T5928] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 489.490179][ T30] audit: type=1400 audit(1750443039.945:506): avc: denied { append } for pid=10711 comm="syz.3.1325" name="video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 489.573528][T10715] netlink: 'syz.1.1326': attribute type 10 has an invalid length. [ 489.589431][T10715] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 489.611999][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 489.636540][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.648992][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1327'. [ 489.669677][ T5928] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 489.679741][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.702390][ T5928] usb 6-1: config 0 descriptor?? [ 489.940568][ T5827] Bluetooth: hci5: command tx timeout [ 489.993581][ T5827] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 490.230450][ T5940] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 490.422407][ T5928] savu 0003:1E7D:2D5A.0048: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 490.440210][ T5830] usb 5-1: USB disconnect, device number 47 [ 490.490648][ T5928] usb 6-1: USB disconnect, device number 2 [ 490.491936][ T5944] usb 3-1: USB disconnect, device number 41 [ 490.552618][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 490.571161][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 490.591179][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 490.595830][T10724] fido_id[10724]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 490.603744][ T5940] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 490.653072][T10731] overlayfs: missing 'workdir' [ 490.661283][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.754311][ T5940] usb 4-1: config 0 descriptor?? [ 490.870160][ T5940] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 490.994331][T10733] tipc: Enabling of bearer rejected, already enabled [ 491.182120][ T5830] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 491.240334][ T5928] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 491.351964][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.363197][ T5830] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 491.373449][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.383557][ T5830] usb 5-1: config 0 descriptor?? [ 491.400301][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 491.400674][ T5940] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 491.407008][ T5928] usb 3-1: config 0 interface 0 has no altsetting 0 [ 491.421408][ T5928] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 491.432785][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 491.440856][ T5928] usb 3-1: Product: syz [ 491.446600][ T5928] usb 3-1: config 0 descriptor?? [ 491.560946][ T5940] usb 6-1: no configurations [ 491.565632][ T5940] usb 6-1: can't read configurations, error -22 [ 491.700389][ T5940] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 491.794102][ T5830] usbhid 5-1:0.0: can't add hid device: -71 [ 491.808317][ T5830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 491.845418][ T5830] usb 5-1: USB disconnect, device number 48 [ 491.861632][ T5940] usb 6-1: no configurations [ 491.882457][ T5940] usb 6-1: can't read configurations, error -22 [ 491.889398][ T5940] usb usb6-port1: attempt power cycle [ 491.984704][ T5928] waterforce 0003:1044:7A4D.0049: unknown main item tag 0x0 [ 491.993162][ T5928] waterforce 0003:1044:7A4D.0049: unknown main item tag 0x0 [ 492.001286][ T5928] waterforce 0003:1044:7A4D.0049: unknown main item tag 0x0 [ 492.008666][ T5928] waterforce 0003:1044:7A4D.0049: unknown main item tag 0x0 [ 492.010702][ T5827] Bluetooth: hci5: command tx timeout [ 492.016183][ T5928] waterforce 0003:1044:7A4D.0049: unknown main item tag 0x0 [ 492.029954][ T5928] waterforce 0003:1044:7A4D.0049: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0 [ 492.100662][ T5928] waterforce 0003:1044:7A4D.0049: fw version request failed with -38 [ 492.189020][ T5928] usb 3-1: USB disconnect, device number 42 [ 492.230371][ T5940] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 492.252111][ T5940] usb 6-1: no configurations [ 492.256745][ T5940] usb 6-1: can't read configurations, error -22 [ 492.390386][ T5940] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 492.414787][ T5940] usb 6-1: no configurations [ 492.422925][ T5940] usb 6-1: can't read configurations, error -22 [ 492.429738][ T5940] usb usb6-port1: unable to enumerate USB device [ 492.693670][ T5940] usb 4-1: USB disconnect, device number 56 [ 492.930730][T10758] No control pipe specified [ 493.012821][T10759] netlink: 'syz.2.1337': attribute type 21 has an invalid length. [ 493.020754][T10759] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1337'. [ 493.030196][T10759] netlink: 'syz.2.1337': attribute type 6 has an invalid length. [ 493.038117][T10759] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1337'. [ 493.865576][ T30] audit: type=1326 audit(1750443044.325:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 493.891173][ T30] audit: type=1326 audit(1750443044.325:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 493.914928][ T30] audit: type=1326 audit(1750443044.325:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 493.940998][ T30] audit: type=1326 audit(1750443044.325:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 493.964658][ T30] audit: type=1326 audit(1750443044.325:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 493.988472][ T30] audit: type=1326 audit(1750443044.355:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 494.013545][ T5944] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 494.025292][ T30] audit: type=1326 audit(1750443044.475:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 494.051727][ T30] audit: type=1326 audit(1750443044.475:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 494.076106][ T30] audit: type=1326 audit(1750443044.505:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 494.090989][ T5827] Bluetooth: hci5: command tx timeout [ 494.099821][ T5928] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 494.105283][ T30] audit: type=1326 audit(1750443044.515:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10767 comm="syz.3.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3718e929 code=0x7ffc0000 [ 494.348537][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.373688][ T5928] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.392674][ T5928] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 494.465410][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.598218][ T5928] usb 2-1: config 0 descriptor?? [ 494.611749][ T5944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.622015][ T5944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.649313][ T5944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 494.658464][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.885707][ T5944] usb 3-1: usb_control_msg returned -32 [ 494.891351][ T5944] usbtmc 3-1:16.0: can't read capabilities [ 494.976419][T10777] kvm: apic: phys broadcast and lowest prio [ 495.235954][T10779] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 495.400482][ T5944] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 495.571781][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.587697][ T5944] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.598483][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.609729][ T5944] usb 4-1: config 0 descriptor?? [ 496.022774][ T5944] usbhid 4-1:0.0: can't add hid device: -71 [ 496.038211][ T5944] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 496.048078][ T5944] usb 4-1: USB disconnect, device number 57 [ 496.360511][ T974] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 496.520337][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 496.526941][ T974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 496.534818][ T974] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 496.544428][ T974] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 496.552716][ T974] usb 5-1: Product: syz [ 496.559675][ T974] usb 5-1: config 0 descriptor?? [ 496.700161][ T5940] usb 2-1: USB disconnect, device number 53 [ 496.720459][T10794] tipc: Started in network mode [ 496.725357][T10794] tipc: Node identity ac14140c, cluster identity 4711 [ 496.807741][ T10] usb 3-1: USB disconnect, device number 43 [ 497.017396][T10803] netlink: 'syz.1.1352': attribute type 21 has an invalid length. [ 497.025546][T10803] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1352'. [ 497.660833][T10794] tipc: New replicast peer: 255.255.255.255 [ 497.667280][T10794] tipc: Enabled bearer , priority 10 [ 497.688066][T10803] netlink: 'syz.1.1352': attribute type 6 has an invalid length. [ 497.696065][T10803] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1352'. [ 498.586291][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 498.660562][ T5928] tipc: Node number set to 2886997004 [ 498.681797][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 498.920142][ T10] usb 3-1: no configurations [ 498.951796][ T974] waterforce 0003:1044:7A4D.004A: unknown main item tag 0x0 [ 498.959148][ T974] waterforce 0003:1044:7A4D.004A: unknown main item tag 0x0 [ 498.970854][ T10] usb 3-1: can't read configurations, error -22 [ 498.983358][ T974] waterforce 0003:1044:7A4D.004A: unknown main item tag 0x0 [ 498.990896][ T974] waterforce 0003:1044:7A4D.004A: unknown main item tag 0x0 [ 498.998236][ T974] waterforce 0003:1044:7A4D.004A: unknown main item tag 0x0 [ 499.117824][ T974] waterforce 0003:1044:7A4D.004A: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 499.170548][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 499.196784][ T974] waterforce 0003:1044:7A4D.004A: fw version request failed with -38 [ 499.332359][ T10] usb 3-1: no configurations [ 499.574218][ T10] usb 3-1: can't read configurations, error -22 [ 499.807416][ T10] usb usb3-port1: attempt power cycle [ 499.817998][ T974] usb 5-1: USB disconnect, device number 49 [ 500.323326][T10835] fido_id[10835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 500.404743][T10837] kvm: apic: phys broadcast and lowest prio [ 500.490475][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 500.554688][ T10] usb 3-1: no configurations [ 500.676351][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 500.902145][ T5928] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 500.973231][ T5827] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11 [ 500.990950][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.349999][ T10] usb 3-1: can't read configurations, error -22 [ 501.382141][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.395389][T10846] overlayfs: missing 'lowerdir' [ 501.541149][ T24] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 501.574772][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.586360][ T5928] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.596371][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.606923][ T5928] usb 2-1: config 0 descriptor?? [ 501.643111][T10854] loop7: detected capacity change from 0 to 16384 [ 501.650755][ T2149] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 501.714520][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.724477][ T24] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 501.734358][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.744002][ T24] usb 4-1: config 0 descriptor?? [ 501.760339][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 501.783808][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 501.794056][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.802434][ T10] usb 3-1: Product: syz [ 501.806654][ T10] usb 3-1: Manufacturer: syz [ 501.811420][ T10] usb 3-1: SerialNumber: syz [ 501.818387][ T10] usb 3-1: config 0 descriptor?? [ 501.821860][ T2149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 501.826768][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 501.840578][ T2149] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 501.854087][ T2149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 501.864180][ T2149] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 501.873301][ T2149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.883713][ T2149] usb 6-1: config 0 descriptor?? [ 501.894793][ T2149] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 501.910353][ T5940] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 502.070356][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 502.195886][ T5940] usb 5-1: config 0 has no interfaces? [ 502.196550][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 502.207562][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 502.222424][ T5940] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 502.236551][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.239359][ T5928] usb 2-1: USB disconnect, device number 54 [ 502.750379][ T5940] usb 5-1: Product: syz [ 502.754755][ T5940] usb 5-1: Manufacturer: syz [ 502.759420][ T5940] usb 5-1: SerialNumber: syz [ 502.773461][ T5940] usb 5-1: config 0 descriptor?? [ 503.086891][ T5928] usb 5-1: USB disconnect, device number 50 [ 503.250473][ T10] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 503.257864][ T10] sq905c 3-1:0.0: Reading version command failed [ 503.273846][ T10] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 503.378010][T10859] bond0: (slave wlan1): Releasing backup interface [ 503.388478][T10859] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 503.397768][T10859] bond0: (slave wlan1): Opening slave failed [ 503.634588][ T5928] usb 6-1: USB disconnect, device number 7 [ 503.684060][T10866] syz!: rxe_newlink: already configured on team_slave_0 [ 504.136737][ T2149] usb 4-1: USB disconnect, device number 58 [ 504.567283][ T5940] usb 3-1: USB disconnect, device number 47 [ 504.580402][ T2149] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 504.752907][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 504.752922][ T30] audit: type=1326 audit(1750443055.215:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.247241][ T30] audit: type=1326 audit(1750443055.215:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.490633][ T9423] block nbd0: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 90 seconds [ 505.505134][ T9423] block nbd0: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 90 seconds [ 505.516378][ T9423] block nbd0: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 90 seconds [ 505.527705][ T9423] block nbd0: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 90 seconds [ 505.738093][ T2149] usb 4-1: no configurations [ 505.746980][ T2149] usb 4-1: can't read configurations, error -22 [ 505.756219][T10887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 505.789234][ T30] audit: type=1326 audit(1750443055.215:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.812772][ T30] audit: type=1326 audit(1750443055.215:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.836423][ T30] audit: type=1326 audit(1750443055.215:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.882482][T10887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 505.884305][ T30] audit: type=1326 audit(1750443055.245:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.934365][ T30] audit: type=1326 audit(1750443055.385:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 505.957751][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.990300][ T2149] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 506.038713][ T30] audit: type=1326 audit(1750443055.385:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 506.100389][T10894] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1380'. [ 506.130474][ T30] audit: type=1326 audit(1750443055.655:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 506.153770][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.190342][ T2149] usb 4-1: no configurations [ 506.200304][ T2149] usb 4-1: can't read configurations, error -22 [ 506.202816][T10894] kvm: apic: phys broadcast and lowest prio [ 506.220794][ T2149] usb usb4-port1: attempt power cycle [ 506.246517][ T30] audit: type=1326 audit(1750443055.655:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.5.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56fd8e929 code=0x7ffc0000 [ 506.269963][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.482382][T10905] netlink: 'syz.2.1382': attribute type 21 has an invalid length. [ 506.490391][T10905] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1382'. [ 506.499877][T10905] netlink: 'syz.2.1382': attribute type 6 has an invalid length. [ 506.507707][T10905] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1382'. [ 506.620458][ T2149] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 506.921508][ T2149] usb 4-1: no configurations [ 506.926258][ T2149] usb 4-1: can't read configurations, error -22 [ 507.048293][ T5940] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 507.120376][ T2149] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 507.170386][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.224584][ T2149] usb 4-1: device descriptor read/8, error -71 [ 507.259194][T10907] syzkaller1: entered promiscuous mode [ 507.266620][T10907] syzkaller1: entered allmulticast mode [ 507.293126][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.304332][ T5940] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 507.313595][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.329231][ T5940] usb 5-1: config 0 descriptor?? [ 507.340856][ T2149] usb usb4-port1: unable to enumerate USB device [ 507.354851][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 507.364202][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.380266][ T24] usb 6-1: Product: syz [ 507.384611][ T24] usb 6-1: Manufacturer: syz [ 507.389255][ T24] usb 6-1: SerialNumber: syz [ 507.413535][ T24] usb 6-1: config 0 descriptor?? [ 507.427429][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 507.450750][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 507.600736][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 507.607583][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 507.615139][ T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 507.624289][ T10] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 507.632935][ T10] usb 2-1: Product: syz [ 507.639501][ T10] usb 2-1: config 0 descriptor?? [ 507.660428][ T5944] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 507.760354][ T974] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 507.830082][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 507.837757][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 507.847995][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 508.386398][ T5940] usb 5-1: USB disconnect, device number 51 [ 508.394733][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.404554][ T5944] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 508.713270][ T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 508.728638][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.746170][ T974] usb 4-1: config 0 has no interface number 0 [ 508.758025][ T974] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 508.771318][ T5944] usb 3-1: config 0 descriptor?? [ 508.797905][ T974] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 508.809468][ T974] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 508.829296][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.843943][ T974] usb 4-1: config 0 descriptor?? [ 508.856831][T10911] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 508.869775][ T974] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 509.060451][ T10] waterforce 0003:1044:7A4D.004B: unknown main item tag 0x0 [ 509.067957][ T10] waterforce 0003:1044:7A4D.004B: unknown main item tag 0x0 [ 509.075586][ T10] waterforce 0003:1044:7A4D.004B: unknown main item tag 0x0 [ 509.083088][ T10] waterforce 0003:1044:7A4D.004B: unknown main item tag 0x0 [ 509.094331][ T10] waterforce 0003:1044:7A4D.004B: unknown main item tag 0x0 [ 509.098559][ T2149] usb 4-1: USB disconnect, device number 63 [ 509.116747][ T10] waterforce 0003:1044:7A4D.004B: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 509.180455][ T10] waterforce 0003:1044:7A4D.004B: fw version request failed with -38 [ 509.210001][ T5944] savu 0003:1E7D:2D5A.004C: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 509.240415][ T24] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 509.274198][ T24] sq905c 6-1:0.0: Reading version command failed [ 509.323154][ T24] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 509.376432][ T24] usb 2-1: USB disconnect, device number 55 [ 509.567035][ T5928] usb 6-1: USB disconnect, device number 8 [ 509.599049][ T10] usb 3-1: USB disconnect, device number 48 [ 510.532911][T10931] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 510.553976][T10931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 511.634921][T10952] netlink: 'syz.5.1395': attribute type 21 has an invalid length. [ 511.642839][T10952] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1395'. [ 511.651955][T10952] netlink: 'syz.5.1395': attribute type 6 has an invalid length. [ 511.659667][T10952] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1395'. [ 512.520367][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 512.520383][ T30] audit: type=1400 audit(1750443062.965:538): avc: denied { mount } for pid=10955 comm="syz.3.1397" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 512.560404][T10958] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1398'. [ 512.667026][ T30] audit: type=1400 audit(1750443063.125:539): avc: denied { append } for pid=10959 comm="syz.1.1399" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 512.690343][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.715748][T10958] kvm: apic: phys broadcast and lowest prio [ 512.724135][ T30] audit: type=1400 audit(1750443063.175:540): avc: denied { map } for pid=10959 comm="syz.1.1399" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 512.930489][ T30] audit: type=1400 audit(1750443063.175:541): avc: denied { write execute } for pid=10959 comm="syz.1.1399" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 512.954850][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.961088][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 513.150283][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.267670][ T24] usb 6-1: config 0 has no interfaces? [ 513.310150][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 513.426656][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.473447][ T24] usb 6-1: config 0 descriptor?? [ 513.490472][ T5928] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 513.762679][T10976] netlink: 'syz.4.1400': attribute type 21 has an invalid length. [ 513.770722][T10976] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1400'. [ 513.780146][T10976] netlink: 'syz.4.1400': attribute type 6 has an invalid length. [ 513.788008][T10976] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1400'. [ 514.103457][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.502403][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 514.524271][ T5928] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 514.550276][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.601976][ T5928] usb 3-1: config 0 descriptor?? [ 514.670420][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 514.683816][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 514.692359][ T10] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 514.704487][ T10] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 514.713411][ T10] usb 4-1: Product: syz [ 514.727886][ T10] usb 4-1: config 0 descriptor?? [ 514.850328][ T2149] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 514.920367][ T24] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 515.115827][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.127575][ T2149] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.298790][ T2149] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.313678][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 515.322754][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 515.334051][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.358161][ T5928] usb 3-1: USB disconnect, device number 49 [ 515.372093][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 515.391125][ T2149] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.403024][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.415483][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.432584][ T24] usb 2-1: config 0 descriptor?? [ 515.491589][ T10] waterforce 0003:1044:7A4D.004D: unknown main item tag 0x0 [ 515.498926][ T10] waterforce 0003:1044:7A4D.004D: unknown main item tag 0x0 [ 515.520331][ T10] waterforce 0003:1044:7A4D.004D: unknown main item tag 0x0 [ 515.527662][ T10] waterforce 0003:1044:7A4D.004D: unknown main item tag 0x0 [ 515.550343][ T10] waterforce 0003:1044:7A4D.004D: unknown main item tag 0x0 [ 515.567467][ T10] waterforce 0003:1044:7A4D.004D: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.3-1/input0 [ 515.630486][ T10] waterforce 0003:1044:7A4D.004D: fw version request failed with -38 [ 515.650122][ T2149] usb 5-1: usb_control_msg returned -32 [ 515.657210][ T2149] usbtmc 5-1:16.0: can't read capabilities [ 515.749616][ T10] usb 6-1: USB disconnect, device number 9 [ 515.859942][ T974] usb 4-1: USB disconnect, device number 64 [ 515.910622][ T24] savu 0003:1E7D:2D5A.004E: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 516.076842][ T5940] usb 2-1: USB disconnect, device number 56 [ 516.090399][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 516.240482][T10918] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 516.252215][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 516.261471][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.278259][ T10] usb 6-1: config 0 descriptor?? [ 516.295173][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 516.391831][T10918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 516.402043][T10918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.415655][T10918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 516.425079][T10918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.654205][T10918] usb 3-1: usb_control_msg returned -32 [ 516.660023][T10918] usbtmc 3-1:16.0: can't read capabilities [ 516.731219][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 516.883471][T11005] tipc: Enabling of bearer rejected, already enabled [ 516.910468][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 516.941137][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 516.984770][ T24] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 517.007524][ T24] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 517.091694][ T10] gspca_sunplus: reg_w_riv err -71 [ 517.092973][T11006] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 517.096926][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 517.112488][ T24] usb 4-1: Product: syz [ 517.146858][ T24] usb 4-1: config 0 descriptor?? [ 518.609995][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 518.626764][ T10] usb 6-1: USB disconnect, device number 10 [ 518.660935][ T2149] usb 5-1: USB disconnect, device number 52 [ 518.947131][T11018] tipc: Enabling of bearer rejected, already enabled [ 519.661590][ T24] waterforce 0003:1044:7A4D.004F: unknown main item tag 0x0 [ 519.668931][ T24] waterforce 0003:1044:7A4D.004F: unknown main item tag 0x0 [ 519.691827][ T24] waterforce 0003:1044:7A4D.004F: unknown main item tag 0x0 [ 519.699580][ T24] waterforce 0003:1044:7A4D.004F: unknown main item tag 0x0 [ 519.708733][ T24] waterforce 0003:1044:7A4D.004F: unknown main item tag 0x0 [ 519.720842][ T24] waterforce 0003:1044:7A4D.004F: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.3-1/input0 [ 519.734478][ T5940] usb 3-1: USB disconnect, device number 50 [ 519.790404][ T24] waterforce 0003:1044:7A4D.004F: fw version request failed with -38 [ 520.060892][T11030] netlink: 'syz.1.1413': attribute type 21 has an invalid length. [ 520.068794][T11030] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1413'. [ 520.078107][T11030] netlink: 'syz.1.1413': attribute type 6 has an invalid length. [ 520.085891][T11030] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1413'. [ 520.378850][ T10] usb 4-1: USB disconnect, device number 65 [ 520.421543][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 520.436323][T11029] fido_id[11029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 520.561739][T11032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1416'. [ 520.604449][ T24] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 520.613646][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.622110][ T24] usb 6-1: Product: syz [ 520.626289][ T24] usb 6-1: Manufacturer: syz [ 520.630956][ T24] usb 6-1: SerialNumber: syz [ 520.636864][ T24] usb 6-1: config 0 descriptor?? [ 520.644930][ T24] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 520.752819][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 520.850473][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 521.783335][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 521.797346][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 521.910359][ T5940] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 522.055759][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.093134][ T10] usb 5-1: Product: syz [ 522.103952][ T10] usb 5-1: Manufacturer: syz [ 522.108836][ T10] usb 5-1: SerialNumber: syz [ 522.134639][ T10] usb 5-1: config 0 descriptor?? [ 522.155431][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 522.220713][ T24] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 522.228744][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 522.231457][ T24] sq905c 6-1:0.0: Reading version command failed [ 522.239895][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 522.248541][ T24] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 522.259381][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 522.278194][ T5940] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 522.288785][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.299839][ T5940] usb 2-1: config 0 descriptor?? [ 522.317862][ T5940] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 522.394551][ T30] audit: type=1326 audit(1750443072.855:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.418650][ T30] audit: type=1326 audit(1750443072.855:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.442492][T10995] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 522.452250][ T30] audit: type=1326 audit(1750443072.855:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.482188][ T30] audit: type=1326 audit(1750443072.855:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.586061][ T30] audit: type=1326 audit(1750443072.855:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.609759][ T30] audit: type=1326 audit(1750443072.875:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.634242][ T30] audit: type=1326 audit(1750443073.025:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.658916][ T30] audit: type=1326 audit(1750443073.025:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 522.695378][ T30] audit: type=1326 audit(1750443073.045:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 523.199636][ T24] usb 6-1: USB disconnect, device number 11 [ 523.209484][ T30] audit: type=1326 audit(1750443073.045:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11045 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f631118e929 code=0x7ffc0000 [ 523.312531][T10995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.323730][T10995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.333589][T10995] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 523.345596][T10995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.356068][T10995] usb 4-1: config 0 descriptor?? [ 523.570318][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 523.754004][T11057] tipc: Enabling of bearer rejected, already enabled [ 525.158424][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.313175][ T10] gspca_sonixj: reg_w1 err -110 [ 525.929661][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.943589][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.953435][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.968410][ T5879] usb 2-1: USB disconnect, device number 57 [ 526.042656][T10995] usbhid 4-1:0.0: can't add hid device: -71 [ 526.171369][ T24] usb 6-1: usb_control_msg returned -32 [ 526.187323][ T24] usbtmc 6-1:16.0: can't read capabilities [ 526.191020][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 526.201589][T10995] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 526.217378][ T10] usb 5-1: USB disconnect, device number 53 [ 526.225513][T10995] usb 4-1: USB disconnect, device number 66 [ 526.680542][ T10] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 526.911959][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.923278][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.938520][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.948147][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.189988][T11076] netlink: 'syz.1.1427': attribute type 21 has an invalid length. [ 527.197957][T11076] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1427'. [ 527.207344][T11076] netlink: 'syz.1.1427': attribute type 6 has an invalid length. [ 527.215272][T11076] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1427'. [ 527.611223][ T10] usb 5-1: usb_control_msg returned -32 [ 527.673447][ T10] usbtmc 5-1:16.0: can't read capabilities [ 527.687800][ T24] usb 6-1: USB disconnect, device number 12 [ 527.930111][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 527.930127][ T30] audit: type=1400 audit(1750443078.385:570): avc: denied { remount } for pid=11079 comm="syz.3.1429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 528.256864][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 528.710372][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 528.725803][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 528.744924][ T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 528.745263][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1435'. [ 528.754863][ T10] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 528.772663][ T10] usb 2-1: Product: syz [ 528.792370][ T10] usb 2-1: config 0 descriptor?? [ 529.450932][ T5893] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 529.620917][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 529.872648][ T5893] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 529.887943][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.025587][ T24] usb 5-1: USB disconnect, device number 54 [ 530.087711][ T5893] usb 6-1: Product: syz [ 530.148864][ T5893] usb 6-1: Manufacturer: syz [ 530.223962][ T5893] usb 6-1: SerialNumber: syz [ 530.249257][ T5893] usb 6-1: config 0 descriptor?? [ 530.273539][ T5893] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 530.348570][T11116] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1440'. [ 530.507072][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 530.908753][ T10] waterforce 0003:1044:7A4D.0050: unknown main item tag 0x0 [ 530.923643][T11119] blk_print_req_error: 54 callbacks suppressed [ 530.923691][T11119] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 530.940487][ T10] waterforce 0003:1044:7A4D.0050: unknown main item tag 0x0 [ 530.947863][ T10] waterforce 0003:1044:7A4D.0050: unknown main item tag 0x0 [ 530.956082][ T10] waterforce 0003:1044:7A4D.0050: unknown main item tag 0x0 [ 530.966866][T11119] I/O error, dev loop7, sector 7936 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 530.977352][ T10] waterforce 0003:1044:7A4D.0050: unknown main item tag 0x0 [ 530.986443][T11119] I/O error, dev loop7, sector 7680 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.003626][T11119] buffer_io_error: 54 callbacks suppressed [ 531.003640][T11119] Buffer I/O error on dev loop7, logical block 960, async page read [ 531.018577][ T10] waterforce 0003:1044:7A4D.0050: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 531.034534][T11119] I/O error, dev loop7, sector 7688 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.048650][T11119] Buffer I/O error on dev loop7, logical block 961, async page read [ 531.050298][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 531.061483][T11119] I/O error, dev loop7, sector 7696 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.079630][T11119] Buffer I/O error on dev loop7, logical block 962, async page read [ 531.088156][T11119] I/O error, dev loop7, sector 7704 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.097915][ T10] waterforce 0003:1044:7A4D.0050: fw version request failed with -38 [ 531.116588][T11119] Buffer I/O error on dev loop7, logical block 963, async page read [ 531.130458][T11119] I/O error, dev loop7, sector 7712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.132345][ T10] usb 2-1: USB disconnect, device number 58 [ 531.150380][T11119] Buffer I/O error on dev loop7, logical block 964, async page read [ 531.159581][T11119] I/O error, dev loop7, sector 7720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.172766][T11119] Buffer I/O error on dev loop7, logical block 965, async page read [ 531.186551][T11119] I/O error, dev loop7, sector 7728 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.202239][T11119] Buffer I/O error on dev loop7, logical block 966, async page read [ 531.224963][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.239983][T11119] I/O error, dev loop7, sector 7736 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.247992][T11121] fido_id[11121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 531.265992][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 531.276519][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.299557][ T24] usb 5-1: config 0 descriptor?? [ 531.307222][T11119] Buffer I/O error on dev loop7, logical block 967, async page read [ 531.340080][T11119] Buffer I/O error on dev loop7, logical block 968, async page read [ 531.350486][T11119] Buffer I/O error on dev loop7, logical block 969, async page read [ 531.694750][T11127] netlink: 'syz.2.1443': attribute type 21 has an invalid length. [ 531.702807][T11127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1443'. [ 531.712214][T11127] netlink: 'syz.2.1443': attribute type 6 has an invalid length. [ 531.720004][T11127] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1443'. [ 532.145553][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 532.151765][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 532.175295][ T24] usb 5-1: USB disconnect, device number 55 [ 532.907972][ T5893] gspca_sonixj: reg_r err -32 [ 532.950474][ T5893] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 533.833019][ T5893] usb 6-1: USB disconnect, device number 13 [ 533.920370][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 534.331188][ T5827] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 534.540492][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 534.925197][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 534.951963][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 534.968351][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 534.981158][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 535.013551][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.036330][ T24] usb 4-1: config 0 descriptor?? [ 535.047874][ T24] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 535.190358][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 535.365555][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 535.392638][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.411408][ T10] usb 5-1: Product: syz [ 535.419791][ T10] usb 5-1: Manufacturer: syz [ 535.431928][ T10] usb 5-1: SerialNumber: syz [ 535.454247][ T10] usb 5-1: config 0 descriptor?? [ 535.491900][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 535.530786][ T9423] block nbd0: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 120 seconds [ 535.541650][ T9423] block nbd0: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 120 seconds [ 535.552792][ T9423] block nbd0: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 120 seconds [ 535.563967][ T9423] block nbd0: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 120 seconds [ 535.675985][T11175] nbd: must specify at least one socket [ 535.807681][T11179] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1461'. [ 535.862831][T11179] kvm: apic: phys broadcast and lowest prio [ 536.609028][ T10] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 536.887120][ T10] sq905c 5-1:0.0: Reading version command failed [ 536.897759][ T10] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 537.206142][ T5928] usb 4-1: USB disconnect, device number 67 [ 537.478800][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1462'. [ 537.499842][T11181] tipc: Enabling of bearer rejected, already enabled [ 537.520377][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 537.784388][ T5928] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 537.793908][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.805213][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 537.814364][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.823695][ T24] usb 2-1: config 0 descriptor?? [ 537.860471][ T5893] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 537.907182][T11194] netlink: 'syz.2.1464': attribute type 21 has an invalid length. [ 537.915192][T11194] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1464'. [ 537.924550][T11194] netlink: 'syz.2.1464': attribute type 6 has an invalid length. [ 537.932628][T11194] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1464'. [ 538.220464][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 538.249460][ T5928] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 538.258589][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.311481][ T2149] usb 5-1: USB disconnect, device number 56 [ 538.319910][ T5928] usb 4-1: Product: syz [ 538.326706][ T5928] usb 4-1: Manufacturer: syz [ 538.332765][ T5928] usb 4-1: SerialNumber: syz [ 538.339898][ T5928] usb 4-1: config 0 descriptor?? [ 538.349447][ T5928] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 538.390322][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 538.402334][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.417366][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 538.432860][ T5893] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 538.441980][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 538.461673][ T5893] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 538.480612][ T24] usb 2-1: USB disconnect, device number 59 [ 538.501197][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.576371][ T5893] usb 6-1: config 0 descriptor?? [ 538.866293][T11203] tipc: Enabling of bearer rejected, already enabled [ 539.954500][ T24] IPVS: starting estimator thread 0... [ 540.281411][T11205] IPVS: using max 73 ests per chain, 175200 per kthread [ 540.343547][ T10] usb 6-1: USB disconnect, device number 14 [ 540.600327][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 541.110350][ T24] usb 2-1: device descriptor read/64, error -71 [ 541.186614][ T5928] gspca_sonixj: reg_r err -32 [ 541.231131][ T5928] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 541.370496][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 541.419395][T11220] nbd: must specify at least one socket [ 541.473426][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'. [ 541.598171][ T24] usb 2-1: device descriptor read/64, error -71 [ 541.783181][ T5827] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11 [ 541.784687][ T24] usb usb2-port1: attempt power cycle [ 542.250755][ T5893] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 542.380386][ T24] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 542.401317][ T24] usb 2-1: device descriptor read/8, error -71 [ 542.407773][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 542.420527][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 542.433883][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 542.445000][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 542.454376][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 542.454601][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.479391][ T5893] usb 6-1: config 0 descriptor?? [ 542.490135][ T5893] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 542.491574][ T5879] usb 4-1: USB disconnect, device number 68 [ 542.636565][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 542.640349][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 542.646310][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.670853][ T24] usb 2-1: device descriptor read/8, error -71 [ 542.678700][ T10] usb 3-1: Product: syz [ 542.696264][ T10] usb 3-1: Manufacturer: syz [ 542.705954][ T10] usb 3-1: SerialNumber: syz [ 542.720105][ T10] usb 3-1: config 0 descriptor?? [ 542.735165][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 542.784552][ T24] usb usb2-port1: unable to enumerate USB device [ 543.044051][T11237] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 543.750511][ T10] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 543.757842][ T10] sq905c 3-1:0.0: Reading version command failed [ 543.776045][ T10] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 543.932174][T11245] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1478'. [ 543.970674][T11245] kvm: apic: phys broadcast and lowest prio [ 544.290334][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 544.442417][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.571657][ T5893] usb 6-1: USB disconnect, device number 15 [ 544.662461][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 544.679642][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.686441][T11257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1482'. [ 544.691429][ T10] usb 2-1: config 0 descriptor?? [ 545.092865][T11259] block nbd5: NBD_DISCONNECT [ 545.266355][ T5893] usb 3-1: USB disconnect, device number 51 [ 545.323336][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 545.361152][T11264] tipc: Enabling of bearer rejected, already enabled [ 546.198417][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 546.269185][ T10] usb 2-1: USB disconnect, device number 64 [ 546.511808][ T2149] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 546.681488][ T2149] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 546.691610][ T2149] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.704802][ T2149] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.713877][ T2149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.926037][ T2149] usb 6-1: usb_control_msg returned -32 [ 546.933600][ T2149] usbtmc 6-1:16.0: can't read capabilities [ 546.943330][ T2149] usb 6-1: USB disconnect, device number 16 [ 547.040379][ T5893] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 547.180330][ T5893] usb 2-1: device descriptor read/64, error -71 [ 547.420449][ T5893] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 547.560724][ T5893] usb 2-1: device descriptor read/64, error -71 [ 547.914999][ T5893] usb usb2-port1: attempt power cycle [ 548.820704][ T5893] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 548.852966][ T5893] usb 2-1: device descriptor read/8, error -71 [ 549.100554][ T5893] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 549.122539][ T5893] usb 2-1: device descriptor read/8, error -71 [ 549.234152][ T30] audit: type=1326 audit(1750443099.695:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11293 comm="syz.3.1494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3718e929 code=0x0 [ 549.258231][ T5893] usb usb2-port1: unable to enumerate USB device [ 549.702930][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 549.910152][ T5827] Bluetooth: hci5: link tx timeout [ 549.916403][ T5827] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 551.220330][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 551.392761][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 551.490448][ T5893] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 551.491318][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 551.698475][ T5833] Bluetooth: hci5: link tx timeout [ 551.703749][ T5833] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 551.716921][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.952656][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 551.962532][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 551.971623][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.994402][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.997669][ T10] usb 3-1: config 0 descriptor?? [ 552.069579][ T10] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 552.210287][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.219369][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.482423][T11330] team0: No ports can be present during mode change [ 552.498188][T11330] netlink: 'syz.5.1501': attribute type 10 has an invalid length. [ 552.563185][T11331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1501'. [ 552.582628][T11330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.628098][T11330] team0: Port device bond0 added [ 552.730598][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 553.143186][ T5893] usb 5-1: usb_control_msg returned -32 [ 553.185834][ T5893] usbtmc 5-1:16.0: can't read capabilities [ 553.322828][T11331] team0 (unregistering): Port device team_slave_0 removed [ 553.401503][ T5940] usb 3-1: USB disconnect, device number 52 [ 553.429153][ T5893] usb 5-1: USB disconnect, device number 57 [ 553.672307][T11331] team0 (unregistering): Port device team_slave_1 removed [ 553.857593][T11331] team0 (unregistering): Port device bond0 removed [ 554.640100][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 554.821728][T11342] tipc: Enabling of bearer rejected, already enabled [ 557.387147][T11355] netlink: 'syz.5.1506': attribute type 21 has an invalid length. [ 557.395070][T11355] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1506'. [ 557.404337][T11355] netlink: 'syz.5.1506': attribute type 6 has an invalid length. [ 557.412110][T11355] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1506'. [ 558.866606][T11365] nbd4: detected capacity change from 0 to 63 [ 558.875621][ T5827] block nbd4: Receive control failed (result -104) [ 559.236420][ T10] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 559.299361][T11375] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 559.309540][T11375] bond0: (slave wlan1): Opening slave failed [ 559.402074][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.417133][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.430855][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.447494][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.630577][ T5879] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 559.671331][ T10] usb 4-1: usb_control_msg returned -32 [ 559.676911][ T10] usbtmc 4-1:16.0: can't read capabilities [ 559.783648][ T5879] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 559.795454][ T5879] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.814931][ T5879] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.828883][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.070038][ T5879] usb 2-1: usb_control_msg returned -32 [ 560.075712][ T5879] usbtmc 2-1:16.0: can't read capabilities [ 560.098958][ T5879] usb 2-1: USB disconnect, device number 69 [ 560.135543][ T5893] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 560.300287][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 560.307628][ T5893] usb 5-1: no configurations [ 560.314940][ T5893] usb 5-1: can't read configurations, error -22 [ 560.470574][ T5893] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 561.190331][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 561.197082][ T5893] usb 5-1: no configurations [ 561.202427][ T5893] usb 5-1: can't read configurations, error -22 [ 561.212256][ T5893] usb usb5-port1: attempt power cycle [ 561.596111][ T5893] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 561.625461][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 561.631600][ T5893] usb 5-1: no configurations [ 561.636199][ T5893] usb 5-1: can't read configurations, error -22 [ 562.179484][ T5940] usb 4-1: USB disconnect, device number 69 [ 562.221013][ T5893] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 562.419742][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.426162][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.442494][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 562.449300][ T5893] usb 5-1: no configurations [ 562.455617][ T5893] usb 5-1: can't read configurations, error -22 [ 562.462408][ T5893] usb usb5-port1: unable to enumerate USB device [ 562.549107][T11418] netlink: 'syz.2.1525': attribute type 21 has an invalid length. [ 562.557146][T11418] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1525'. [ 562.566617][T11418] netlink: 'syz.2.1525': attribute type 6 has an invalid length. [ 562.574590][T11418] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1525'. [ 563.304110][ T5833] Bluetooth: hci6: command 0x1003 tx timeout [ 563.311854][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 563.470317][ T5893] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 564.341406][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 564.738152][ T5893] usb 5-1: config 0 has no interfaces? [ 564.778226][ T5893] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 564.825335][T11439] netlink: 'syz.5.1533': attribute type 21 has an invalid length. [ 564.833285][T11439] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1533'. [ 564.842472][T11439] netlink: 'syz.5.1533': attribute type 6 has an invalid length. [ 564.850247][T11439] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1533'. [ 564.905994][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.009219][ T5893] usb 5-1: Product: syz [ 565.177880][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1534'. [ 565.190329][ T5893] usb 5-1: Manufacturer: syz [ 565.194952][ T5893] usb 5-1: SerialNumber: syz [ 565.618916][ T9423] block nbd0: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 150 seconds [ 565.630371][ T9423] block nbd0: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 150 seconds [ 565.641800][ T9423] block nbd0: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 150 seconds [ 565.649963][ T5893] usb 5-1: config 0 descriptor?? [ 565.654109][ T9423] block nbd0: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 150 seconds [ 566.289744][ T5893] usb 5-1: USB disconnect, device number 62 [ 566.635639][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 566.870542][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 567.041108][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 567.181137][ T30] audit: type=1326 audit(1750443117.645:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 567.204549][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.300927][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.313808][ T10] usb 4-1: Product: syz [ 567.317991][ T10] usb 4-1: Manufacturer: syz [ 567.323275][ T10] usb 4-1: SerialNumber: syz [ 567.329059][ T30] audit: type=1326 audit(1750443117.645:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 567.352417][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.359835][ T10] usb 4-1: config 0 descriptor?? [ 567.852929][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 567.864134][ T30] audit: type=1326 audit(1750443117.675:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 567.887458][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.059500][ T30] audit: type=1326 audit(1750443117.675:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 568.109122][ T30] audit: type=1326 audit(1750443117.675:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 568.188049][ T10] gspca_sonixj: reg_w1 err -71 [ 568.326481][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 568.583394][ T10] usb 4-1: USB disconnect, device number 70 [ 568.612260][ T30] audit: type=1326 audit(1750443117.675:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 569.012669][ T10] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 569.044739][ T30] audit: type=1326 audit(1750443117.755:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 569.124322][ T30] audit: type=1326 audit(1750443117.755:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 569.302274][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 569.318845][T11497] team0: Mode changed to "loadbalance" [ 569.326939][ T30] audit: type=1326 audit(1750443117.765:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 569.479616][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.538650][T11497] netlink: 'syz.4.1548': attribute type 10 has an invalid length. [ 569.555645][T11497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.567576][T11497] bond0: entered allmulticast mode [ 569.575707][T11497] team0: Port device bond0 added [ 569.592535][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 569.613982][ T30] audit: type=1326 audit(1750443117.765:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11467 comm="syz.1.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 569.637370][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.648158][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.662740][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 569.833494][T11497] bond0: left allmulticast mode [ 569.841199][ T10] usb 4-1: config 0 descriptor?? [ 569.858904][T11497] team0 (unregistering): Port device bond0 removed [ 570.583381][ T10] savu 0003:1E7D:2D5A.0051: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 570.737024][ T10] usb 4-1: USB disconnect, device number 71 [ 570.744106][T10995] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 570.810293][ T5833] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 570.930347][T10995] usb 3-1: Using ep0 maxpacket: 8 [ 570.938478][T10995] usb 3-1: config 0 has no interfaces? [ 570.949531][T10995] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 570.960072][T10995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.990161][T10995] usb 3-1: Product: syz [ 571.004879][T10995] usb 3-1: Manufacturer: syz [ 571.048604][T10995] usb 3-1: SerialNumber: syz [ 571.149678][T10995] usb 3-1: config 0 descriptor?? [ 571.221144][T11503] fido_id[11503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 571.417799][T10995] usb 3-1: USB disconnect, device number 53 [ 571.735742][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 572.321135][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 572.821929][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 572.874185][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 572.930295][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 572.940096][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 572.956461][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.968622][ T10] usb 2-1: config 0 descriptor?? [ 572.999575][ T10] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 573.185950][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1556'. [ 575.815330][ T10] usb 2-1: USB disconnect, device number 70 [ 575.830542][ T43] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 575.980312][T10995] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 576.011582][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 576.031507][ T12] Bluetooth: Error in BCSP hdr checksum [ 576.039398][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.052168][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 576.063239][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.076275][ T43] usb 4-1: config 0 descriptor?? [ 576.152196][T10995] usb 3-1: Using ep0 maxpacket: 8 [ 576.171297][T10995] usb 3-1: config 0 has no interfaces? [ 576.178810][T10995] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 576.189368][T10995] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.197575][T10995] usb 3-1: Product: syz [ 576.201942][T10995] usb 3-1: Manufacturer: syz [ 576.210296][ T10] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 576.218117][T10995] usb 3-1: SerialNumber: syz [ 576.226634][T10995] usb 3-1: config 0 descriptor?? [ 576.300604][ T59] Bluetooth: Error in BCSP hdr checksum [ 576.373665][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 576.392438][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 576.392454][ T30] audit: type=1326 audit(1750443126.855:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11550 comm="syz.5.1566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56fd8e929 code=0x0 [ 576.425536][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.435427][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 576.447810][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.458639][T10995] usb 3-1: USB disconnect, device number 54 [ 576.476206][ T10] usb 2-1: config 0 descriptor?? [ 576.501050][ T43] savu 0003:1E7D:2D5A.0052: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 576.560629][ T12] Bluetooth: Error in BCSP hdr checksum [ 576.751877][ T43] usb 4-1: USB disconnect, device number 72 [ 576.820781][ T3464] Bluetooth: Error in BCSP hdr checksum [ 576.909060][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 576.916839][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 576.927067][ T10] usb 2-1: USB disconnect, device number 71 [ 577.080594][ T59] Bluetooth: Error in BCSP hdr checksum [ 577.307431][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1568'. [ 577.352808][ T49] Bluetooth: Error in BCSP hdr checksum [ 577.638711][ T3464] Bluetooth: Error in BCSP hdr checksum [ 577.751260][T11569] bridge_slave_0: left allmulticast mode [ 577.757073][T11569] bridge_slave_0: left promiscuous mode [ 577.762885][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.780758][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 577.810068][T11569] bridge_slave_1: left allmulticast mode [ 577.817482][T11569] bridge_slave_1: left promiscuous mode [ 577.823640][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.836491][T11569] bond0: (slave bond_slave_0): Releasing backup interface [ 577.846841][T11569] bond0: (slave bond_slave_1): Releasing backup interface [ 577.859405][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.867795][T11569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.939535][T11569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.947400][T11569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.958327][ T12] Bluetooth: Error in BCSP hdr checksum [ 578.518032][ T59] Bluetooth: Error in BCSP hdr checksum [ 578.774233][ T59] Bluetooth: Error in BCSP hdr checksum [ 579.031061][ T12] Bluetooth: Error in BCSP hdr checksum [ 579.041134][T11582] syz!: rxe_newlink: already configured on team_slave_0 [ 580.460396][ T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 580.630317][ T10] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 580.710280][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 580.730061][ T43] usb 4-1: config 0 has no interfaces? [ 580.744699][ T43] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 580.759201][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.773293][ T43] usb 4-1: Product: syz [ 580.796277][ T43] usb 4-1: Manufacturer: syz [ 580.802534][ T43] usb 4-1: SerialNumber: syz [ 580.880483][ T43] usb 4-1: config 0 descriptor?? [ 580.886613][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.910973][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.950611][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 580.959721][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.122241][ T10] usb 3-1: config 0 descriptor?? [ 581.127037][ T43] usb 4-1: USB disconnect, device number 73 [ 581.196439][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1580'. [ 581.347182][T11610] netlink: 'syz.5.1581': attribute type 10 has an invalid length. [ 581.981993][ T10] savu 0003:1E7D:2D5A.0053: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 582.024093][ T10] usb 3-1: USB disconnect, device number 55 [ 582.070437][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 582.328327][ T43] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 582.331427][T11619] fido_id[11619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 582.440888][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.449215][ T43] usb 6-1: Product: syz [ 582.459663][ T43] usb 6-1: Manufacturer: syz [ 582.480774][ T43] usb 6-1: SerialNumber: syz [ 582.493699][ T43] usb 6-1: config 0 descriptor?? [ 582.516701][ T43] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 583.042662][ T43] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 583.050303][ T43] sq905c 6-1:0.0: Get version command failed [ 583.056652][ T43] sq905c 6-1:0.0: probe with driver sq905c failed with error -110 [ 583.414288][ T5833] block nbd2: Receive control failed (result -32) [ 583.421435][T11627] block nbd2: shutting down sockets [ 584.770447][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 585.184436][ T10] usb 6-1: USB disconnect, device number 17 [ 585.608076][T11661] team0: Mode changed to "loadbalance" [ 585.630813][T11661] netlink: 'syz.2.1595': attribute type 10 has an invalid length. [ 585.638741][T11661] bond0: left allmulticast mode [ 585.649442][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.660351][T11661] bond0: entered allmulticast mode [ 585.668356][T11661] team0: Port device bond0 added [ 585.701823][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 586.019646][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 587.399448][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 587.439381][ T10] usb 5-1: config 0 has no interfaces? [ 587.446655][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 587.460263][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.543445][ T10] usb 5-1: Product: syz [ 587.547689][ T10] usb 5-1: Manufacturer: syz [ 587.567000][ T10] usb 5-1: SerialNumber: syz [ 587.584526][ T10] usb 5-1: config 0 descriptor?? [ 587.692271][T11661] bond0: left allmulticast mode [ 587.719747][T11661] team0 (unregistering): Port device bond0 removed [ 587.796901][ T10] usb 5-1: USB disconnect, device number 63 [ 588.320266][ T2149] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 588.570624][ T5944] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 588.580076][ T2149] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 588.750327][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 588.791792][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.851311][ T5944] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 588.931287][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 589.005397][ T5944] usb 2-1: Product: syz [ 589.047423][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.057075][ T2149] usb 4-1: Product: syz [ 589.061054][ T5944] usb 2-1: config 0 descriptor?? [ 589.061273][ T2149] usb 4-1: Manufacturer: syz [ 589.070795][ T2149] usb 4-1: SerialNumber: syz [ 589.089052][ T2149] usb 4-1: config 0 descriptor?? [ 589.105330][ T2149] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 589.185971][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 589.312662][ T9423] block nbd4: Possible stuck request ffff888026cb5080: control (read@0,1024B). Runtime 30 seconds [ 589.323993][ T9423] block nbd4: Possible stuck request ffff888026cb5240: control (read@1024,1024B). Runtime 30 seconds [ 589.335647][ T9423] block nbd4: Possible stuck request ffff888026cb5400: control (read@2048,1024B). Runtime 30 seconds [ 589.349387][ T9423] block nbd4: Possible stuck request ffff888026cb55c0: control (read@3072,1024B). Runtime 30 seconds [ 589.510337][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 590.027809][ T2149] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 590.043021][ T2149] sq905c 4-1:0.0: Get version command failed [ 590.051702][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 590.060426][ T2149] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 590.070438][ T43] usb 3-1: can't read configurations, error -61 [ 590.450740][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 590.726101][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 590.741523][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 590.912318][ T43] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 590.920805][ T43] usb 3-1: can't read configurations, error -61 [ 590.928396][ T43] usb usb3-port1: attempt power cycle [ 591.027214][ T5944] waterforce 0003:1044:7A4D.0054: unknown main item tag 0x0 [ 591.034742][ T5944] waterforce 0003:1044:7A4D.0054: unknown main item tag 0x0 [ 591.045911][ T5944] waterforce 0003:1044:7A4D.0054: unknown main item tag 0x0 [ 591.053852][ T5944] waterforce 0003:1044:7A4D.0054: unknown main item tag 0x0 [ 591.062368][ T5944] waterforce 0003:1044:7A4D.0054: unknown main item tag 0x0 [ 591.074009][ T5944] waterforce 0003:1044:7A4D.0054: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.1-1/input0 [ 591.163235][ T10] usb 4-1: USB disconnect, device number 74 [ 591.170384][T10995] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 591.179172][ T5944] waterforce 0003:1044:7A4D.0054: fw version request failed with -38 [ 591.270575][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 591.558369][T10995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 591.569514][ T5940] usb 2-1: USB disconnect, device number 72 [ 591.584704][ T43] usb 3-1: device descriptor read/8, error -71 [ 591.657304][T10995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.772967][T11707] fido_id[11707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 591.807120][T10995] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 591.835238][T10995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.402863][T10995] usb 6-1: config 0 descriptor?? [ 592.430524][ T43] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 592.476005][ T43] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 592.490229][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.498299][ T43] usb 3-1: Product: syz [ 592.562814][ T43] usb 3-1: Manufacturer: syz [ 592.567470][ T43] usb 3-1: SerialNumber: syz [ 592.602818][ T43] usb 3-1: config 0 descriptor?? [ 592.637292][ T43] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 593.011594][T10995] usbhid 6-1:0.0: can't add hid device: -71 [ 593.017625][T10995] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 593.030386][ T2149] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 593.192088][T11729] tipc: Enabling of bearer rejected, already enabled [ 593.344813][T10995] usb 6-1: USB disconnect, device number 18 [ 593.397310][ T43] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 595.359429][ T43] sq905c 3-1:0.0: Get version command failed [ 595.366731][ T43] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 595.530295][ T2149] usb 4-1: Using ep0 maxpacket: 8 [ 595.585341][ T2149] usb 4-1: config 0 has no interfaces? [ 595.592776][ T2149] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 595.610438][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.625284][ T2149] usb 4-1: Product: syz [ 595.635401][ T2149] usb 4-1: Manufacturer: syz [ 595.671381][ T2149] usb 4-1: SerialNumber: syz [ 595.694427][T11739] netlink: 'syz.5.1617': attribute type 21 has an invalid length. [ 595.702386][T11739] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1617'. [ 595.711664][T11739] netlink: 'syz.5.1617': attribute type 6 has an invalid length. [ 595.719462][T11739] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1617'. [ 596.042850][ T9423] block nbd0: Possible stuck request ffff888026b3e000: control (read@0,1024B). Runtime 180 seconds [ 596.053641][ T9423] block nbd0: Possible stuck request ffff888026b3e1c0: control (read@1024,1024B). Runtime 180 seconds [ 596.061986][ T2149] usb 4-1: config 0 descriptor?? [ 596.064665][ T9423] block nbd0: Possible stuck request ffff888026b3e380: control (read@2048,1024B). Runtime 180 seconds [ 596.080532][ T9423] block nbd0: Possible stuck request ffff888026b3e540: control (read@3072,1024B). Runtime 180 seconds [ 596.137786][ T2149] usb 4-1: can't set config #0, error -71 [ 596.190723][ T10] usb 3-1: USB disconnect, device number 59 [ 596.224030][ T2149] usb 4-1: USB disconnect, device number 75 [ 596.533769][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 596.940352][ T2149] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 597.160655][ T2149] usb 4-1: Using ep0 maxpacket: 32 [ 597.218056][ T2149] usb 4-1: config 0 interface 0 has no altsetting 0 [ 597.270355][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 597.296917][ T2149] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 597.391880][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 597.478950][ T2149] usb 4-1: Product: syz [ 597.500453][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 597.548383][ T43] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 597.626613][ T2149] usb 4-1: config 0 descriptor?? [ 597.649751][ T43] usb 6-1: can't read configurations, error -61 [ 598.170793][ T43] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 598.430401][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 598.437399][ T43] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 598.451538][ T43] usb 6-1: can't read configurations, error -61 [ 598.458319][ T43] usb usb6-port1: attempt power cycle [ 598.694607][ T2149] waterforce 0003:1044:7A4D.0055: unknown main item tag 0x0 [ 598.710444][ T2149] waterforce 0003:1044:7A4D.0055: unknown main item tag 0x0 [ 598.718306][ T2149] waterforce 0003:1044:7A4D.0055: unknown main item tag 0x0 [ 598.726104][ T2149] waterforce 0003:1044:7A4D.0055: unknown main item tag 0x0 [ 598.733657][ T2149] waterforce 0003:1044:7A4D.0055: unknown main item tag 0x0 [ 598.742393][ T2149] waterforce 0003:1044:7A4D.0055: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.3-1/input0 [ 598.810648][ T2149] waterforce 0003:1044:7A4D.0055: fw version request failed with -38 [ 598.820303][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 598.820303][T10995] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 598.849781][T11762] syz!: rxe_newlink: already configured on team_slave_0 [ 598.881812][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 598.893021][ T43] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 598.930316][ T43] usb 6-1: can't read configurations, error -61 [ 599.000415][T10995] usb 3-1: Using ep0 maxpacket: 32 [ 599.009123][ T2149] usb 4-1: USB disconnect, device number 76 [ 599.025218][T10995] usb 3-1: config 0 interface 0 has no altsetting 0 [ 599.043746][T11763] fido_id[11763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 599.065059][T10995] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 599.080371][ T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 599.109136][T10995] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 599.110892][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 599.141533][T10995] usb 3-1: Product: syz [ 599.150159][ T43] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 599.165517][ T43] usb 6-1: can't read configurations, error -61 [ 599.174738][ T43] usb usb6-port1: unable to enumerate USB device [ 599.184047][T10995] usb 3-1: config 0 descriptor?? [ 600.891592][T10995] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 600.950282][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 600.957973][T10995] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 600.978344][T10995] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 600.998536][T10995] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 601.013047][T10995] waterforce 0003:1044:7A4D.0056: unknown main item tag 0x0 [ 601.210505][T11783] tipc: Enabling of bearer rejected, already enabled [ 601.400279][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 601.888838][T11785] overlayfs: missing 'lowerdir' [ 602.119053][T10995] waterforce 0003:1044:7A4D.0056: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0 [ 602.796565][ T10] usb 6-1: config 0 has no interfaces? [ 603.024929][ T10] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 603.046212][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.061826][ T10] usb 6-1: Product: syz [ 603.070256][ T10] usb 6-1: Manufacturer: syz [ 603.080249][ T10] usb 6-1: SerialNumber: syz [ 603.084896][T10995] waterforce 0003:1044:7A4D.0056: fw version request failed with -38 [ 603.100045][ T10] usb 6-1: config 0 descriptor?? [ 603.144546][T10995] usb 3-1: USB disconnect, device number 60 [ 603.463621][T11797] fido_id[11797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 604.046153][ T30] audit: type=1326 audit(1750443153.815:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 604.052041][ T5879] usb 6-1: USB disconnect, device number 23 [ 604.073604][ T30] audit: type=1326 audit(1750443153.815:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 604.164128][ T30] audit: type=1326 audit(1750443153.815:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 604.235566][ T30] audit: type=1326 audit(1750443153.825:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 604.280594][ T30] audit: type=1326 audit(1750443153.825:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 605.532220][ T30] audit: type=1326 audit(1750443153.825:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 605.555462][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.746606][ T30] audit: type=1326 audit(1750443153.905:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 605.779835][ T30] audit: type=1326 audit(1750443153.905:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 605.851792][ T30] audit: type=1326 audit(1750443153.915:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 606.006998][ T30] audit: type=1326 audit(1750443153.915:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11799 comm="syz.1.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e578e929 code=0x7ffc0000 [ 606.561128][ T2149] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 606.847512][ T2149] usb 4-1: Using ep0 maxpacket: 16 [ 606.908119][ T2149] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.999843][ T2149] usb 4-1: config 0 has no interfaces? [ 607.020078][ T2149] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 607.042038][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.075743][ T2149] usb 4-1: config 0 descriptor?? [ 607.301338][ T5879] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 607.991586][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.059252][ T5879] usb 3-1: config 0 has no interfaces? [ 608.070308][T10995] usb 4-1: USB disconnect, device number 77 [ 608.091669][ T5879] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 608.123433][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.152562][T11835] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1643'. [ 608.170398][T11831] nbd5: detected capacity change from 0 to 63 [ 608.186798][ T5879] usb 3-1: config 0 descriptor?? [ 608.210743][ T5827] block nbd5: Receive control failed (result -104) [ 608.211738][ T5828] block nbd5: Send control failed (result -32) [ 608.226491][ T5828] block nbd5: Request send failed, requeueing [ 608.230927][T11835] kvm: apic: phys broadcast and lowest prio [ 608.236412][ T9423] block nbd5: Dead connection, failed to find a fallback [ 608.246942][ T9423] block nbd5: shutting down sockets [ 608.252417][ T9423] blk_print_req_error: 32 callbacks suppressed [ 608.252430][ T9423] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 608.268512][ T9423] buffer_io_error: 982 callbacks suppressed [ 608.268522][ T9423] Buffer I/O error on dev nbd5, logical block 3, async page read [ 608.609926][T11844] tipc: Enabling of bearer rejected, already enabled [ 609.440993][ T2149] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 609.717571][T11850] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 612.736766][ T5189] udevd[5189]: worker [6003] /devices/virtual/block/nbd0 timeout; kill it [ 612.781963][ T5189] udevd[5189]: seq 16206 '/devices/virtual/block/nbd0' killed [ 612.792348][ T5879] usb 3-1: USB disconnect, device number 61 [ 612.863502][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 612.863517][ T30] audit: type=1326 audit(1750443163.325:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.1647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed3718e929 code=0x0 [ 612.892241][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.783007][T11866] netlink: 'syz.2.1648': attribute type 21 has an invalid length. [ 613.790945][T11866] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1648'. [ 613.800003][T11866] netlink: 'syz.2.1648': attribute type 6 has an invalid length. [ 613.807770][T11866] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1648'. [ 613.900362][T10995] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 614.254794][T10995] usb 5-1: Using ep0 maxpacket: 8 [ 614.264213][T10995] usb 5-1: config 0 has no interfaces? [ 614.271553][T10995] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 614.281139][T10995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.289169][T10995] usb 5-1: Product: syz [ 614.300464][T10995] usb 5-1: Manufacturer: syz [ 614.308099][T10995] usb 5-1: SerialNumber: syz [ 614.319416][T10995] usb 5-1: config 0 descriptor?? [ 614.539372][ T5879] usb 5-1: USB disconnect, device number 64 [ 614.550363][T11880] nbd3: detected capacity change from 0 to 63 [ 614.580650][ T5827] block nbd3: Receive control failed (result -104) [ 614.992130][T11889] netlink: 'syz.3.1655': attribute type 21 has an invalid length. [ 615.000043][T11889] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1655'. [ 615.009303][T11889] netlink: 'syz.3.1655': attribute type 6 has an invalid length. [ 615.017108][T11889] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1655'. [ 615.582312][T11893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 615.894655][ T5827] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11 [ 616.167042][T11905] tipc: Enabling of bearer rejected, already enabled [ 617.060430][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 617.149911][T11907] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1660'. [ 617.261475][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 617.284712][T11907] kvm: apic: phys broadcast and lowest prio [ 617.321079][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 617.451053][ T31] INFO: task syz.0.1248:10434 blocked for more than 143 seconds. [ 617.458836][ T31] Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 [ 617.468189][ T5827] Bluetooth: hci5: link tx timeout [ 617.474249][ T5827] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 617.487484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.789751][ T31] task:syz.0.1248 state:D stack:28888 pid:10434 tgid:10433 ppid:5822 task_flags:0x400040 flags:0x00004004 [ 617.804222][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 617.814157][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 617.823287][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.831523][ T31] Call Trace: [ 617.838378][ T31] [ 617.847265][ T10] usb 6-1: config 0 descriptor?? [ 617.848779][ T31] __schedule+0x116a/0x5de0 [ 617.857573][ T10] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 617.882976][ T31] ? __pfx___schedule+0x10/0x10 [ 617.894176][ T31] ? find_held_lock+0x2b/0x80 [ 617.904241][ T31] ? schedule+0x2d7/0x3a0 [ 617.911689][ T31] schedule+0xe7/0x3a0 [ 617.919917][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.932751][ T31] __mutex_lock+0x6c7/0xb90 [ 617.941420][ T31] ? bdev_open+0xa2/0xe40 [ 617.950075][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.974798][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 617.996003][ T31] ? __pfx_ilookup+0x10/0x10 [ 618.010647][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 618.027648][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 618.034998][ T31] ? bdev_open+0xa2/0xe40 [ 618.039585][ T31] bdev_open+0xa2/0xe40 [ 618.047212][ T31] blkdev_open+0x280/0x3f0 [ 618.051904][ T31] do_dentry_open+0x744/0x1c10 [ 618.063869][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 618.069043][ T31] vfs_open+0x82/0x3f0 [ 618.082825][ T31] path_openat+0x1de4/0x2cb0 [ 618.087513][ T31] ? __pfx_path_openat+0x10/0x10 [ 618.104266][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 618.109308][ T31] do_filp_open+0x20b/0x470 [ 618.114820][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 618.120166][ T31] ? alloc_fd+0x471/0x7d0 [ 618.125228][ T31] do_sys_openat2+0x11b/0x1d0 [ 618.129978][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 618.135791][ T31] ? find_held_lock+0x2b/0x80 [ 618.140835][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 618.146061][ T31] __x64_sys_openat+0x174/0x210 [ 618.151227][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 618.157296][ T31] ? do_user_addr_fault+0x843/0x1370 [ 618.163242][ T31] do_syscall_64+0xcd/0x4c0 [ 618.168391][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.174943][ T31] RIP: 0033:0x7f7f30d8d290 [ 618.179584][ T31] RSP: 002b:00007f7f31c00b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 618.191656][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.204284][ T31] RAX: ffffffffffffffda RBX: 0000000000004080 RCX: 00007f7f30d8d290 [ 618.212866][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 618.220081][ T31] RDX: 0000000000004080 RSI: 00007f7f31c00c10 RDI: 00000000ffffff9c [ 618.233650][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.240453][ T31] RBP: 00007f7f31c00c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 618.253053][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 618.255161][ T24] usb 5-1: config 0 descriptor?? [ 618.272130][ T31] R13: 0000000000000001 R14: 00007f7f30fb5fa0 R15: 00007ffe61874818 [ 618.289036][ T31] [ 618.295654][ T31] [ 618.295654][ T31] Showing all locks held in the system: [ 618.315564][ T31] 5 locks held by kworker/1:0/24: [ 618.331706][ T31] #0: ffff8880226a9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 618.347805][ T31] #1: ffffc900001e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 618.359412][ T31] #2: ffff888143b91198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 618.467226][ T31] #3: ffff88806aa44198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 618.476616][ T31] #4: ffff888028c54160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 618.485975][ T31] 1 lock held by khungtaskd/31: [ 618.491038][ T31] #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 618.501025][ T31] 2 locks held by getty/5575: [ 618.505746][ T31] #0: ffff8880330830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 618.515606][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 618.525813][ T31] 3 locks held by kworker/u9:3/5827: [ 618.531165][ T31] #0: ffff88802768b948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 618.541530][ T31] #1: ffffc900041bfd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 618.553543][ T31] #2: ffff88801f784d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 618.563468][ T31] 1 lock held by udevd/5828: [ 618.568105][ T31] #0: ffff888142b11358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 618.578081][ T31] 1 lock held by udevd/5840: [ 618.582759][ T31] #0: ffff888026b0d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 618.592192][ T31] 1 lock held by udevd/6003: [ 618.596831][ T31] #0: ffff888026ae1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 618.606240][ T31] 1 lock held by udevd/6210: [ 618.610855][ T31] #0: ffff888026bcb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 618.620216][ T31] 1 lock held by syz.0.1248/10434: [ 618.625319][ T31] #0: ffff888026ae1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 618.634629][ T31] 1 lock held by syz.1.1659/11901: [ 618.639728][ T31] #0: ffff8880583d2068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x44/0x320 [ 618.648841][ T31] 1 lock held by syz.1.1659/11904: [ 618.653994][ T31] #0: ffff8880583d2068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 618.662734][ T31] [ 618.665067][ T31] ============================================= [ 618.665067][ T31] [ 618.677437][ T31] NMI backtrace for cpu 0 [ 618.677451][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 618.677473][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.677484][ T31] Call Trace: [ 618.677490][ T31] [ 618.677498][ T31] dump_stack_lvl+0x116/0x1f0 [ 618.677527][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 618.677550][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.677575][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 618.677599][ T31] watchdog+0xf70/0x12c0 [ 618.677623][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.677641][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 618.677668][ T31] ? __kthread_parkme+0x19e/0x250 [ 618.677693][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.677712][ T31] kthread+0x3c2/0x780 [ 618.677728][ T31] ? __pfx_kthread+0x10/0x10 [ 618.677756][ T31] ? rcu_is_watching+0x12/0xc0 [ 618.677779][ T31] ? __pfx_kthread+0x10/0x10 [ 618.677797][ T31] ret_from_fork+0x5d4/0x6f0 [ 618.677821][ T31] ? __pfx_kthread+0x10/0x10 [ 618.677837][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.677872][ T31] [ 618.677878][ T31] Sending NMI from CPU 0 to CPUs 1: [ 618.798558][ C1] NMI backtrace for cpu 1 [ 618.798573][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 618.798591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.798599][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 618.798623][ C1] Code: 7b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 f0 29 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 618.798637][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 618.798649][ C1] RAX: 00000000032b240d RBX: 0000000000000001 RCX: ffffffff8b801c19 [ 618.798659][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a370 RDI: ffffffff8c1579e0 [ 618.798668][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 618.798677][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 618.798685][ C1] R13: ffff88801e2b2440 R14: ffffffff90a81a50 R15: 0000000000000000 [ 618.798694][ C1] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 618.798709][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.798718][ C1] CR2: 00007fed37380ab8 CR3: 0000000075f4c000 CR4: 00000000003526f0 [ 618.798727][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 618.798736][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 618.798745][ C1] Call Trace: [ 618.798750][ C1] [ 618.798755][ C1] default_idle+0x13/0x20 [ 618.798768][ C1] default_idle_call+0x6d/0xb0 [ 618.798781][ C1] do_idle+0x391/0x510 [ 618.798799][ C1] ? __pfx_do_idle+0x10/0x10 [ 618.798815][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 618.798835][ C1] cpu_startup_entry+0x4f/0x60 [ 618.798851][ C1] start_secondary+0x21d/0x2b0 [ 618.798868][ C1] ? __pfx_start_secondary+0x10/0x10 [ 618.798887][ C1] common_startup_64+0x13e/0x148 [ 618.798905][ C1] [ 618.803367][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 618.805485][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 618.805500][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 618.805520][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.805530][ T31] Call Trace: [ 618.805536][ T31] [ 618.805543][ T31] dump_stack_lvl+0x3d/0x1f0 [ 618.805570][ T31] panic+0x71c/0x800 [ 618.805594][ T31] ? __pfx_panic+0x10/0x10 [ 618.805616][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 618.805639][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.805660][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 618.805680][ T31] ? watchdog+0xdda/0x12c0 [ 618.805697][ T31] ? watchdog+0xdcd/0x12c0 [ 618.805717][ T31] watchdog+0xdeb/0x12c0 [ 618.805742][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.805758][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 618.805783][ T31] ? __kthread_parkme+0x19e/0x250 [ 618.805805][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.805823][ T31] kthread+0x3c2/0x780 [ 618.805838][ T31] ? __pfx_kthread+0x10/0x10 [ 618.805855][ T31] ? rcu_is_watching+0x12/0xc0 [ 618.805874][ T31] ? __pfx_kthread+0x10/0x10 [ 618.805890][ T31] ret_from_fork+0x5d4/0x6f0 [ 618.805911][ T31] ? __pfx_kthread+0x10/0x10 [ 618.805926][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.805952][ T31] [ 618.816277][ T31] Kernel Offset: disabled